HIPAA HITECH Act and Technology Requirements 2

Question 1

Under the HITECH Act, what is the minimum penalty per violation for 'willful neglect' that is not corrected within 30 days?

Accepted Answer

$50,000

Answer

Willful neglect not corrected within 30 days carries a minimum penalty of $50,000 per violation under HITECH's tiered penalty structure.

Question 2

Which HITECH Act provision requires covered entities to provide patients with an electronic copy of their PHI upon request?

Accepted Answer

Right of Access provision

Answer

HITECH's Right of Access provision requires covered entities using EHRs to provide patients with electronic copies of their PHI when requested.

Question 3

What does the HITECH Act require regarding accounting of disclosures for covered entities using EHR systems?

Accepted Answer

Accounting must include treatment, payment, and operations disclosures

Answer

HITECH expanded accounting of disclosures requirements to include treatment, payment, and operations disclosures for covered entities using EHR systems.

Question 4

Under HITECH, which entity type became directly liable for HIPAA compliance even without a business associate agreement in place?

Accepted Answer

Subcontractors of business associates

Answer

HITECH made subcontractors of business associates directly liable for HIPAA compliance, extending the compliance chain beyond direct business associates.

Question 5

What is the maximum annual cap for violations of an identical provision under HITECH's penalty structure?

Accepted Answer

$1,500,000

Answer

HITECH caps annual penalties for violations of an identical provision at $1,500,000 per calendar year regardless of the tier.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA HITECH Act and Technology Requirements 2