Practice Test GeeksHIPAA - Health Insurance Portability and Accountability Act Practice Test
← All HIPAA Flashcard Decks

Patient Rights Under HIPAA Flashcards

7 cards from real HIPAA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Patient Rights Under HIPAA flashcards as text

  1. Under HIPAA, within how many days must a covered entity respond to a patient's request to amend their health information?

    Answer: 60 days

    Covered entities must act on an amendment request within 60 days, with one possible 30-day extension.

  2. A patient requests an accounting of disclosures. Which type of disclosure is generally EXCLUDED from this accounting?

    Answer: Disclosures made for treatment, payment, and operations

    Disclosures for treatment, payment, and healthcare operations are excluded from the required accounting of disclosures.

  3. A patient who paid out-of-pocket for a service asks their provider NOT to share that information with their health plan. Under HIPAA, the provider must:

    Answer: Comply if it is technically feasible

    HIPAA requires providers to honor such a restriction request when the patient paid in full out-of-pocket.

  4. Which of the following BEST describes a patient's right to request confidential communications?

    Answer: The right to receive communications by alternative means or at an alternative location

    HIPAA's right to confidential communications lets patients request PHI be sent to a different address or via a different method.

  5. When can a covered entity DENY a patient's request to restrict disclosure of their PHI?

    Answer: When the disclosure is required for emergency treatment

    A covered entity may deny a restriction request if the PHI is needed to provide emergency treatment to the patient.

  6. A patient submits a written request to access their medical records. The covered entity believes releasing the records could endanger the patient. What may the entity do?

    Answer: Deny access and allow the patient to have the denial reviewed by a licensed professional

    An unreviewable denial based on endangerment risk allows the patient to have the denial reviewed by another licensed health care professional.

  7. How long must a covered entity retain the written accounting of disclosures it provides to patients?

    Answer: 6 years

    HIPAA requires covered entities to retain accountings of disclosures for 6 years from the date of creation.