Relias Compliance and Regulatory Training 4

Question 1

A patient requests access to their medical records under HIPAA. The covered entity must respond within:

Accepted Answer

30 calendar days, with a possible 30-day extension

Answer

HIPAA requires covered entities to act on access requests within 30 calendar days, with one 30-day extension permitted if needed.

Question 2

Which of the following is an example of a HIPAA-permitted disclosure without patient authorization?

Accepted Answer

Disclosing PHI to public health authorities for disease surveillance

Answer

HIPAA permits disclosures to public health authorities for activities such as disease reporting, which serves a recognized public interest.

Question 3

The Corporate Integrity Agreement (CIA) is typically negotiated between a healthcare provider and:

Accepted Answer

The HHS Office of Inspector General (OIG)

Answer

CIAs are agreements between the OIG and healthcare entities that have engaged in fraud, requiring enhanced compliance oversight as an alternative to exclusion.

Question 4

Under the CMS Conditions of Participation, which of the following is required for patient rights?

Accepted Answer

Patients must be informed of their rights in advance of or at admission

Answer

CMS Conditions of Participation require hospitals to inform patients of their rights in advance of or at the time of admission.

Question 5

What does 'downstream risk' mean in the context of a healthcare compliance program?

Accepted Answer

Compliance risks that flow to subcontractors and vendors from the primary organization's non-compliance

Answer

Downstream risk refers to compliance obligations and potential liability that organizations pass on to their contractors, vendors, and business associates.

(Relias) Relias Certification Practice Test

(Relias) Relias Certification Practice Test

Relias Compliance and Regulatory Training 4