HIPAA Compliance 5

Question 1

The HIPAA Breach Notification Rule defines 'unsecured PHI' as PHI that has NOT been:

Accepted Answer

Rendered unusable, unreadable, or indecipherable through approved methods such as encryption or destruction

Answer

Unsecured PHI is PHI that has not been rendered unusable, unreadable, or indecipherable to unauthorized individuals through encryption or destruction per HHS guidance.

Question 2

Which of the following scenarios would most likely qualify for the 'limited data set' exception under HIPAA?

Accepted Answer

Sharing PHI with direct geographic identifiers removed (but zip codes retained) under a data use agreement for research

Answer

A limited data set removes most direct identifiers but may retain zip codes and dates; it requires a data use agreement and is permissible for research, public health, and health care operations.

Question 3

A healthcare clearinghouse processes claims for multiple covered entities. Under HIPAA, the clearinghouse is classified as:

Accepted Answer

A covered entity subject to HIPAA directly

Answer

Healthcare clearinghouses are directly defined as covered entities under HIPAA because they process nonstandard health information into standard formats (or vice versa).

Question 4

Under HIPAA, an individual's right to an accounting of disclosures applies to disclosures made for which of the following purposes?

Accepted Answer

Disclosures required by law, for public health purposes, and other non-TPO disclosures

Answer

The right to an accounting covers disclosures other than those for TPO, to the individual themselves, or pursuant to an authorization, for the 6 years prior to the request.

Question 5

A covered entity that is also a hybrid entity must:

Accepted Answer

Designate its health care component(s) and apply HIPAA only to those components

Answer

A hybrid entity must designate its health care component(s) in writing and ensure HIPAA applies to those components; non-health care components of the organization are generally not covered.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Compliance 5