HIPAA HITECH Act and Technology Requirements 3

Question 1

What technology standard does HITECH specifically reference as a safe harbor for breach notification involving PHI?

Accepted Answer

Encryption and destruction

Answer

HITECH's breach notification safe harbor applies when PHI is rendered unusable, unreadable, or indecipherable through encryption or destruction.

Question 2

Which federal agency issued the guidance specifying encryption standards that qualify for HITECH's breach notification safe harbor?

Accepted Answer

NIST

Answer

NIST issued the guidance on encryption standards and destruction methods that qualify PHI for HITECH's breach notification safe harbor.

Question 3

The HITECH Act's Meaningful Use program incentivized healthcare providers to adopt EHRs primarily through which mechanism?

Accepted Answer

Medicare and Medicaid payment incentives

Answer

Meaningful Use provided Medicare and Medicaid payment incentives to eligible professionals and hospitals that demonstrated meaningful use of certified EHR technology.

Question 4

Under HITECH, what restriction applies to fundraising communications sent using electronic PHI?

Accepted Answer

Patients must be given an opportunity to opt out of future fundraising

Answer

HITECH requires that fundraising communications include a clear opportunity for recipients to opt out of receiving future fundraising communications.

Question 5

What does the HITECH Act require covered entities to include in their Notice of Privacy Practices regarding PHI sale?

Accepted Answer

A statement that authorization is required before selling PHI

Answer

HITECH requires covered entities to state in their Notice of Privacy Practices that patient authorization is required before the entity may sell PHI.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA HITECH Act and Technology Requirements 3