HAC Healthcare Analytics Policy & Compliance 3

Question 1

The ONC's Information Blocking Rule prohibits healthcare actors from interfering with the access, exchange, or use of electronic health information (EHI). Which entity is NOT considered a regulated 'actor' under this rule?

Accepted Answer

Individual patients requesting their own records

Answer

Individual patients are the intended beneficiaries of the Information Blocking Rule, not regulated actors subject to its prohibitions.

Question 2

Under the Medicare Conditions of Participation, hospitals must retain medical records for at least:

Accepted Answer

5 years from the date of discharge or 3 years after a minor reaches age 18

Answer

CMS Conditions of Participation require hospitals to retain patient records for at least 5 years, or 3 years after a minor patient reaches age 18, whichever is longer.

Question 3

A healthcare analytics vendor is classified as a HIPAA Business Associate when it:

Accepted Answer

Creates, receives, maintains, or transmits PHI on behalf of a covered entity to perform a service

Answer

A business associate is any entity that performs functions or activities involving PHI on behalf of a covered entity, triggering the need for a Business Associate Agreement (BAA).

Question 4

The Federal Anti-Kickback Statute (AKS) in healthcare prohibits:

Accepted Answer

Offering remuneration to induce referrals for services covered by federal healthcare programs

Answer

The AKS prohibits knowingly offering, paying, soliciting, or receiving anything of value to induce or reward referrals of items or services covered by federal healthcare programs.

Question 5

When a healthcare organization performs a HIPAA Security Risk Assessment, the analysis must cover:

Accepted Answer

All electronic PHI (ePHI) that the organization creates, receives, maintains, or transmits

Answer

The HIPAA Security Risk Assessment must evaluate all ePHI regardless of where it is stored or transmitted, including cloud, mobile, and third-party systems.

(HAC) Healthcare Analytics Certification Practice Test

(HAC) Healthcare Analytics Certification Practice Test

HAC Healthcare Analytics Policy & Compliance 3