NBCMI - National Board of Certification for Medical Interpreters Legislation and Regulations (HIPAA) Questions and Answers 1 — Questions and Answers
Question 1: A medical interpreter works for an agency that provides services to a hospital. Under HIPAA, what is the legal term for the interpreter's role in relation to the hospital (the covered entity)?
- Medical Designate
- Ancillary Provider
- Business Associate (Correct answer)
- Covered Affiliate
Correct answer: Business Associate
Under HIPAA, an individual or entity that performs functions or activities on behalf of a covered entity (like a hospital) and has access to Protected Health Information (PHI) is known as a Business Associate. This requires a formal Business Associate Agreement (BAA) that outlines the interpreter's responsibilities for protecting PHI.
Question 2: Which of the following pieces of information, when linked to a patient's identity, is NOT considered Protected Health Information (PHI) under HIPAA?
- The patient's email address
- A biometric identifier, such as a fingerprint
- The name of the patient's employer (Correct answer)
- The patient's medical record number
Correct answer: The name of the patient's employer
Protected Health Information (PHI) includes a wide range of personal identifiers. The HIPAA Privacy Rule lists 18 specific identifiers, including names, addresses, dates, medical record numbers, email addresses, and biometric data. However, employment records, including the name of the patient's employer, that a covered entity maintains in its capacity as an employer are specifically excluded from the definition of PHI.
Question 3: An interpreter is asked to sight translate a patient's entire medical chart to prepare for a complex upcoming appointment. Following the HIPAA 'Minimum Necessary' standard, what is the most appropriate action for the interpreter to take?
- Politely decline and request to be briefed only on the information relevant to the upcoming appointment. (Correct answer)
- Read the entire chart to be fully prepared for any topic that might arise during the consultation.
- Ask the patient directly for permission to review their entire medical history.
- Review the chart but make a note to shred any personal notes immediately after the session.
Correct answer: Politely decline and request to be briefed only on the information relevant to the upcoming appointment.
The HIPAA Minimum Necessary standard requires that individuals should only access, use, or disclose the minimum amount of PHI needed to accomplish the intended purpose. Reviewing a patient's entire history when it is not required for the specific appointment violates this principle. The correct action is to limit access to only the information essential for the task at hand.
Question 4: After an interpreting session, a medical interpreter is in the hospital cafeteria and is approached by a friend who is a nurse in a different department. The nurse asks, 'I saw you with Mr. Smith. Is his cancer back?' How must the interpreter respond to be compliant with HIPAA?
- Confirm the diagnosis but ask the nurse to keep it confidential.
- State, 'I cannot discuss any patient information due to confidentiality laws.' (Correct answer)
- Suggest the nurse look up the patient's information in the hospital's electronic health record system.
- Say 'I don't know' even if the interpreter knows the answer.
Correct answer: State, 'I cannot discuss any patient information due to confidentiality laws.'
HIPAA's Privacy Rule strictly prohibits discussing patient information with anyone not directly involved in the patient's care, even other healthcare professionals. Disclosing PHI in a public setting is a clear violation. The only compliant response is to refuse to share any information by citing confidentiality rules. Acknowledging the person is a patient or discussing their condition is a breach of privacy.
Question 5: A patient tells an interpreter that they wish to obtain a copy of their medical records. What is the interpreter's most appropriate action according to patient rights under HIPAA?
- Personally request the records from the medical records department on the patient's behalf.
- Tell the patient that interpreters are not allowed to be involved in such requests.
- Offer to help the patient find the right person or department to make their official request. (Correct answer)
- Translate the patient's verbal request directly to the nearest nurse or provider.
Correct answer: Offer to help the patient find the right person or department to make their official request.
Under HIPAA, patients have the right to access and obtain copies of their medical records. While the interpreter should not handle the request themselves, as it falls outside their role, their duty is to facilitate communication. The most appropriate action is to empower the patient by directing them to the correct procedure or department (e.g., Health Information Management) for making a formal request, which often must be in writing.
Question 6: Which of the following actions by a medical interpreter constitutes a potential HIPAA violation?
- Jotting down a complex medical term on a piece of paper to look up later, then immediately shredding it after the session.
- Participating in a video remote interpreting (VRI) session from a private, secure room in their home.
- Using a personal, unencrypted email account to send a summary of an appointment to a colleague for advice. (Correct answer)
- Verbally sight-translating a consent form to a patient in a private examination room with the provider present.
Correct answer: Using a personal, unencrypted email account to send a summary of an appointment to a colleague for advice.
Sending any form of PHI through an unencrypted, personal email account is a significant security risk and a potential HIPAA violation. The HIPAA Security Rule requires technical safeguards to protect electronic PHI (ePHI). The other options describe actions that, if handled properly (e.g., secure VRI connection, immediate and secure destruction of notes), are compliant with HIPAA regulations.
NBCMI - National Board of Certification for Medical Interpreters Legislation and Regulations (HIPAA) Questions and Answers 1
A medical interpreter works for an agency that provides services to a hospital.
Under HIPAA, what is the legal term for the interpreter's role in relation to the hospital (the covered entity)?