HIPAA Compliance 2

Question 1

Under HIPAA, a covered entity must designate a Privacy Officer responsible for which primary duty?

Accepted Answer

Developing and implementing privacy policies and procedures

Answer

HIPAA's Privacy Rule requires covered entities to designate a Privacy Official responsible for developing and implementing the entity's privacy policies and procedures.

Question 2

A Business Associate Agreement (BAA) must be executed before a vendor can:

Accepted Answer

Receive or create PHI on behalf of the covered entity

Answer

A BAA is required whenever a vendor (business associate) will create, receive, maintain, or transmit PHI on behalf of a covered entity.

Question 3

How long must a covered entity retain its HIPAA policies, procedures, and related documentation?

Accepted Answer

6 years from the date of creation or last effective date

Answer

HIPAA requires covered entities to retain documentation of policies and procedures for 6 years from the date of creation or the date it was last in effect, whichever is later.

Question 4

Which of the following is the correct standard for a covered entity to use PHI for marketing purposes under HIPAA?

Accepted Answer

Marketing using PHI generally requires individual written authorization

Answer

HIPAA generally requires individual written authorization before a covered entity can use or disclose PHI for marketing communications.

Question 5

A hospital employee accesses the medical records of a famous patient out of curiosity, without a treatment need. This is a violation of which HIPAA principle?

Accepted Answer

The Minimum Necessary standard

Answer

The Minimum Necessary standard requires workforce members to access only the PHI needed to perform their job duties; accessing records out of curiosity violates this principle.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Compliance 2