Deck 17: Privacy in the Physicians Office

Question 1

Information about patients' rights regarding PHI does not have to be included in a notice of privacy practices.

Answer 1

False

Question 2

Patients' rights are the heart of the HIPAA Privacy Rule.

Answer 2

True

Question 3

The second part of the administrative simplification provision deals with privacy and confidentiality.

Answer 3

True

Question 4

A notice of privacy practices must be presented before a patient can receive emergency care.

Question 5

A notice of privacy practices must include an effective date.

Question 6

The medical assistant should always document any form of communication about the patient's preferences in releasing PHI.

Question 7

Patients do not have the right to restrict any part of their PHI.

Question 8

After patients sign the first notice of privacy practices, they need not ever sign another one.

Question 9

The medical assistant never has to ask for identification of patients in the office setting, because this can be easily assumed.

Question 10

Patients have a right to notification of a facility's privacy practices.

Question 11

The goal of Title I of HIPAA is to reduce administrative costs in the healthcare industry.

Question 12

A separate release of information form often is used for human immunodeficiency virus information.

Question 13

A minor can never consent to his or her own medical care.

Question 14

The notice of privacy practices must include the name of a person to contact at the facility for more information.

Question 15

HIPAA regulations limit the use of pre-existing condition exclusions and guarantee that certain individuals can buy healthcare insurance after leaving or losing a job.

Question 16

Both covered entities and business associates can discuss a patient's bill with a person other than the patient to obtain reimbursement.

Question 17

Employees in healthcare facilities must be trained so that they understand the procedures related to HIPAA compliance.

Question 18

All healthcare facilities should designate a person as the privacy officer.

Question 19

Patients have more control over their medical records today because of HIPAA's regulations.

Question 20

A pharmacist cannot discuss a patient on the phone when another person is standing nearby.

Question 21

Patients have the right to request that their protected health information be amended.

Question 22

An incidental disclosure is a primary use of health information that could have been prevented.

Question 23

Which of the following could be considered an incidental exposure?

A)Confidential conversations between providers with patients overheard through the wall in adjacent examination rooms
B)Physicians speaking with patients in semiprivate hospital rooms
C)Seeing other patients' names when signing in at the office
D)All of the above

Question 24

HIPAA violators face only civil charges if patient privacy rights are compromised.

Question 25

Individuals or organizations that perform or assist a covered entity in the performance of a function related to individually identifiable health information are called:

A)business associates
B)partners
C)healthcare providers
D)corporations

Question 26

A complainant is the person about whom a complaint is registered.

Question 27

Which of these is not true about an incidental exposure?

A)It cannot be reasonably prevented.
B)It is limited in nature.
C)It occurs as a result of another use or disclosure that is permitted.
D)It can be reasonably prevented.

Question 28

Complaints regarding patient privacy must be filed within how many days from when the patient knew or should have known that an act occurred?

A)30
B)60
C)120
D)180

Question 29

Employees of the medical facility must be trained to implement the HIPAA procedures that the facility has put in place.

Question 30

Agencies rarely share information with regard to HIPAA compliance.

Question 31

The best method of patient identification is a:

A)birth certificate
B)state-issued ID card or driver's license
C)student ID
D)Social Security card

Question 32

Which of the following is not true regarding HIPAA laws?

A)Patients have more control over their medical records.
B)Few boundaries are set on the use and release of health records.
C)Patients can make informed choices on how their personal health information is used.
D)Violators are held accountable if patients' privacy rights are compromised.

Question 33

To infer is to derive as a conclusion from facts and premises.

Question 34

A notice of privacy practices must contain information on how to file a complaint.

Question 35

Which is not true about complaints filed with the OCR regarding privacy violations?

A)The complaint can be made orally or in writing.
B)The complaint must name the entity that is the subject of the complaint.
C)The complaint must apply to an incident that occurred after April 14, 2003.
D)The complaint must be filed within the time limits set by the OCR.

Question 36

Which of the following is not one of the patient rights provided by HIPAA?

A)Right to notice of a facility's privacy practices
B)Right to receive notice of all disclosures of PHI
C)Right to obtain the original medical record
D)Right to have access to, view, and obtain a copy of the person's PHI

Question 37

The parent is not considered the child's representative in which of the following cases?

A)When the minor consents to care and the consent of the parent is not required by state law
B)When the court dictates that the parent is the child's representative
C)When the parent refuses to allow the minor to have a confidential relationship with the provider
D)None of the above

Question 38

Individuals who lose their jobs are automatically eligible for COBRA, no matter what their employment situation.

Question 39

HIPAA protects not only the patient, but also the medical facility.

Question 40

How can the medical assistant use reasonable care when sending health information via fax?

A)Verify the fax number.
B)Direct the fax to a certain person.
C)Use cover sheets that stress confidentiality.
D)All of the above are correct.

Question 41

Patients can request that changes be made to their medical record if they inspect it and find a(n) __________.

Question 42

The division of the federal government that enforces privacy standards is:

A)OSHA
B)HIPAA
C)OCR
D)OIG

Question 43

Suppose a married woman comes to the physician's office for a pregnancy test.Who is allowed to access her PHI?

A)Her parents
B)Her husband
C)Only the patient
D)Anyone the patient has designated to access her PHI

Question 44

Before the HIPAA Privacy Rule, health information could be __________ to others without either notice to or authorization from the patient.

Question 45

Providers must review requests for amendments of PHI and act on them within _____ days.

A)30
B)60
C)90
D)120

Question 46

The patient's own information that pertains to his or her health is called __________ health information.

Question 47

An organization that transmits information in an electronic form during a transaction, as defined by HIPAA, is called a:

A)covered entity
B)business associate
C)complainant
D)healthcare provider

Question 48

The division of the federal government that enforces privacy standards is the Office for __________.

Question 49

The person making a complaint against a person or organization is called the __________.

Question 50

The __________ of the record owns it, not the patient.

Question 51

The Office of the __________ conducts audits, investigations, and inspections involving the laws that pertain to HHS.

Question 52

By noting that a patient was presented with the notice of privacy practices and refused to sign the document, the office staff can prove __________.

Question 53

PHI stands for:

A)protected health instructions
B)protected health information
C)private health information
D)private health instructions

Question 54

It is possible to encounter conflicting __________ when disclosing PHI.

Question 55

How often are patients entitled to receive an accounting of disclosures of their PHI without charge?

A)Weekly
B)Monthly
C)Semiannually
D)Annually

Question 56

The Title I provision of HIPAA regulates __________ reform.

Question 57

How many provisions does HIPAA contain?

A)One
B)Two
C)Three
D)Four

Question 58

If something is generally or widely accepted, practiced, or favored, it is:

A)prevalent
B)precluded
C)covered
D)inferred

Question 59

To make known, as a confidence or secret, is to:

A)divulge
B)infer
C)preclude
D)ask

Question 60

To __________ is to make known, as a confidence or secret.

Question 61

The manner of expressing oneself in words is called __________.

Question 62

A(n) __________ process should be in place for instances when the provider does not agree with restrictions that patients place on their PHI.

Question 63

Transmissions of information between two parties to carry out financial or administrative activities related to healthcare are called __________.

Question 64

The HIPAA Privacy Rule allows parents to see the medical records of their children as long as this is not __________ with state law.

Question 65

Some medical offices require patients to sign a(n) __________ annually that proves patients were notified of the privacy policy.

Question 66

Electronic __________ are used daily in modern physicians' offices.

Question 67

__________ media are used daily in modern physicians' offices and healthcare facilities.

Question 68

Requests to amend PHI can be denied if the provider is not the __________ of the record.

Question 69

The office policy manual should list acceptable forms of __________ that can be used to release health information.

Question 70

If uncertain about any situation with regard to HIPAA compliance, the medical assistant should consult the HIPAA __________.

Question 71

A(n) __________ is the person at a healthcare facility who deals with issues related to patient privacy and HIPAA compliance.

Question 72

Most physicians' offices require that patients request access to their PHI in __________.

Question 73

Before HIPAA regulations were established, a financial __________ could deny a mortgage or credit card based on information obtained from an individual's health history.

Question 74

If a patient sees other patients' names when signing in for an appointment, the situation is called a(n) __________ disclosure.

Question 75

The creation of privacy and security laws was intended to make the healthcare process more __________ and to provide faster reimbursements.

Question 76

Because of HIPAA, patients are able to make informed __________ about the use of their personal health information.

Question 77

A notice of privacy practices is not required in a(n) __________ situation.

Question 78

Healthcare providers face significant challenges during major __________ in keeping patients safe and protecting their privacy.