HIPAA The HIPAA Privacy Rule 4

Question 1

Under the HIPAA Privacy Rule, which of the following entities is considered a 'covered entity'?

Accepted Answer

A health plan that pays for medical care

Answer

Health plans are one of the three categories of covered entities under HIPAA, along with healthcare providers and healthcare clearinghouses.

Question 2

What is the maximum time a covered entity has to respond to a patient's request to access their PHI?

Accepted Answer

30 calendar days, with one 30-day extension if needed

Answer

Covered entities must act on access requests within 30 days, with the option to extend by an additional 30 days if they provide written notice of the delay and the reason.

Question 3

Which of the following best describes a 'hybrid entity' under HIPAA?

Accepted Answer

A single legal entity that performs both covered and non-covered functions

Answer

A hybrid entity is a single legal entity whose business activities include both covered functions and non-covered functions, such as a university with a medical center.

Question 4

The HIPAA Privacy Rule permits covered entities to disclose PHI to public health authorities without patient authorization for which purpose?

Accepted Answer

Preventing or controlling disease, injury, or disability

Answer

Covered entities may disclose PHI to authorized public health authorities for activities like disease surveillance, reporting, and control without patient authorization.

Question 5

A patient requests that their provider not share their PHI with their health plan for a service the patient paid for out-of-pocket. Under HIPAA, the provider must:

Accepted Answer

Honor the restriction request as required by HITECH-amended HIPAA

Answer

Under the HITECH Act amendment to HIPAA, providers must honor a patient's request to restrict disclosure to a health plan when the patient pays out-of-pocket in full.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA The HIPAA Privacy Rule 4