PAR Regulatory Compliance & Health Privacy Laws 2

Question 1

Under HIPAA, which of the following is considered a 'limited data set' that requires a data use agreement?

Accepted Answer

Data with most direct identifiers removed but may include dates and geographic subdivisions

Answer

A limited data set removes most direct identifiers but may retain dates, geographic subdivisions larger than a street address, and other indirect identifiers, requiring a data use agreement.

Question 2

A patient requests an amendment to their medical record because they believe it contains an error. Under HIPAA, how long does a covered entity have to act on this request?

Accepted Answer

60 days

Answer

HIPAA requires covered entities to act on a request for amendment within 60 days, with one possible 30-day extension if the entity notifies the individual in writing.

Question 3

Which federal law specifically governs the privacy of substance use disorder treatment records at federally assisted programs?

Accepted Answer

42 CFR Part 2

Answer

42 CFR Part 2 provides stricter confidentiality protections for substance use disorder patient records at federally assisted programs than HIPAA.

Question 4

A Patient Access Representative receives a subpoena for a patient's medical records. What is the MOST appropriate first action?

Accepted Answer

Forward the subpoena to the facility's legal counsel or privacy officer

Answer

Subpoenas require legal review before release; the privacy officer or legal counsel determines whether the subpoena meets HIPAA requirements for disclosure.

Question 5

Under the HITECH Act, which of the following organizations are directly liable for HIPAA compliance?

Accepted Answer

Both covered entities and business associates

Answer

The HITECH Act extended direct HIPAA liability to business associates, not just covered entities, making both directly subject to enforcement.

(PAR) Patient Access Representative Certification Practice Test

(PAR) Patient Access Representative Certification Practice Test

PAR Regulatory Compliance & Health Privacy Laws 2