HIPAA Medical Information 2

Question 1

Under HIPAA, which of the following is considered Protected Health Information (PHI)?

Accepted Answer

A patient's name combined with their diagnosis

Answer

PHI is individually identifiable health information, meaning a name combined with a diagnosis links a person to their health condition and qualifies as PHI.

Question 2

A hospital shares a patient's medical records with a billing company to process insurance claims. Under HIPAA, this sharing is:

Accepted Answer

Permitted as a Treatment, Payment, or Healthcare Operations (TPO) activity

Answer

HIPAA permits disclosure of PHI for treatment, payment, and healthcare operations (TPO) without requiring patient authorization.

Question 3

What does the HIPAA Minimum Necessary Standard require when accessing medical information?

Accepted Answer

Covered entities must share the least amount of PHI needed to accomplish the intended purpose

Answer

The Minimum Necessary Standard requires that only the PHI needed to accomplish a specific purpose be accessed, used, or disclosed.

Question 4

A nurse looks up the medical records of a neighbor out of curiosity, without any treatment purpose. This action violates which HIPAA principle?

Accepted Answer

The Minimum Necessary Standard and permissible purpose requirements

Answer

Accessing PHI without a permissible purpose and beyond what is necessary violates the Minimum Necessary Standard and HIPAA's use/disclosure rules.

Question 5

Which of the following best describes 'de-identified' health information under HIPAA's Safe Harbor method?

Accepted Answer

Information from which all 18 specified identifiers have been removed

Answer

Under the Safe Harbor method, health information is de-identified when all 18 specific identifiers listed in the HIPAA Privacy Rule have been removed.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Medical Information 2