MT HIPAA Privacy & Security Rules 2

Question 1

Under HIPAA, which of the following is NOT considered Protected Health Information (PHI)?

Accepted Answer

De-identified health information with all 18 identifiers removed

Answer

De-identified health information that has had all 18 HIPAA identifiers removed is not considered PHI and is not protected under HIPAA.

Question 2

A medical transcriptionist working remotely receives a dictation file via email without encryption. Which HIPAA rule is most directly violated?

Accepted Answer

Security Rule — transmission security safeguard

Answer

The HIPAA Security Rule requires transmission security safeguards, including encryption, when ePHI is transmitted over open networks like email.

Question 3

What is the maximum civil monetary penalty per violation category under HIPAA for willful neglect that is not corrected?

Accepted Answer

$100,000

Answer

The maximum civil monetary penalty for willful neglect not corrected is $100,000 per violation, with a $1.5 million annual cap per violation category.

Question 4

Which of the following best describes a 'business associate' under HIPAA?

Accepted Answer

A vendor or contractor who performs functions involving PHI on behalf of a covered entity

Answer

A business associate is a person or entity that performs functions or activities on behalf of a covered entity involving the use or disclosure of PHI.

Question 5

Under the HIPAA Minimum Necessary Standard, which scenario is compliant?

Accepted Answer

A transcriptionist accessing only the dictation file relevant to their current assignment

Answer

The Minimum Necessary Standard requires that access to PHI be limited to the amount reasonably needed to accomplish the intended purpose.

(MT) Certified Medical Transcription Practice Test

(MT) Certified Medical Transcription Practice Test

MT HIPAA Privacy & Security Rules 2