HIPAA The Omnibus Rule 3

Question 1

Under the Omnibus Rule, which of the following uses of PHI by a covered entity requires an individual's written authorization?

Accepted Answer

Selling PHI to a third party for remuneration

Answer

The Omnibus Rule requires written authorization for the sale of PHI, prohibiting covered entities from receiving remuneration for PHI without patient authorization.

Question 2

The Omnibus Rule addressed the use of genetic information for underwriting purposes. What did it establish?

Accepted Answer

Health plans are prohibited from using genetic information for underwriting purposes

Answer

The Omnibus Rule implemented GINA provisions by prohibiting health plans from using or disclosing genetic information for underwriting purposes.

Question 3

Under the Omnibus Rule, a business associate may use PHI for its own purposes if:

Accepted Answer

The use is permitted by the Privacy Rule and the BAA

Answer

Business associates may only use PHI in ways that are permitted by the HIPAA Privacy Rule and specifically authorized in the business associate agreement.

Question 4

A research organization conducts a study and previously collected PHI under a valid HIPAA authorization. Under the Omnibus Rule, can the same authorization cover future research?

Accepted Answer

Yes, authorizations can cover future research studies if sufficiently described

Answer

The Omnibus Rule clarified that a single authorization can cover future research studies as long as the future purposes are adequately described in the authorization.

Question 5

Which of the following is an example of a 'hybrid entity' under HIPAA as clarified by the Omnibus Rule?

Accepted Answer

An organization that performs both covered and non-covered healthcare functions

Answer

A hybrid entity is one that performs both covered healthcare-related functions and non-covered functions, and it must designate its healthcare component for HIPAA compliance purposes.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA The Omnibus Rule 3