RHIT HIPAA Privacy and Security 5

Question 1

Which of the following scenarios represents a valid use of the HIPAA 'limited data set'?

Accepted Answer

Sharing data with a researcher under a data use agreement with 16 identifiers removed

Answer

Providing PHI to a marketing company for advertising

Answer

Giving full PHI to a business associate without a BAA

Answer

Disclosing records to an employer for hiring decisions

Question 2

Under the HITECH Act, which entities became directly liable for HIPAA compliance?

Accepted Answer

Business associates as well as covered entities

Answer

Health plans only

Answer

Only covered entities with more than 50 employees

Answer

Federal healthcare agencies

Question 3

A hospital posts a notice on its website and in patient areas about its privacy practices. This document is known as the:

Accepted Answer

Notice of Privacy Practices (NPP)

Answer

Business associate agreement

Answer

Authorization form

Answer

Security risk assessment

Question 4

Which of the following is true regarding HIPAA and deceased individuals' PHI?

Accepted Answer

PHI of deceased individuals is protected for 50 years after death

Answer

HIPAA protections end immediately upon death

Answer

HIPAA protections apply for 5 years after death

Answer

Deceased individuals have no HIPAA rights

Question 5

An HIM professional sends a fax containing PHI to the wrong recipient. Under HIPAA, this is considered:

Accepted Answer

A potential breach requiring a risk assessment

Answer

An authorized disclosure requiring no action

Answer

Automatically a reportable breach

Answer

A de minimis event with no consequences

Question 6

Which of the following best describes the HIPAA 'right to request confidential communications'?

Accepted Answer

Patients can request that communications be made through alternative means or locations

Answer

Patients can demand all records be encrypted

Answer

Patients can require providers to never contact them

Answer

Patients can block all disclosures to family members

Question 7

Which office is responsible for enforcing HIPAA Privacy and Security Rules?

Accepted Answer

Office for Civil Rights (OCR) within HHS

Answer

Centers for Medicare & Medicaid Services (CMS)

Answer

Food and Drug Administration (FDA)

Answer

Office of Inspector General (OIG)