RHIT HIPAA Privacy and Security 3

Question 1

Under the HIPAA Breach Notification Rule, covered entities must notify affected individuals of a breach within:

Accepted Answer

60 days of discovery

Answer

15 days of discovery

Answer

30 days of discovery

Answer

60 days of the end of the calendar year

Question 2

A healthcare worker accesses a colleague's medical record out of curiosity without any treatment purpose. This is a violation of which HIPAA concept?

Accepted Answer

Minimum necessary standard

Answer

The right to access

Answer

The authorization requirement

Answer

The accounting of disclosures rule

Question 3

Which of the following is a required implementation specification under the HIPAA Security Rule's administrative safeguards?

Accepted Answer

Security management process

Answer

Workstation security

Answer

Encryption and decryption

Answer

Facility access controls

Question 4

A patient asks a covered entity to restrict disclosure of PHI to their health plan for services paid out-of-pocket. The covered entity must:

Accepted Answer

Comply with the restriction

Answer

Deny the request as it conflicts with billing requirements

Answer

Consult with the health plan before deciding

Answer

Comply only if the service cost is under $500

Question 5

Which HIPAA provision allows patients to request corrections to their medical records?

Accepted Answer

Right to amend

Answer

Right to access

Answer

Right to accounting of disclosures

Answer

Right to request restrictions

Question 6

Which of the following constitutes a permissible disclosure of PHI without patient authorization?

Accepted Answer

Disclosing PHI to public health authorities for disease reporting

Answer

Sharing records with a patient's employer

Answer

Providing records to a life insurance company

Answer

Releasing PHI to a marketing firm

Question 7

The HIPAA Privacy Rule's 'treatment, payment, and operations' (TPO) provision allows covered entities to:

Accepted Answer

Use and disclose PHI without patient authorization for TPO purposes

Answer

Share PHI with any party for any reason

Answer

Sell PHI to business partners

Answer

Disclose all PHI to other covered entities