HIPAA Electronic Health Records (EHR) Compliance 4

Question 1

Under HIPAA, which of the following EHR data exchanges does NOT require a patient's authorization?

Accepted Answer

Disclosing records for public health reporting to state authorities

Answer

HIPAA permits covered entities to disclose ePHI to public health authorities for authorized public health activities without patient authorization.

Question 2

A hospital implements a new EHR module. Under HIPAA's Security Rule, what process must be conducted before go-live?

Accepted Answer

Security risk analysis of the new module

Answer

HIPAA requires covered entities to conduct a security risk analysis before implementing any new system or module that handles ePHI.

Question 3

What is the maximum civil monetary penalty per violation category under HIPAA for a covered entity that demonstrates willful neglect and does not correct the violation?

Accepted Answer

$1,900,000 (adjusted for inflation, annually)

Answer

For willful neglect not corrected, HIPAA penalties can reach $1.9 million per violation category per calendar year under the tiered penalty structure.

Question 4

An EHR system sends an appointment reminder via text message that includes the patient's diagnosis. Which HIPAA principle does this violate?

Accepted Answer

Minimum necessary standard

Answer

Including a diagnosis in a text reminder violates the minimum necessary standard because only the appointment time and location are needed for a reminder.

Question 5

Which of the following best describes a contingency plan requirement under HIPAA's Security Rule for EHR systems?

Accepted Answer

A documented data backup plan and disaster recovery procedure

Answer

HIPAA's contingency plan standard requires covered entities to have documented data backup plans and disaster recovery procedures to ensure ePHI availability during emergencies.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Electronic Health Records (EHR) Compliance 4