NBCMI Legislation and Regulations (HIPAA) 2 — Questions and Answers
Question 1: Under HIPAA, what constitutes Protected Health Information (PHI)?
- Only the patient's full name
- Any individually identifiable health information including name, address, dates, and treatment information (Correct answer)
- Only electronic medical records
- Only information the interpreter writes down
Correct answer: Any individually identifiable health information including name, address, dates, and treatment information
PHI includes any individually identifiable health information in any form -- oral, written, or electronic.
HIPAA defines PHI across 18 categories of identifiers. For interpreters, everything heard, seen, or recorded during a medical encounter is protected.
Question 2: What is the 'minimum necessary' standard under HIPAA?
- Use the fewest words possible
- Only the minimum PHI necessary for the intended purpose should be used or disclosed (Correct answer)
- Work minimum necessary hours
- Patients receive minimum treatment
Correct answer: Only the minimum PHI necessary for the intended purpose should be used or disclosed
The minimum necessary standard limits PHI access to what is needed for the specific purpose.
For interpreters: only access information relevant to the current assignment, don't browse patient records beyond what's needed, don't discuss cases unnecessarily, don't retain notes with PHI after sessions.
Question 3: What are potential consequences for HIPAA violations by interpreters?
- Verbal warning only
- Civil penalties up to $50,000 per violation, criminal penalties including fines and imprisonment (Correct answer)
- No consequences for interpreters
- Only the facility faces consequences
Correct answer: Civil penalties up to $50,000 per violation, criminal penalties including fines and imprisonment
HIPAA violations can result in significant civil and criminal penalties for individuals and organizations.
Civil penalties range from $100 to $50,000 per violation. Criminal penalties for willful violations include up to $250,000 fine and ten years imprisonment for intent to sell/use PHI commercially.
Question 4: How does Title VI of the Civil Rights Act of 1964 relate to medical interpreting?
- No relation
- Prohibits discrimination based on national origin, requiring federally funded healthcare facilities to provide language access (Correct answer)
- Only applies to government hospitals
- Requires all hospitals to hire full-time interpreters
Correct answer: Prohibits discrimination based on national origin, requiring federally funded healthcare facilities to provide language access
Title VI requires organizations receiving federal funding to provide meaningful access to services for LEP individuals.
Executive Order 13166 clarified that Title VI includes providing meaningful access to LEP individuals. Facilities must provide competent interpreters at no cost and cannot require patients to use family members.
Question 5: What is a Business Associate Agreement (BAA)?
- Contract to share customers
- HIPAA-required agreement extending privacy obligations to third parties handling PHI (Correct answer)
- Agreement between interpreters to share work
- Licensing agreement for agencies
Correct answer: HIPAA-required agreement extending privacy obligations to third parties handling PHI
A BAA extends HIPAA's privacy and security obligations to business associates like interpreting services.
The BAA must specify permitted PHI uses, required safeguards, breach notification procedures, and PHI destruction upon contract termination. Staff interpreters are covered under facility policies rather than BAAs.
Question 6: Under what circumstances may an interpreter disclose patient information without authorization?
- Whenever another provider asks
- Only in specific legally permitted situations: mandatory reporting, court orders, or public health emergencies (Correct answer)
- When interesting for a case study
- When a family member requests
Correct answer: Only in specific legally permitted situations: mandatory reporting, court orders, or public health emergencies
HIPAA permits disclosure without authorization only in specific legally defined circumstances.
Exceptions include: mandatory reporting (abuse, communicable diseases), public health activities, averting serious safety threats, judicial proceedings, and law enforcement under specific conditions.
NBCMI Legislation and Regulations (HIPAA) 2
Under HIPAA, what constitutes Protected Health Information (PHI)?