HIPAA Protected Health Information (PHI) 5

Question 1

Which of the following best describes 'incidental disclosures' of PHI under HIPAA?

Accepted Answer

Secondary disclosures that occur as a byproduct of permitted disclosures

Answer

Incidental disclosures are unintended secondary disclosures that occur as a result of a permitted disclosure, and they do not violate HIPAA if the covered entity has implemented reasonable safeguards.

Question 2

A health plan is permitted to use PHI for underwriting purposes under HIPAA when:

Accepted Answer

Underwriting is a permitted healthcare operation for health plans

Answer

Health plans may use PHI for underwriting, premium rating, and related functions as part of permitted healthcare operations, though GINA and ACA have placed additional restrictions on this practice.

Question 3

Under HIPAA, a 'covered entity' includes all of the following EXCEPT:

Accepted Answer

Employers who sponsor self-insured health plans

Answer

Employers who sponsor self-insured health plans are not themselves covered entities; however, the plan itself may be a covered entity, and employers must separate plan functions from employment functions.

Question 4

IP addresses are considered PHI under HIPAA when they:

Accepted Answer

Are linked or linkable to an individual's health information

Answer

IP addresses are one of the 18 HIPAA identifiers and constitute PHI when they are associated with or could be linked to a person's health information.

Question 5

A hospital uses patient data to conduct internal quality improvement studies. Under HIPAA, this activity is classified as:

Accepted Answer

A healthcare operation permitted without patient authorization

Answer

Quality assessment and improvement activities are explicitly listed as healthcare operations under HIPAA, allowing covered entities to use PHI for these purposes without patient authorization.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA Protected Health Information (PHI) 5