MT HIPAA Privacy & Security Rules 5

Question 1

Which of the following is a HIPAA-required element of a valid patient authorization for use or disclosure of PHI?

Accepted Answer

A description of the information to be used or disclosed

Answer

A valid HIPAA authorization must include a description of the PHI to be used or disclosed, among other required core elements specified in the Privacy Rule.

Question 2

When a medical transcriptionist works on dictation containing substance abuse treatment records governed by 42 CFR Part 2, how do these records differ from standard HIPAA PHI?

Accepted Answer

They have stronger protections with stricter consent requirements than standard HIPAA rules

Answer

Substance abuse treatment records under 42 CFR Part 2 carry stricter confidentiality protections than HIPAA, requiring specific written consent for most disclosures including treatment.

Question 3

A covered entity experiences a security incident where ransomware encrypts ePHI. Under HIPAA, what must the entity do within 60 days of discovering the breach if it affects more than 500 individuals in a state?

Accepted Answer

Notify affected individuals, the Secretary of HHS, and prominent media outlets in the affected state

Answer

For breaches affecting 500 or more individuals in a state, covered entities must notify affected individuals, HHS Secretary, and prominent media outlets in that state within 60 days.

Question 4

What is the primary purpose of a Business Associate Agreement (BAA) under HIPAA?

Accepted Answer

To contractually require the business associate to appropriately safeguard PHI and comply with HIPAA

Answer

A BAA contractually obligates business associates to use appropriate safeguards, report breaches, and comply with applicable HIPAA provisions regarding PHI they handle.

Question 5

Under the HIPAA Privacy Rule's 'Minimum Necessary' standard, which of the following is EXEMPT from the requirement?

Accepted Answer

Disclosures to another provider for treatment of the patient

Answer

The Minimum Necessary Standard does not apply to disclosures made to or requested by a healthcare provider for treatment purposes.

(MT) Certified Medical Transcription Practice Test

(MT) Certified Medical Transcription Practice Test

MT HIPAA Privacy & Security Rules 5