MS Medical Scribe Compliance & HIPAA Regulations 3

Question 1

A business associate agreement (BAA) is required when:

Accepted Answer

A hospital hires a transcription company that will access PHI

Answer

A BAA is required when a covered entity engages a business associate — such as a transcription company — that will create, receive, maintain, or transmit PHI on their behalf.

Question 2

Under the HIPAA Breach Notification Rule, how soon must a covered entity notify affected individuals of a breach?

Accepted Answer

Within 60 days of discovery

Answer

Covered entities must notify affected individuals without unreasonable delay and within 60 days of discovering a breach.

Question 3

If a breach affects 500 or more individuals in a single state, the covered entity must notify:

Accepted Answer

Prominent media outlets serving the state

Answer

When a breach affects 500 or more residents of a state or jurisdiction, the covered entity must notify prominent media outlets in addition to HHS and affected individuals.

Question 4

Which of the following scenarios constitutes a HIPAA violation by a medical scribe?

Accepted Answer

Texting a patient's full name and diagnosis to a friend who is also a nurse

Answer

Sharing a patient's identifiable health information with unauthorized individuals — even healthcare workers with no need-to-know — constitutes a HIPAA violation.

Question 5

What is the purpose of a HIPAA Notice of Privacy Practices (NPP)?

Accepted Answer

To inform patients of their rights and how their PHI may be used

Answer

The NPP informs patients of their privacy rights and describes how the covered entity may use and disclose their PHI.

(MS) Medical Scribe Certification Practice Test

(MS) Medical Scribe Certification Practice Test

MS Medical Scribe Compliance & HIPAA Regulations 3