HIPAA Compliance 3

Question 1

What is the maximum civil monetary penalty per violation category for 'willful neglect — not corrected' under HIPAA?

Accepted Answer

$100,000 per violation, up to $1,500,000 annually

Answer

For willful neglect that is not corrected, HIPAA penalties can reach $100,000 per violation with an annual cap of $1,500,000 for identical violations.

Question 2

A covered entity is performing a risk analysis. Which regulation mandates this activity?

Accepted Answer

The HIPAA Security Rule

Answer

The HIPAA Security Rule (45 CFR § 164.308) explicitly requires covered entities to conduct an accurate and thorough assessment of risks to ePHI confidentiality, integrity, and availability.

Question 3

An individual requests an amendment to their PHI in a designated record set. Within how many days must the covered entity act on the request?

Accepted Answer

60 days, with one 30-day extension

Answer

Covered entities must act on an amendment request within 60 days of receipt, with a single 30-day extension if proper written notice is given.

Question 4

Which of the following best describes 'treatment, payment, and health care operations' (TPO) under HIPAA?

Accepted Answer

Permissible uses and disclosures of PHI that generally do not require authorization

Answer

HIPAA permits covered entities to use and disclose PHI for treatment, payment, and health care operations without individual authorization as these are essential health care functions.

Question 5

A covered entity discovers a breach of unsecured PHI affecting 600 individuals. Who must be notified, and by when?

Accepted Answer

Individuals within 60 days, and HHS within 60 days, and prominent media within 60 days

Answer

For breaches affecting 500+ residents of a state or jurisdiction, covered entities must notify individuals, HHS, and prominent local media within 60 days of discovery.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Compliance 3