CPCA CPCA Medical Records and HIPAA Privacy

Question 1

Under HIPAA, what is the term for health information that can identify an individual?

Accepted Answer

Protected Health Information (PHI)

Answer

PHI is individually identifiable health information created, received, or maintained by a covered entity that is protected under HIPAA.

Question 2

Which of the following is NOT considered a HIPAA-covered entity?

Accepted Answer

Life insurance company

Answer

Life insurance companies are not HIPAA covered entities because they do not conduct covered healthcare transactions.

Question 3

How long must a covered entity retain HIPAA-related policies and procedures?

Accepted Answer

6 years

Answer

HIPAA requires covered entities to retain documentation of policies, procedures, and actions for at least 6 years from creation or last effective date.

Question 4

What is the 'minimum necessary' standard under HIPAA?

Accepted Answer

Using only the minimum PHI needed to accomplish the intended purpose

Answer

The minimum necessary standard requires covered entities to limit PHI use and disclosure to only what is needed for a specific purpose.

Question 5

A patient requests access to their own medical record. Under HIPAA, how many days does the covered entity generally have to respond?

Accepted Answer

30 days

Answer

HIPAA requires covered entities to act on a patient's record access request within 30 days, with a possible 30-day extension.

CPCA Exam Practice Test

CPCA Exam Practice Test

CPCA CPCA Medical Records and HIPAA Privacy