HIPAA The Omnibus Rule 2

Question 1

Under the Omnibus Rule, which of the following best describes a 'subcontractor' of a business associate?

Accepted Answer

A person or entity that creates, receives, maintains, or transmits PHI on behalf of a business associate

Answer

The Omnibus Rule extended the definition of business associate to include subcontractors who handle PHI on behalf of a business associate.

Question 2

The Omnibus Rule changed the definition of 'marketing' under HIPAA. Which of the following is NOT considered marketing under the revised definition?

Accepted Answer

Communications about treatment alternatives for the individual

Answer

Treatment communications describing health-related products or services are excluded from the definition of marketing and do not require authorization.

Question 3

Under the Omnibus Rule, when a business associate agreement (BAA) is in place and a subcontractor breaches it, who bears direct liability to HHS?

Accepted Answer

Both the business associate and the subcontractor

Answer

The Omnibus Rule made subcontractors directly liable under HIPAA, meaning both business associates and their subcontractors can be held liable by HHS.

Question 4

Which of the following correctly describes the Omnibus Rule's approach to the minimum necessary standard for uses and disclosures?

Accepted Answer

Covered entities must make reasonable efforts to limit PHI to the minimum necessary to accomplish the intended purpose

Answer

The minimum necessary standard requires covered entities and business associates to make reasonable efforts to limit PHI access and disclosure to what is needed for the intended purpose.

Question 5

Under the Omnibus Rule, what is the maximum penalty per violation category per calendar year?

Accepted Answer

$1,500,000

Answer

The Omnibus Rule set the maximum civil monetary penalty at $1,500,000 per violation category per calendar year.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA The Omnibus Rule 2