Medical Scribe Compliance & HIPAA Regulations Flashcards

A medical scribe's login credentials are shared with a colleague who forgot their password. This violates which HIPAA Security Rule requirement?

Answer: Unique user identification

HIPAA's Security Rule requires unique user identification so that each person accessing ePHI has their own ID, enabling accountability and audit trail accuracy.

Which of the following is an example of an 'incidental disclosure' that is permissible under HIPAA?

Answer: A patient overhearing their name called in a waiting room

Incidental disclosures that occur despite reasonable safeguards — like overhearing a name in a waiting room — are permitted under HIPAA when minimum necessary standards are met.

How long must a covered entity retain HIPAA-related policies and procedures?

Answer: 6 years from the date of creation or last effective date

HIPAA requires covered entities to retain documentation of policies and procedures for 6 years from the date of creation or the date it was last in effect.

A medical scribe is asked to document a 'social history' section. Which of the following pieces of information would be considered PHI?

Answer: The patient's occupation documented in connection with their medical record

PHI includes any individually identifiable health information, so a patient's occupation documented as part of their medical record constitutes PHI.

Under HIPAA, what is the 'right to an accounting of disclosures'?

Answer: The right to receive a list of certain disclosures the covered entity has made of the patient's PHI

Patients have the right to request an accounting of certain disclosures their provider has made of their PHI, excluding disclosures for TPO purposes.

Which scenario represents a permissible disclosure of PHI without patient authorization under HIPAA?

Answer: Reporting a gunshot wound to law enforcement as required by state law

HIPAA permits covered entities to disclose PHI to law enforcement when required by state law, such as mandatory reporting of gunshot wounds.

A patient verbally consents for a medical scribe to be present during their visit. If the patient later revokes this consent, the scribe must:

Answer: Immediately leave the examination room and cease documentation

When a patient revokes consent for the scribe's presence, the scribe must immediately honor that request and leave the exam room.