HIPAA The Omnibus Rule 5

Question 1

Under the Omnibus Rule, which of the following is a permissible use of PHI for health care operations WITHOUT individual authorization?

Accepted Answer

Sharing PHI with a sister covered entity for joint quality improvement activities

Answer

Covered entities that are under common ownership or control may share PHI for joint healthcare operations activities such as quality improvement without individual authorization.

Question 2

When the Omnibus Rule refers to 'remuneration' in the context of the sale of PHI, which of the following is generally excluded from this definition?

Accepted Answer

Reasonable costs of preparing and transmitting PHI for a permitted disclosure

Answer

Reasonable preparation and transmission costs for permissible disclosures are excluded from the definition of remuneration under the Omnibus Rule's sale-of-PHI prohibition.

Question 3

Under the Omnibus Rule, what must a business associate agreement (BAA) include regarding subcontractors?

Accepted Answer

A provision requiring the business associate to enter into BAAs with its subcontractors

Answer

The Omnibus Rule requires that BAAs include a provision obligating business associates to enter into compliant BAAs with any subcontractors who create, receive, maintain, or transmit PHI.

Question 4

Under the Omnibus Rule, how did the definition of 'workforce' change with respect to HIPAA compliance obligations?

Accepted Answer

The workforce definition was expanded to explicitly include volunteers and trainees under HIPAA obligations

Answer

The Omnibus Rule confirmed that the workforce definition includes volunteers, trainees, and other persons under the direct control of a covered entity.

Question 5

A hospital sends a patient's PHI to a law firm to defend against a malpractice lawsuit. Under the Omnibus Rule, how is the law firm classified?

Accepted Answer

A business associate because it receives PHI to perform services on the hospital's behalf

Answer

A law firm that receives PHI to perform legal services on behalf of a covered entity is considered a business associate and must sign a BAA.

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA - Health Insurance Portability and Accountability Act Practice Test

HIPAA The Omnibus Rule 5