RHIT - Registered Health Information Technician HIPAA Privacy and Security 2

Question 1

What is the difference between HIPAA's Privacy Rule and Security Rule?

Accepted Answer

The Privacy Rule governs use and disclosure of all PHI while the Security Rule addresses protection of electronic PHI

Answer

The Privacy Rule covers all forms of PHI; the Security Rule specifically addresses ePHI protection through three safeguard categories.

Question 2

A patient requests access to their complete medical record. Within what timeframe must the covered entity respond?

Accepted Answer

Within 30 days, with one 30-day extension if needed

Answer

HIPAA requires action within 30 days with one possible 30-day extension.

Question 3

What constitutes a 'breach' under the HIPAA Breach Notification Rule?

Accepted Answer

An impermissible use or disclosure of PHI that compromises security or privacy

Answer

A breach is an impermissible use or disclosure that compromises PHI security or privacy.

Question 4

Which HIPAA Security Rule safeguard category includes workforce training?

Accepted Answer

Administrative safeguards

Answer

Security awareness and training is an administrative safeguard.

Question 5

What is the HIPAA 'accounting of disclosures' requirement?

Accepted Answer

The right of patients to receive a list of certain disclosures of their PHI during the prior six years

Answer

Patients can request an accounting of PHI disclosures made in the six years prior to the request.

RHIT - Registered Health Information Technician Practice Test