RHIA Compliance, Privacy, and Security

Question 1

Under HIPAA, which rule specifically governs the security of electronic protected health information (ePHI)?

Accepted Answer

HIPAA Security Rule

Answer

The HIPAA Security Rule establishes national standards for protecting ePHI through administrative, physical, and technical safeguards.

Question 2

What is the minimum necessary standard under the HIPAA Privacy Rule?

Accepted Answer

Covered entities must disclose only the minimum PHI needed to accomplish the intended purpose

Answer

The minimum necessary standard requires covered entities to limit PHI use and disclosure to only what is needed to accomplish the purpose of the use or disclosure.

Question 3

Who is considered a 'covered entity' under HIPAA?

Accepted Answer

Health plans, healthcare clearinghouses, and healthcare providers that transmit PHI electronically

Answer

HIPAA covered entities include health plans, healthcare clearinghouses, and healthcare providers (hospitals, physicians, etc.) that transmit PHI electronically for covered transactions.

Question 4

Under the HIPAA Privacy Rule, which of the following does NOT require patient authorization for disclosure?

Accepted Answer

Disclosure for treatment, payment, or healthcare operations (TPO)

Answer

The HIPAA Privacy Rule permits disclosure of PHI without patient authorization for treatment, payment, and healthcare operations (TPO) activities.

Question 5

What must a covered entity do when a breach of unsecured PHI affects 500 or more individuals in a state?

Accepted Answer

Notify affected individuals, HHS, and prominent media outlets in the affected state within 60 days

Answer

For breaches affecting 500 or more individuals in a state, covered entities must notify affected individuals, HHS, and prominent media outlets in that state within 60 days of discovery.

RHIA Exam Practice Test

RHIA Exam Practice Test

RHIA Compliance, Privacy, and Security