EHR Health Information Privacy & Security 5

Question 1

A covered entity discovers that an unauthorized person accessed 600 patient records. Which breach notification action is required?

Accepted Answer

Notify affected individuals, the Secretary of HHS, and prominent local media outlets

Answer

When a breach affects 500 or more individuals in a state or jurisdiction, the covered entity must notify affected individuals, HHS, and prominent local media.

Question 2

Which of the following best describes 'chain of trust' in the context of health information exchange?

Accepted Answer

A series of agreements ensuring all entities in an exchange network protect PHI appropriately

Answer

Chain of trust refers to a series of BAAs and agreements ensuring all parties in a data exchange network commit to protecting PHI.

Question 3

What is the primary goal of data encryption during transmission (data in transit)?

Accepted Answer

To prevent unauthorized interception from reading the data

Answer

Encrypting data in transit ensures that even if the transmission is intercepted, the data cannot be read without the decryption key.

Question 4

A patient has the right under HIPAA to request restrictions on disclosures of their PHI. When MUST a covered entity honor such a request?

Accepted Answer

When the patient requests restriction of disclosure to a health plan for a service paid out-of-pocket in full

Answer

Under HITECH, covered entities must honor a patient's request to restrict disclosure to a health plan when the patient has paid for the service entirely out-of-pocket.

Question 5

Which of the following is an example of a technical safeguard under the HIPAA Security Rule?

Accepted Answer

Implementing automatic session timeouts in the EHR system

Answer

Automatic session timeouts are a technical safeguard that prevent unauthorized access to an unattended workstation logged into the EHR.

(EHR) Electronic Health Records Program Certification Practice Test

(EHR) Electronic Health Records Program Certification Practice Test

EHR Health Information Privacy & Security 5