FREE CPMS HIPAA and Compliance Rules Questions and Answers

Question 1

A medical scribe is working in a busy emergency department. After a patient encounter, the scribe jots down the patient's name and medical record number on a piece of scrap paper to remember to complete the chart later. The scribe then places the paper in their pocket and forgets about it until the end of their shift. Which core HIPAA principle has been violated?

Accepted Answer

Safeguarding Protected Health Information (PHI)

Answer

Writing down personally identifiable patient information on non-secure media like scrap paper and removing it from the clinical area is a violation of the fundamental requirement to safeguard PHI. HIPAA requires physical and administrative safeguards to be in place to protect patient information from unauthorized disclosure. The other options are incorrect because the Minimum Necessary Rule pertains to accessing only the data needed for a task, the Right of Access relates to a patient's ability to get their records, and the Breach Notification Rule applies after a breach has been confirmed.

Question 2

Which of the following scenarios BEST illustrates the HIPAA 'Minimum Necessary' standard as it applies to a medical scribe?

Accepted Answer

Accessing only the current encounter notes and the lab results ordered by the physician during today's visit to complete the chart.

Answer

The 'Minimum Necessary' rule requires that access to Protected Health Information (PHI) be limited to only what is needed to accomplish a specific task. For a scribe, this means accessing the information directly relevant to the current patient encounter they are documenting, not the entire medical history unless instructed. Browsing old records out of curiosity, discussing cases in non-secure areas, and using unsecured personal devices are all violations of HIPAA principles.

Question 3

A medical scribe is employed by a third-party scribe service company, not directly by the hospital. In the context of HIPAA, what is the scribe service company's relationship to the hospital?

Accepted Answer

Business Associate

Answer

A Business Associate is a person or entity that performs certain functions or activities on behalf of a Covered Entity (like a hospital) that involve the use or disclosure of Protected Health Information (PHI). Since the scribe service handles PHI on behalf of the hospital, it is considered a Business Associate and must have a signed Business Associate Agreement (BAA) in place.

Question 4

A patient at a clinic discovers that their medical record contains an error documented by a scribe. According to the HIPAA Privacy Rule, what right does the patient have regarding this information?

Accepted Answer

The right to request an amendment to their medical record.

Answer

The HIPAA Privacy Rule grants patients the right to request an amendment to their protected health information in a designated record set. While they can request a correction, it does not guarantee the original entry will be deleted; instead, an addendum or correction is typically made to the record. The other options are incorrect; patients cannot directly delete or add notes to the EHR, and a documentation error does not automatically constitute grounds for a malpractice suit against the scribe.

Question 5

Under the HIPAA Security Rule, which of the following is considered a critical TECHNICAL safeguard for a medical scribe using an Electronic Health Record (EHR) system?

Accepted Answer

Using a unique, strong password and enabling two-factor authentication.

Answer

The HIPAA Security Rule specifies three types of safeguards: administrative, physical, and technical. Unique user identification, such as a username and strong password, is a fundamental technical safeguard required to control access to electronic PHI (ePHI). Signing a confidentiality agreement is an administrative safeguard, while screen positioning and shredding documents are physical safeguards.

CPMS - Certified Professional Medical Scribe Practice Test

CPMS - Certified Professional Medical Scribe Practice Test

FREE CPMS HIPAA and Compliance Rules Questions and Answers