Question 1

As Privacy Officer of Florida Beach Hospital, you are reviewing the following new policy for approval and implementation.  Based on the HIPAA accounting of, disclosure rules, what problem with the policy do you have?

Accepted Answer

The answer of As Privacy Officer of Florida Beach Hospital,...

Question 2

Encryption, access control, emergency access to records, and biometrics are examples of

Accepted Answer

Encryption, access control, emergency access to records, and biometrics are examples of technical security measures. Technical security refers to the use of technology to protect information and assets from unauthorized access or attacks.

Question 3

The Darling v. Charleston Community Memorial Hospital case established the following doctrine for hospitals to observe and changed the way hospitals dealt with liability.

Accepted Answer

The Darling v. Charleston Community Memorial Hospital case established the doctrine of corporate negligence, which holds hospitals liable for the actions of their employees, including physicians and nurses. This doctrine changed the way hospitals dealt with liability and required them to provide adequate staffing, training, and equipment to ensure patient safety. The doctrine of respondeat superior relates to the liability of an employer for the actions of an employee, the doctrine of continuing wrong relates to continuing damages, and the doctrine of res ipsa loquitur pertains to certain types of cases where negligence is presumed based on the circumstances of the injury.

Question 4

Which of the following would be a business associate?

Accepted Answer

A release of information company is considered a business associate because it handles protected health information on behalf of a covered entity, such as a healthcare provider.

Question 5

HIPAA requires that certain covered entities provide every patient a Notice of Privacy Practices that sets forth all of the following EXCEPT

Accepted Answer

HIPAA requires covered entities to provide patients with a Notice of Privacy Practices that outlines how their protected health information may be used and disclosed, the patient's rights regarding their PHI, and the covered entity's obligations to protect the patient's PHI. However, HIPAA does not require covered entities to provide every patient with its annual business report.

Question 6

Which resource is the most valuable to monitor Medicare changes?

Accepted Answer

The Federal Register is the official daily publication for rules, proposed rules, and notices of federal agencies and organizations, including updates and changes to the Medicare program. It is the most reliable resource for monitoring Medicare changes. The other resources may contain information on Medicare, but the Federal Register is the most specific and up-to-date source.

Question 7

Which of the following is an example of health care operations?

Accepted Answer

Health care operations include activities such as legal services, which would involve sharing records with a hospital attorney for a malpractice case.

Question 8

Which would be the better "best practice" for handling fax transmission of a physician's orders?

Accepted Answer

Treating faxed orders like verbal orders and requiring authentication of the orders by appropriate medical staff within the required time period helps ensure that the orders are legitimate and prevents errors or misunderstandings. This is a commonly accepted best practice in healthcare. Option B does not necessarily ensure authentication of the orders, while option C unnecessarily delays the implementation of the orders. Option D is not a viable option as faxed orders are often used in healthcare.

Question 9

HIM professionals have a duty to maintain health information that complies with

Accepted Answer

HIM professionals have a duty to maintain health information that complies with state and federal statutes as well as accreditation standards. Compliance with all of these standards is essential to protect patient privacy, ensure the accuracy and completeness of health information, and ensure that healthcare organizations are in compliance with legal requirements. All of these factors are critical to the effective functioning of healthcare organizations and the delivery of high-quality healthcare services.

Question 10

As a general rule, a person making a report in good faith and under statutory command (e.g., on child abuse, communicable diseases, births, deaths, etc.) is

Accepted Answer

A person making a report in good faith and under statutory command is protected from liability claims. This protection is known as “qualified immunity” and is intended to encourage reporting without fear of retaliation.

Question 11

According to AHIMA and AHA guidelines, which of the following would be an acceptable authorization for release of information from the medical record of an adult, mentally competent patient hospitalized from 4/16/2007 to 5/10/2007? An authorization dated

Accepted Answer

An authorization dated 7/10/2007 and presented 7/15/2007 is acceptable because it is dated after the patient's hospitalization, indicating that the patient was aware of the information being released.

Question 12

A record that has been requested by subpoena duces tecum is currently located at an off-site microfilm company. By contacting the microfilm provider, you learn that the microfilm is ready and the original copy of the record still exists. What legal requirement would compel you to produce the original record for the court?

Accepted Answer

The best evidence rule requires that the original document be produced in court if it is available, rather than a copy or other secondary evidence. Therefore, if the original copy of the record still exists, the best evidence rule would compel you to produce it for the court, even if a copy or microfilm version is also available.

Question 13

Which of the following statements demonstrates a violation of protected health information?

Accepted Answer

This statement involves sharing specific medical information about a patient (Susan's hysterectomy) with someone who is not authorized to receive it, which is a violation of protected health information (PHI) under privacy regulations like HIPAA.

Question 14

HIM personnel charged with the responsibility of bringing a medical record to court would ordinarily do so in answer to a

Accepted Answer

A subpoena duces tecum is a court order that requires a person to produce documents or evidence, in this case the medical record, to the court. This is the most appropriate option for HIM personnel to bring the medical record to court. Personal subpoena (A) is not appropriate as it is a court order for an individual to appear in court, not to produce evidence. Deposition (B) is a pre-trial examination of a witness and may not result in the actual production of the medical record. Judgment (D) is also not appropriate as it is the final decision of the court in a case, and would not be the mechanism for obtaining the medical record.

Question 15

Brad Thomas is a former patient at Alabama General Hospital. He came to the HIM Department today and asked for a list of people who have requested his medical records over the past 10 years. He also wants to know what was released. Which is the appropriate response to Brad's request?

Accepted Answer

HIPAA regulations require that patients be provided with an accounting of disclosures of their medical records for the past 6 years.

Question 16

A signed consent for release of information dated December 1, 2005, is received with a request for the chart from the patient's admission of 12/5/2005. Indicate the appropriate response from the options below.

Accepted Answer

The answer of A signed consent for release of information...

Question 17

Which of the following statements is true about the Privacy Act of 1974?

Accepted Answer

The Privacy Act of 1974 applies to the federal government and its agencies. It does not apply to private organizations or healthcare organizations, except for those that are contracted by the federal government to provide healthcare services. The Veterans Health Administration is also subject to the Privacy Act.

Question 18

Willful disregard of a subpoena is considered

Accepted Answer

Willful disregard of a subpoena is considered contempt of court.

Question 19

In general, which of the following statements is correct?

Accepted Answer

According to the Supremacy Clause of the U.S. Constitution, federal law takes precedence over state law when there is a conflict. This means that valid federal laws supersede state laws.

Question 20

Intentional threats to security could include

Accepted Answer

Intentional threats refer to deliberate actions taken by insiders or outsiders with the intention of causing harm to a system or its components, such as stealing sensitive information or unauthorized access of data. A natural disaster, equipment failure, and human error are all unintentional and not deliberately carried out to cause harm to the system. Therefore, only D – data theft is an intentional threat.

Exam 1: Registered Health Information Administrator

As Privacy Officer of Florida Beach Hospital, you are reviewing the following new policy for approval and implementation. Based on the HIPAA accounting of, disclosure rules, what problem with the policy do you have?