BCP Test Security and Data Management Questions and Answers

Question 1

A psychometrist needs to transport a neuropsychological test kit, including stimulus books and manuals, from the main clinic to a satellite office. Which of the following represents the most secure method of transport?

Accepted Answer

Placing the materials in a locked briefcase or bag that remains in the psychometrist's possession at all times.

Answer

Test materials are confidential and must be secured to maintain their integrity. A locked container that remains in the psychometrist's direct possession prevents loss, theft, and unauthorized access. Leaving materials in a car (even in the trunk) poses a risk of theft, an open bag is not secure, and standard mail lacks the necessary security and chain of custody for such sensitive materials.

Question 2

In the United States, what is the primary purpose of the HIPAA Security Rule as it pertains to patient data management?

Accepted Answer

To set national standards for the security of electronic protected health information (e-PHI).

Answer

The HIPAA Security Rule specifically establishes national standards for protecting electronic protected health information (e-PHI) by requiring administrative, physical, and technical safeguards. It is distinct from the Privacy Rule, which covers PHI in all formats, and it does not mandate specific software or govern malpractice penalties.

Question 3

Which of the following is the most ethically and legally sound method for disposing of outdated psychological test record forms that contain protected health information (PHI)?

Accepted Answer

Cross-cut shredding the forms to ensure the information is unrecoverable.

Answer

To comply with HIPAA and ethical standards, documents containing PHI must be destroyed in a way that makes them unreadable and unreconstructible. Cross-cut shredding is the most common and accepted method for achieving this in an office setting. Redacting, recycling, or simple trashing does not provide sufficient protection. While indefinite storage might be secure, proper disposal of outdated records is a key part of the data lifecycle.

Question 4

While browsing a professional social media group, a psychometrist finds a post where another user has uploaded a photograph of a stimulus item from a widely used, copyrighted intelligence scale. What is the psychometrist's primary ethical obligation?

Accepted Answer

Report the post to the group administrator and notify the test publisher of the security breach.

Answer

The primary ethical duty is to protect the integrity and security of psychological tests. Publicly posting copyrighted material compromises the test's validity for future examinees. The correct action is to take steps to have the material removed (reporting to the administrator) and to inform the owner of the intellectual property (the test publisher) so they can take further action.

Question 5

A supervising psychologist asks a psychometrist to prepare a patient dataset for a research study. To protect patient privacy according to the HIPAA Safe Harbor method, what is the most critical step?

Accepted Answer

De-identifying the data by removing all 18 specified personal identifiers.

Answer

The HIPAA Safe Harbor method requires the removal of all 18 specified personal identifiers (e.g., name, specific dates, geographic subdivisions smaller than a state, etc.) to consider data de-identified. While password protection is a necessary security measure, it does not de-identify the data itself. Keeping a linking key means the data is coded, not fully anonymized under this method.

(BCP) Board Certified Psychometrist Practice Test

(BCP) Board Certified Psychometrist Practice Test

BCP Test Security and Data Management Questions and Answers