RHIT Healthcare Compliance and Regulations 2

Question 1

Under HIPAA's Minimum Necessary Standard, a covered entity must limit PHI disclosures to the amount reasonably necessary to accomplish the intended purpose.
Which disclosure is EXEMPT from this standard?

Accepted Answer

Disclosures required by law

Answer

Disclosures to health plans for payment purposes

Answer

Disclosures to business associates

Answer

Disclosures for public health activities

Question 2

A hospital receives a subpoena for a patient's medical records. Under HIPAA, which condition must be met before releasing the records without a patient authorization?

Accepted Answer

Satisfactory assurance that the patient has been notified or a qualified protective order is in place

Answer

The subpoena must be signed by a federal judge

Answer

The records must be de-identified first

Answer

The hospital's privacy officer must personally deliver the records

Question 3

Which federal law established the HITECH Act's requirements for notifying patients of breaches involving unsecured PHI?

Accepted Answer

American Recovery and Reinvestment Act of 2009

Answer

HIPAA Privacy Rule of 1996

Answer

Affordable Care Act of 2010

Answer

Medicare Access and CHIP Reauthorization Act of 2015

Question 4

A patient requests an amendment to their medical record, stating that a diagnosis is incorrect. The covered entity may deny the request if:

Accepted Answer

The provider believes the record is accurate and complete

Answer

The record was created more than 6 years ago

Answer

The amendment would require changing more than one document

Answer

The patient has already inspected the record

Question 5

The Conditions of Participation (CoPs) issued by CMS establish standards that hospitals must meet to receive reimbursement from which programs?

Accepted Answer

Both Medicare and Medicaid

Answer

Only Medicaid

Answer

Only Medicare

Answer

Only commercial insurers participating in the ACA marketplace

Question 6

Under the False Claims Act, what term describes an employee who reports employer fraud against the federal government and is protected from retaliation?

Accepted Answer

Whistleblower / Qui tam relator

Answer

Compliance officer

Answer

Sentinel reporter

Answer

Adverse event reporter

Question 7

When a covered entity discovers a potential HIPAA breach, the Breach Notification Rule requires that the affected individual be notified within how many days?

Accepted Answer

60 days

Answer

30 days

Answer

45 days

Answer

90 days