FREE CHPC Safeguarding Patient Information Questions and Answers

Question 1

What is an example of a technical safeguard under the HIPAA Security Rule?

Accepted Answer

Implementing encryption for electronic Protected Health Information (ePHI)

Answer

Conducting workforce HIPAA privacy training

Answer

Securing access to physical records in locked cabinets

Answer

Conducting periodic risk assessments

Question 2

A hospital employee leaves a laptop containing unencrypted ePHI in their car, and it is stolen. What must the organization do under the HIPAA Breach Notification Rule?

Accepted Answer

Notify affected individuals, the OCR, and possibly the media

Answer

Do nothing if the car was locked

Answer

Wait to see if the data is accessed before taking action

Answer

Only notify individuals if more than 500 records are involved

Question 3

Which of the following is NOT required as a physical safeguard under HIPAA?

Accepted Answer

Encrypting PHI stored on mobile devices

Answer

Limiting access to areas containing PHI

Answer

Installing security cameras to monitor PHI access

Answer

Keeping printed medical records in locked storage

Question 4

A nurse accesses the electronic health record (EHR) of a friend who is admitted to the hospital without a work-related reason.
What type of safeguard failure does this represent?

Accepted Answer

Physical safeguard failure

Answer

Administrative safeguard failure

Answer

There is no failure if the nurse does not share the information

Answer: B

Question 5

What is the best way to safeguard PHI on mobile devices such as laptops or smartphones?

Accepted Answer

Implementing encryption for PHI

Answer

Using strong passwords or biometric authentication

Answer

Allowing unrestricted use of personal devices for PHI access