RHIT - Registered Health Information Technician HIPAA Privacy and Security 2

Question 1

What is the difference between HIPAA's Privacy Rule and Security Rule?

Accepted Answer

The Privacy Rule governs use and disclosure of all PHI while the Security Rule addresses protection of electronic PHI

Answer

They are the same rule

Answer

The Privacy Rule applies to hospitals and the Security Rule to clinics

Answer

The Security Rule replaced the Privacy Rule

Question 2

A patient requests access to their complete medical record. Within what timeframe must the covered entity respond?

Accepted Answer

Within 30 days, with one 30-day extension if needed

Answer

Immediately

Answer

Within 90 days

Answer

There is no required timeframe

Question 3

What constitutes a 'breach' under the HIPAA Breach Notification Rule?

Accepted Answer

An impermissible use or disclosure of PHI that compromises security or privacy

Answer

Any access to a patient's record

Answer

A scheduled system maintenance window

Answer

A patient requesting their own records

Question 4

Which HIPAA Security Rule safeguard category includes workforce training?

Accepted Answer

Administrative safeguards

Answer

Technical safeguards

Answer

Physical safeguards

Answer

Organizational requirements

Question 5

What is the HIPAA 'accounting of disclosures' requirement?

Accepted Answer

The right of patients to receive a list of certain disclosures of their PHI during the prior six years

Answer

An accounting of financial transactions

Answer

A record of employee access to the building

Answer

An inventory of computer equipment

Question 6

What is encryption and why is it important for ePHI?

Accepted Answer

Converting data into an unreadable coded format that can only be decoded with the proper key

Answer

A type of antivirus software

Answer

Deleting data after a set period

Answer

Only used for email communication