RHIT - Registered Health Information Technician HIPAA Privacy and Security 3

Question 1

A hospital employee looks up a celebrity patient's record out of curiosity. What type of HIPAA violation is this?

Accepted Answer

An impermissible access/use of PHI that violates the minimum necessary standard

Answer

Accessing a record without a legitimate work-related reason is an impermissible use of PHI.

Question 2

What is a HIPAA Security Rule 'addressable' implementation specification?

Accepted Answer

A specification where the organization must assess if it is reasonable, and if not, document why and implement an alternative

Answer

Addressable does not mean optional; it requires assessment, documentation, and either implementation or an equivalent alternative.

Question 3

What are the HIPAA Security Rule's physical safeguard requirements?

Accepted Answer

Policies to protect electronic systems, equipment, and buildings from hazards and unauthorized intrusion

Answer

Physical safeguards protect the physical environment where ePHI is stored, processed, or transmitted.

Question 4

What rights do patients have regarding restrictions on PHI use under HIPAA?

Accepted Answer

Patients can request restrictions, and providers must agree when patients pay out-of-pocket in full

Answer

Patients can request restrictions, and providers must agree to restrict disclosures to health plans when the patient pays in full out-of-pocket.

Question 5

What is the HIPAA Security Rule requirement for a designated security official?

Accepted Answer

Every covered entity must designate a security official responsible for developing and implementing security policies

Answer

This is a required standard; every covered entity must assign security responsibility to a specific individual.

RHIT - Registered Health Information Technician Practice Test