HAC Healthcare Analytics Policy & Compliance 2

Question 1

Under HIPAA's Minimum Necessary Standard, a healthcare analyst requesting a full patient dataset for a quality improvement project should:

Accepted Answer

Request only the data elements needed to accomplish the specific analytical purpose

Answer

The Minimum Necessary Standard requires that access to PHI be limited to only the information needed to accomplish the intended purpose.

Question 2

Which federal law governs the privacy and security of substance use disorder patient records, often requiring stricter protections than HIPAA?

Accepted Answer

42 CFR Part 2

Answer

42 CFR Part 2 provides special confidentiality protections for records of patients treated for substance use disorders, requiring explicit patient consent for most disclosures.

Question 3

A healthcare organization experiences a breach affecting 600 patients' PHI. Under HIPAA Breach Notification Rule, the covered entity must notify HHS:

Accepted Answer

Within 60 days of the end of the calendar year in which the breach was discovered

Answer

For breaches affecting fewer than 500 individuals, HIPAA allows covered entities to log and report to HHS annually, within 60 days after the calendar year ends.

Question 4

The HITECH Act enhanced HIPAA enforcement by:

Accepted Answer

Increasing civil monetary penalties and extending HIPAA obligations to business associates

Answer

HITECH strengthened HIPAA by raising penalties (up to $1.9M per violation category per year) and making business associates directly liable for HIPAA compliance.

Question 5

A data analytics team wants to use patient data for research without individual patient authorization. Which HIPAA pathway allows this if an IRB waives authorization requirements?

Accepted Answer

Research exception under 45 CFR §164.512(i)

Answer

HIPAA permits use of PHI for research without authorization when an IRB or Privacy Board waives the authorization requirement under 45 CFR §164.512(i).

(HAC) Healthcare Analytics Certification Practice Test

(HAC) Healthcare Analytics Certification Practice Test

HAC Healthcare Analytics Policy & Compliance 2