HIPAA Medical Information 5

Question 1

Under HIPAA, which entity is primarily responsible for enforcing the Privacy and Security Rules?

Accepted Answer

The Office for Civil Rights (OCR) within the Department of HHS

Answer

The Office for Civil Rights (OCR) within the U.S. Department of Health and Human Services is the primary federal agency that enforces HIPAA's Privacy and Security Rules.

Question 2

Which of the following best describes a 'hybrid entity' under HIPAA?

Accepted Answer

An entity that performs both covered and non-covered functions and designates its health care components

Answer

A hybrid entity is an organization whose business activities include both HIPAA-covered and non-covered functions, and it designates the covered components subject to HIPAA.

Question 3

A patient exercises their right to an Accounting of Disclosures. Which type of disclosure is EXCLUDED from this accounting?

Accepted Answer

Disclosures for treatment, payment, and healthcare operations (TPO)

Answer

Disclosures made for treatment, payment, and healthcare operations are excluded from the required Accounting of Disclosures under the Privacy Rule.

Question 4

Under HIPAA, what is the maximum civil monetary penalty per violation category for violations due to willful neglect that are not corrected?

Accepted Answer

$50,000 per violation with a $1.5 million annual cap

Answer

For willful neglect violations that are not corrected, the penalty is $50,000 per violation with an annual maximum of $1.5 million for identical violations.

Question 5

A researcher wants to use patient medical records for a study without patient authorization. Under HIPAA, this is permissible when:

Accepted Answer

An Institutional Review Board (IRB) or Privacy Board waives the authorization requirement

Answer

Research use of PHI without authorization is permitted when an IRB or Privacy Board has reviewed the research and waived the authorization requirement under established criteria.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Medical Information 5