Healthcare Compliance and Regulations Flashcards
7 cards from real RHIT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Healthcare Compliance and Regulations flashcards as text
Under HIPAA's Minimum Necessary Standard, a covered entity must limit PHI disclosures to the amount reasonably necessary to accomplish the intended purpose. Which disclosure is EXEMPT from this standard?
Answer: Disclosures required by law
Disclosures required by law are exempt from the Minimum Necessary Standard under 45 CFR §164.502(b).
A hospital receives a subpoena for a patient's medical records. Under HIPAA, which condition must be met before releasing the records without a patient authorization?
Answer: Satisfactory assurance that the patient has been notified or a qualified protective order is in place
HIPAA requires satisfactory assurances that the patient was notified or a protective order exists before releasing records in response to a subpoena.
Which federal law established the HITECH Act's requirements for notifying patients of breaches involving unsecured PHI?
Answer: American Recovery and Reinvestment Act of 2009
The HITECH Act was enacted as part of the American Recovery and Reinvestment Act (ARRA) of 2009 and introduced the Breach Notification Rule.
A patient requests an amendment to their medical record, stating that a diagnosis is incorrect. The covered entity may deny the request if:
Answer: The provider believes the record is accurate and complete
Under 45 CFR §164.526, a covered entity may deny an amendment if it reasonably believes the information is accurate and complete.
The Conditions of Participation (CoPs) issued by CMS establish standards that hospitals must meet to receive reimbursement from which programs?
Answer: Both Medicare and Medicaid
CMS Conditions of Participation apply to facilities seeking reimbursement from both Medicare and Medicaid programs.
Under the False Claims Act, what term describes an employee who reports employer fraud against the federal government and is protected from retaliation?
Answer: Whistleblower / Qui tam relator
The False Claims Act protects employees who report fraud as whistleblowers (qui tam relators) and may award them a portion of recovered funds.
When a covered entity discovers a potential HIPAA breach, the Breach Notification Rule requires that the affected individual be notified within how many days?
Answer: 60 days
The HIPAA Breach Notification Rule requires individual notification without unreasonable delay and no later than 60 calendar days after discovery.