RHIT HIPAA Privacy and Security 2

Question 1

Under HIPAA, which of the following is considered a 'covered entity'?

Accepted Answer

A health plan that pays for medical care

Answer

A medical software vendor

Answer

A janitorial company servicing a hospital

Answer

An IT consultant hired by a clinic

Question 2

A patient requests access to their medical records. Under HIPAA, the covered entity must provide access within how many days?

Accepted Answer

30 days

Answer

15 days

Answer

60 days

Answer

90 days

Question 3

Which HIPAA rule establishes national standards for protecting electronic PHI?

Accepted Answer

Security Rule

Answer

Privacy Rule

Answer

Breach Notification Rule

Answer

Enforcement Rule

Question 4

A business associate agreement (BAA) is required when a vendor performs which type of function?

Accepted Answer

Processes PHI on behalf of a covered entity

Answer

Delivers office supplies to a clinic

Answer

Maintains the parking lot of a hospital

Answer

Provides legal services unrelated to PHI

Question 5

Which of the following is an example of a physical safeguard under the HIPAA Security Rule?

Accepted Answer

Using facility access controls to limit entry to data centers

Answer

Encrypting data in transit

Answer

Implementing audit controls

Answer

Assigning unique user IDs

Question 6

Under HIPAA's minimum necessary standard, how much PHI should be disclosed?

Accepted Answer

Only the information reasonably necessary to accomplish the purpose

Answer

All information in the medical record

Answer

Whatever the patient authorizes

Answer

Any information requested by another provider

Question 7

Which of the following is NOT included in HIPAA's definition of protected health information (PHI)?

Accepted Answer

De-identified health information

Answer

Patient's name linked to a diagnosis

Answer

Patient's address combined with treatment dates

Answer

Social Security number tied to a health condition