FREE CPMS HIPAA and Compliance Rules Questions and Answers

Question 1

A medical scribe is working in a busy emergency department.
After a patient encounter, the scribe jots down the patient's name and medical record number on a piece of scrap paper to remember to complete the chart later.
The scribe then places the paper in their pocket and forgets about it until the end of their shift.
Which core HIPAA principle has been violated?

Accepted Answer

Safeguarding Protected Health Information (PHI)

Answer

The Minimum Necessary Rule

Answer

The Patient's Right of Access

Answer

The Breach Notification Rule

Question 2

Which of the following scenarios BEST illustrates the HIPAA 'Minimum Necessary' standard as it applies to a medical scribe?

Accepted Answer

Accessing only the current encounter notes and the lab results ordered by the physician during today's visit to complete the chart.

Answer

Reading the entire patient chart, including records from 10 years ago, to gain a full understanding of their history.

Answer

Discussing the patient's interesting diagnosis with another scribe in the breakroom.

Answer

Using a personal, unsecured laptop to finish charts at home to be more efficient.

Question 3

A medical scribe is employed by a third-party scribe service company, not directly by the hospital. In the context of HIPAA, what is the scribe service company's relationship to the hospital?

Accepted Answer

Business Associate

Answer

Covered Entity

Answer

Healthcare Clearinghouse

Answer

Unaffiliated Third Party

Question 4

A patient at a clinic discovers that their medical record contains an error documented by a scribe. According to the HIPAA Privacy Rule, what right does the patient have regarding this information?

Accepted Answer

The right to request an amendment to their medical record.

Answer

The right to have the entire entry deleted immediately.

Answer

The right to sue the medical scribe for malpractice.

Answer

The right to write their own note directly in the electronic health record.

Question 5

Under the HIPAA Security Rule, which of the following is considered a critical TECHNICAL safeguard for a medical scribe using an Electronic Health Record (EHR) system?

Accepted Answer

Using a unique, strong password and enabling two-factor authentication.

Answer

Signing a confidentiality agreement upon being hired.

Answer

Positioning the computer screen to prevent public viewing.

Answer

Shredding any papers with patient information at the end of a shift.

Question 6

A hospital discovers that a scribe's unencrypted work laptop, containing the PHI of 600 patients, was stolen. According to the HIPAA Breach Notification Rule, which of the following actions is the hospital required to take?

Accepted Answer

Notify all affected individuals, the local media, and the Secretary of HHS within 60 days of discovery.

Answer

Post a notice in the hospital lobby and report the breach in their annual compliance report.

Answer

Notify only the affected individuals via first-class mail within 90 days.

Answer

Wait for law enforcement to recover the laptop before taking any notification action.