MT HIPAA Privacy & Security Rules 3

Question 1

Which HIPAA Security Rule safeguard category includes policies for workstation use and device and media controls?

Accepted Answer

Physical Safeguards

Answer

Physical Safeguards under the HIPAA Security Rule include workstation use policies, workstation security, and device and media controls.

Question 2

What does the HIPAA 'Right of Access' give patients the ability to do?

Accepted Answer

Inspect and obtain a copy of their own protected health information

Answer

The HIPAA Right of Access allows individuals to inspect and receive a copy of their PHI held by covered entities, generally within 30 days of the request.

Question 3

Which of the following is an example of an Administrative Safeguard under the HIPAA Security Rule?

Accepted Answer

Conducting a workforce security awareness training program

Answer

Security awareness and training programs are explicitly listed Administrative Safeguards required by the HIPAA Security Rule.

Question 4

Under HIPAA, which disclosure of PHI is permitted WITHOUT patient authorization?

Accepted Answer

Reporting a gunshot wound to law enforcement as required by state law

Answer

HIPAA permits disclosures required by law, such as mandatory reporting of gunshot wounds to law enforcement, without patient authorization.

Question 5

A transcription company stores encrypted ePHI on a laptop that is stolen. Under HIPAA's Safe Harbor provision, how is this incident classified?

Accepted Answer

Not a breach, because the PHI is rendered unreadable through valid encryption

Answer

Under the Breach Notification Safe Harbor, loss or theft of properly encrypted ePHI does not constitute a reportable breach because the data is unreadable.

(MT) Certified Medical Transcription Practice Test

(MT) Certified Medical Transcription Practice Test

MT HIPAA Privacy & Security Rules 3