Question 1

Outsourcing information systems results in which of the following?

Accepted Answer

The answer of Outsourcing information systems results in which of...

Question 2

Physical safeguards include:

Accepted Answer

The answer of Physical safeguards include: 
...

Question 3

Patricia is processing a request for medical records. The record contains an operative note and a discharge summary from another hospital. The records are going to another physician for patient care. What should Patricia do?

Accepted Answer

As long as the requester has a valid reason for needing the medical records and it is for patient care purposes, it is acceptable to include the operative note and discharge summary from another hospital. This is known as a "continuation of care" disclosure and is allowed under HIPAA regulations. Option A is incorrect because the requester is allowed to request the records from whichever hospital they choose, and it is not Patricia's responsibility to ensure they obtain the records from the original source hospital. Option C is also incorrect because redisclosure of medical records for non-patient care purposes is illegal under HIPAA regulations.

Question 4

You are considering three vendors for your new encoder. Your facility wants to purchase the system from a stable company. After reviewing the vendor profile information below, which of the vendors would you eliminate from consideration?

Accepted Answer

The answer of You are considering three vendors for your...

Question 5

Mary processed a request for information and mailed it out last week. Today, the requestor, an attorney, called and said that all of the requested information was not provided. Mary pulls the documentation, including the authorization and what was sent. She believes that she sent everything that was required. She confirms this with her supervisor. The requestor still believes that some extra documentation is required. Given the above information, which of the following statements is true?

Accepted Answer

Mary has followed the facility's policies and procedures by reviewing the request and sending the necessary information. The facility has the right to interpret a request and apply the minimum standard rule, which means that a requester cannot request extra information that is not necessary for their purpose. Mary's supervisor also confirms that Mary has followed the facility's policies and procedures, therefore Mary is not required to release the extra documentation.

Question 6

Ralph has asked for a list of disclosures of his medical record. He seems surprised not to see his physician, Dr. Emory, on it. What do you tell him?

Accepted Answer

Disclosures used for treatment purposes, such as when Dr. Emory accesses Ralph's medical record to provide treatment, are often not recorded on a list of disclosures. This is because these types of disclosures are considered "routine" and do not require specific authorization from the patient.

Question 7

Dr. Brown has just approved the patient's request to amend the medical record. Dr. Brown has routed the request with his approval to the HIM Department. What should the HIM Department do?

Accepted Answer

The HIM Department should file the request where the erroneous information is located and send a copy of the amendment to anyone who has a copy of the erroneous information plus anyone the patient requests. This ensures that the correct information is available to all those who may need it in the future. Additionally, it respects the patient's right to control their own medical information.

Question 8

Crystal has received a copy of some documents from her medical record. In the request, she had specifically requested the discharge summary, history and physical, operative report, pathology report, laboratory results, and x-ray reports. The records that she received only included the discharge summary and history and physical. The enclosed letter said that the other documents were not enclosed because of the minimum necessary rule. What should the director tell Crystal when she calls?

Accepted Answer

Patients are exceptions to the minimum necessary rule, meaning they have the right to access their complete medical records, including all the documents Crystal requested.

Question 9

You are looking at your policies, procedures, training program, etc., and comparing them to the HIPAA regulations. You are conducting a

Accepted Answer

The answer of You are looking at your policies, procedures,...

Question 10

You are writing a new policy for tracking the release of identifiable patient information. Which of the following will be included in the list of disclosures to track?

Accepted Answer

The answer of You are writing a new policy for...

Question 11

Which of the following techniques would a facility employ for access control?

Accepted Answer

Option 1 and Option 2 are the most commonly used techniques for access control. Option 3 is related to intrusion detection and Option 4 is related to biometric identification, which are not always used in access control systems. Therefore, the best choice is B which includes the two most common techniques used for access control.

Question 12

You are the Chief Privacy Officer for Premier Medical Center. Which of the following are you responsible for?

Accepted Answer

As the Chief Privacy Officer, you are primarily responsible for developing plans and policies related to privacy, such as reporting privacy complaints.

Question 13

Which of the following situations violate a patient's privacy?

Accepted Answer

Providing patient names and addresses to a pharmaceutical company violates a patient's privacy as it is sharing their personal information without their consent. The other situations mentioned in options A, B, and D involve either providing helpful information to patients or analyzing data in a way that does not compromise an individual patient's privacy.

Question 14

Your transcription system is set up to back up your hard drive every 5 minutes. The backup is on the hard drive of another computer. This computer is located in the room next door to the primary computer. What should be done to improve the backup process?

Accepted Answer

Moving the backup computer to a distant location provides better protection against physical damage or theft affecting both computers simultaneously.

Question 15

The notice of privacy practices says: "Your medical record may be used for quality reviews." The reason this statement is on the notice is

Accepted Answer

This statement is an example of health care operations, which is one of the permissible uses and disclosures of protected health information under HIPAA. Quality reviews are necessary to maintain and improve the quality of care provided to patients.

Question 16

State law says that the hospital must keep a record of disclosures for 10 years. HIPAA says 6 years. What should the hospital do to comply with the conflicting laws?

Accepted Answer

When state law is stricter than HIPAA, the hospital must comply with the state law, which in this case requires keeping records for 10 years.

Question 17

Contingency planning includes which of the following processes?

Accepted Answer

Contingency planning specifically includes disaster planning in order to prepare for unexpected events or disasters that may disrupt business operations. The other options listed may be important considerations for a company, but they do not fall under the scope of contingency planning.

Question 18

Margaret has signed an authorization to release information regarding her ER visit for a fractured finger to her attorney. Specifically, she says to release the ER history and physical, x-rays, and any procedure notes for finger fracture. Which of the following violates her privacy?

Accepted Answer

The release of an x-ray of the chest is not relevant to Margaret's finger fracture and is not authorized by her. It violates her privacy as the information is not necessary for her legal case. Choices A, C, and D are authorized by Margaret and relevant to her finger fracture, so they do not violate her privacy.

Question 19

Choosing to be in the directory means which of the following?

Accepted Answer

Choosing to be in the directory means that friends and family can find out what room you are in. This information is generally not released to the public and your condition can still be kept confidential unless you authorize its release.

Question 20

Kyle, the HIM Director, has received a request to amend a patient's medical record. The appropriate action for him to take is

Accepted Answer

It is important for Kyle to follow the proper protocol and route the request to the physician who wrote the note in question. This physician will then evaluate the request and make the decision to accept or reject the amendments. Kyle should not make the modification himself without physician approval or return the notice to the patient without appropriate action. Filing the request in the chart may be necessary but it is not the appropriate immediate action.

Exam 1: Registered Health Information Administrator