Legislation and Regulations (HIPAA) Flashcards

Which of the following is NOT considered protected health information (PHI) under HIPAA?

Answer: Properly de-identified aggregate statistics with no identifiers

Data properly de-identified by removing identifiers is no longer PHI and is not subject to the Privacy Rule.

Which federal law, prohibiting discrimination based on national origin in federally funded programs, is the foundation for language access rights in U.S. health care?

Answer: Title VI of the Civil Rights Act of 1964

Title VI prohibits national origin discrimination, which courts and HHS interpret to include failing to provide meaningful language access.

Under Section 1557 of the Affordable Care Act, when may a covered health program rely on a minor child to interpret for a patient with limited English proficiency?

Answer: Only in an emergency involving imminent threat to safety when no qualified interpreter is available

Section 1557 rules bar relying on minor children to interpret except in emergencies with an imminent threat when no qualified interpreter is immediately available.

An interpreter took notes containing a patient's name and medication doses during a session. What should the interpreter do with the notes afterward?

Answer: Securely destroy them, such as by shredding, before leaving

Interpreter notes contain PHI and should be securely destroyed after the encounter to protect confidentiality.

A remote telephone interpreter works from home. Which practice best supports HIPAA compliance?

Answer: Working in a private space where others cannot overhear the call

Remote interpreters must use reasonable safeguards, including a private setting where PHI cannot be overheard.

The HIPAA Security Rule specifically protects which type of information?

Answer: Electronic protected health information (ePHI)

The Security Rule sets administrative, physical, and technical safeguards for electronic PHI.

Which 2009 law strengthened HIPAA enforcement, created federal breach notification requirements, and made business associates directly liable for compliance?

Answer: The HITECH Act

The HITECH Act, part of the 2009 stimulus law, expanded HIPAA penalties, breach notification, and business associate liability.