HIPAA Healthcare Provider Obligations and Covered Entities 5

Question 1

A covered entity that fails to enter into a BAA with a known business associate and a breach occurs may face penalties under which category?

Accepted Answer

Willful neglect — not corrected

Answer

Failing to obtain a required BAA while knowing the obligation exists constitutes willful neglect, and if uncorrected, the highest penalty tier applies.

Question 2

Under HIPAA, which of the following scenarios requires a covered entity to obtain written patient authorization before using or disclosing PHI?

Accepted Answer

Using PHI for the covered entity's own fundraising activities

Answer

Using PHI for fundraising requires patient authorization unless the covered entity limits the information disclosed and provides an opt-out mechanism.

Question 3

A covered healthcare provider wants to share PHI with a patient's family member who is present during a visit. What is required under HIPAA?

Accepted Answer

The provider may share relevant information if the patient does not object

Answer

Covered entities may share PHI with persons involved in a patient's care when the patient is present and does not object, or when it is reasonably inferred that the patient would not object.

Question 4

Which of the following must be included in a covered entity's Notice of Privacy Practices (NPP)?

Accepted Answer

A description of the types of uses and disclosures the entity may make

Answer

The NPP must describe the types of uses and disclosures the covered entity may make of PHI, as well as patient rights and the entity's legal duties.

Question 5

A hospital's workforce member discloses PHI by accidentally faxing records to the wrong physician's office. This may qualify as what type of event under HIPAA?

Accepted Answer

A breach subject to the Breach Notification Rule unless an exception applies

Answer

A misdirected fax containing PHI is a potential breach; the covered entity must perform a risk assessment to determine if notification is required.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Healthcare Provider Obligations and Covered Entities 5