Release of Information and Privacy Practices Flashcards
6 cards from real RHIT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Release of Information and Privacy Practices flashcards as text
Which of the following individuals has the right to authorize release of a deceased patient's records?
Answer: The deceased patient's personal representative or estate executor
After a patient's death, the personal representative (such as an estate executor) holds the rights to authorize disclosure of the deceased patient's PHI.
A release of information (ROI) specialist receives a request for records from a patient's neighbor claiming to be a caregiver. What should the specialist do?
Answer: Require a signed authorization from the patient or documented legal authority before releasing
Without a signed patient authorization or documented legal authority such as a healthcare proxy, records may not be released to third parties regardless of their stated relationship.
What is an accounting of disclosures under HIPAA?
Answer: A patient's right to receive a list of certain disclosures of their PHI made without authorization
HIPAA gives patients the right to receive an accounting of disclosures—a list of certain PHI disclosures made without authorization during the previous six years.
Which disclosure is mandated by law and does NOT require patient authorization?
Answer: Disclosure to a patient's employer for workers' compensation claims in states with applicable law
Many states have workers' compensation laws that require disclosure of relevant health information without patient authorization when the employer or insurer is a party to the claim.
A patient requests amendment of their medical record, claiming a diagnosis is incorrect. Under HIPAA, the covered entity may deny the request if:
Answer: The information was not created by the covered entity and the originator is available to amend it
HIPAA allows denial of an amendment request if the covered entity did not create the information and the originating entity is reasonably available for the amendment.
Which document notifies patients about how their PHI may be used and disclosed?
Answer: Notice of Privacy Practices (NPP)
The Notice of Privacy Practices (NPP) is required by HIPAA and informs patients of their privacy rights and how the covered entity may use and disclose their PHI.