HIPAA Protected Health Information (PHI) 3

Question 1

Electronic Protected Health Information (ePHI) differs from PHI in that it:

Accepted Answer

Is specifically governed by the HIPAA Security Rule in addition to the Privacy Rule

Answer

ePHI is PHI that is created, stored, transmitted, or received electronically, and it is subject to both the HIPAA Privacy Rule and the additional technical safeguards required by the Security Rule.

Question 2

A covered entity may disclose PHI without patient authorization to report a communicable disease to a public health authority. This falls under which HIPAA exception?

Accepted Answer

Public health activities exception

Answer

HIPAA's public health activities exception permits covered entities to disclose PHI to public health authorities authorized by law to collect data for preventing or controlling disease.

Question 3

Under HIPAA, which of the following workforce members should have access to a patient's complete medical record?

Accepted Answer

Only those whose job functions require that level of access

Answer

HIPAA's minimum necessary standard requires that access to PHI be limited to workforce members whose specific job duties require that information.

Question 4

A patient requests access to their own PHI. Under HIPAA, the covered entity must generally provide access within:

Accepted Answer

30 calendar days, with one possible 30-day extension

Answer

HIPAA requires covered entities to provide patients access to their PHI within 30 calendar days, with one permissible 30-day extension if the entity notifies the patient of the delay.

Question 5

Which of the following scenarios would constitute an impermissible disclosure of PHI under HIPAA?

Accepted Answer

A nurse telling a patient's employer about their diagnosis without authorization

Answer

Disclosing a patient's diagnosis to their employer without authorization violates HIPAA because employment is not a permitted purpose for PHI disclosure under the Privacy Rule.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Protected Health Information (PHI) 3