HIPAA Medical Information 4

Question 1

Which of the following is an example of PHI in electronic form (ePHI) that must be protected under HIPAA's Security Rule?

Accepted Answer

A patient's diagnosis stored in an electronic health record system

Answer

ePHI is protected health information that is created, stored, transmitted, or received in electronic form, such as data in an EHR system.

Question 2

A covered entity discovers a breach of unsecured PHI. Under the Breach Notification Rule, when must affected individuals be notified?

Accepted Answer

Without unreasonable delay and no later than 60 calendar days after discovery

Answer

The Breach Notification Rule requires notification to affected individuals without unreasonable delay and within no more than 60 calendar days of discovery.

Question 3

A large breach affecting more than 500 residents of a state must also be reported to:

Accepted Answer

Prominent media outlets serving the affected area

Answer

Breaches affecting more than 500 residents of a state or jurisdiction must be reported to prominent media outlets in that area in addition to HHS and affected individuals.

Question 4

Which of the following is NOT one of the 18 identifiers that must be removed for health information to be considered de-identified under the HIPAA Safe Harbor method?

Accepted Answer

A patient's blood type

Answer

Blood type is not one of the 18 identifiers listed in the HIPAA Safe Harbor method; it is a clinical data element, not a direct identifier.

Question 5

Under HIPAA, a covered entity may use or disclose PHI without patient authorization for which of the following purposes?

Accepted Answer

Conducting health care operations such as quality improvement activities

Answer

Healthcare operations, including quality improvement, training, and accreditation, are permissible uses of PHI that do not require patient authorization.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Medical Information 4