Deck 2: Privacy Issues Explained

Question 1

During an investigation by the Office for Civil Rights, the inspector will depend upon the HIPAA Officer to know the details of the written policies of the organization.

Answer 1

True

Question 2

The response, "She was taken to ICU because her diabetes became acute" is an example of HIPAA-compliant disclosure of information.

Answer 2

False

Question 3

Nursing notes are not considered PHI since they are not physician's notes and therefore are not protected by HIPAA.

Answer 3

False

Question 4

Identify the choice that best completes the statement or answers the question.
Protected health information is an association between a(n)

A)diagnosis and a payer.
B)individual and a physician.
C)health care provider and a patient or two businesses.
D)diagnosis and an individual.

Question 5

Identify the choice that best completes the statement or answers the question.
What specific government agency receives complaints about the HIPAA Privacy ruling?

A)Centers for Medicare and Medicaid Services
B)Department of Health and Human Services
C)Department of Justice
D)Office for Civil Rights

Question 6

Identify the choice that best completes the statement or answers the question.
An emancipated minor is

A)a person younger than 21 who lives independently and is self-supporting.
B)a person younger than 18 who is married or divorced and possesses decision-making rights.
C)a person younger than 16 who lives independently and is self-supporting.
D)a person younger than 18 who is totally self-supporting and possesses decision-making rights.

Question 7

If a medical office does not use electronic means to send its insurance claims, it is considered a covered entity.

Question 8

It is possible for a first name and zip code to be considered individually identifiable health information (IIHI).

Question 9

Insurance companies who provide automobile and life insurance come under the HIPAA ruling as covered entities.

Question 10

In HIPAA usage, TPO stands for treatment, payment, and optional care.

Question 11

The Regional Offices of the Centers for Medicare and Medicaid Services (CMS) is the only way to contact the government about HIPAA questions and complaints.

Question 12

Identify the choice that best completes the statement or answers the question.
Use and disclosure of PHI is permitted without authorization with the EXCEPTION of which of the following?

A)When incidental to a permitted use and disclosure
B)When releasing process or psychotherapy notes
C)For public interest and to benefit the public
D)When releasing to the individual whose health information it is

Question 13

Financial records fall outside the scope of HIPAA.

Question 14

The HIPAA Privacy Rule gives patients assurance that their personal health information will be treated the same no matter which state or organization receives their medical information.

Question 15

Identify the choice that best completes the statement or answers the question.
Research organizations are permitted to receive

A)a limited data set that has been de-identified for research purposes.
B)IIHI without withholding any information.
C)only IIHI when patients have given written authorization.
D)any PHI a covered entity may choose to send them in relation to the diagnoses they are researching.

Question 16

A covered entity does not have to disclose PHI to the Office for Civil Rights if they come to investigate a complaint.That is not allowed by HIPAA law.

Question 17

Identify the choice that best completes the statement or answers the question.
Consent as defined by HIPAA is for

A)permission to reveal PHI for payment of services provided to a patient.
B)permission to reveal PHI for comprehensive treatment of a patient.
C)permission to reveal PHI for normal business operations of the provider's facility.
D)all of the above.
E)both A and B.

Question 18

Identify the choice that best completes the statement or answers the question.
Who in the health care organization is responsible to know where the written policies are located regarding HIPAA compliance?

A)Only the HIPAA Officer
B)Office workers who send electronic PHI
C)All staff members, paid or not paid
D)All clinical staff members

Question 19

A signed receipt of the facility's Notice of Privacy Practices (NOPP) is mandated by the Privacy Rule in order for a patient to receive services from a health care provider.

Question 20

Identify the choice that best completes the statement or answers the question.
The Privacy Rule

A)applies only to protected health information (PHI).
B)establishes policies for covered entities.
C)details when authorization to release PHI is needed.
D)none of the above.
E)both answers A and C.

Question 21

Identify the choice that best completes the statement or answers the question.
Psychotherapy notes or process notes include

A)the treatment plan for the patient.
B)a summary of medications the patient is prescribed.
C)the therapist's impressions of the patient.
D)the current state of the patient, medications prescribed, and their side effects.

Question 22

Identify the choice that best completes the statement or answers the question.
The minimum penalty per incidence for violations that the Office for Civil Rights finds for noncompliance to the Privacy Rule is

A)$100.
B)$500.
C)$1,000.
D)$5,000.

Question 23

Identify the choice that best completes the statement or answers the question.
Written policies and procedures relating to the HIPAA Privacy Rule

A)are kept by the HIPAA officer only.
B)must be only in electronic format.
C)are not necessary.
D)must be available to all employees.

Question 24

Match the terms "disclosure of PHI" and "use of PHI" according to HIPAA definition of inside the covered entity or outside the covered entity.

outside the entity

A)Use of PHI is for sharing, examination, or analysis of IIHI
B)Disclosure of PHI is for releasing IIHI

Question 25

Identify the choice that best completes the statement or answers the question.
For individuals requesting to amend their medical record

A)the replaced portion of the record is destroyed.
B)the provider has the option to reject the amendment.
C)there is a new file made just for the amendment.
D)it is not possible without a court order.

Question 26

Identify the list of disclosures that are or are not for public interest or benefit.

disclosure for Workers' Compensation laws

A)For public interest or benefit
B)Not for public interest or benefit

Question 27

Identify the choice that best completes the statement or answers the question.
According to AHIMA report, the most common problem that health care providers face in relation to PHI is

A)complying with BA provisions.
B)confusion about the NOPP provisions.
C)releasing information to relatives of patients.
D)lack of a standardized process to release PHI.

Question 28

Identify the list of disclosures that are or are not for public interest or benefit.

disclosure for law enforcement purposes

A)For public interest or benefit
B)Not for public interest or benefit

Question 29

Identify the choice that best completes the statement or answers the question.
When there is an alleged violation to HIPAA Privacy Rule

A)an individual may sue the offending health care provider.
B)an individual may join a class action lawsuit against the provider.
C)the individual should report the provider to the local county sheriff.
D)there is no option to sue a health care provider for HIPAA violations.

Question 30

Identify the list of disclosures that are or are not for public interest or benefit.

disclosure for donation and transplantation of organs from deceased donors

A)For public interest or benefit
B)Not for public interest or benefit

Question 31

Identify the choice that best completes the statement or answers the question.
During an investigation by the Office for Civil Rights, each provider is expected to have the following EXCEPT

A)business associate contracts with vendors to protect privacy of PHI.
B)written policy and procedures.
C)a designated privacy official.
D)a workforce trained in state law.

Question 32

Identify the choice that best completes the statement or answers the question.
Requesting to amend a medical record was a feature included in HIPAA because of

A)increase in theft of medical information for criminal purposes.
B)possible difference in opinion between patient and physician regarding the diagnosis and treatment.
C)ease of human entry error when posting patient information.
D)all of the above.
E)both B and C.

Question 33

Identify the list of disclosures that are or are not for public interest or benefit.

disclosure if serious threat to health and safety of person or public

A)For public interest or benefit
B)Not for public interest or benefit

Question 34

Identify the list of disclosures that are or are not for public interest or benefit.

disclosure to individual as requested

A)For public interest or benefit
B)Not for public interest or benefit

Question 35

Identify the list of disclosures that are or are not for public interest or benefit.

disclosure for subpoena

A)For public interest or benefit
B)Not for public interest or benefit

Question 36

Identify the list of disclosures that are or are not for public interest or benefit.

disclosure for health oversight activities

A)For public interest or benefit
B)Not for public interest or benefit

Question 37

Identify the choice that best completes the statement or answers the question.
A hospital or other inpatient facility may include patients in their published directory

A)for any advertising purpose.
B)only when the patient or family has not chosen to "opt-out" of the published directory.
C)to announce on a radio station who has been admitted.
D)so that pharmaceutical organizations may offer the patients special offers on their drugs.

Question 38

Identify the choice that best completes the statement or answers the question.
The Office for Civil Rights receives complaints regarding the Privacy Rule.About what percentage of these complaints have been ruled either no violation or the entity is working toward compliance?

A)About 25%
B)About 50%
C)About 75%
D)About 90%

Question 39

Identify the choice that best completes the statement or answers the question.
Typical Business Associate individuals are

A)in-house lab technicians, transcriptionists, and billing specialists.
B)health plan agents, in-house transcriptionists, and office billing specialists.
C)biometric device repairmen, legal counsel to a clinic, and outside coding service.
D)nonclinical staff such as the hospital billing office, housekeeping staff, and maintenance workers.

Question 40

Identify the list of disclosures that are or are not for public interest or benefit.

disclosure for cause of death

A)For public interest or benefit
B)Not for public interest or benefit

Question 41

Match these Privacy Rule definitions with the correct word or phrase.

minimum necessary

A)Administrative Simplification
B)Reasonable effort to limit PHI to only that which is necessary to accomplish intended purpose
C)PHI that excludes direct identifiers for research purposes
D)Written permission allowing disclosure of PHI for purposes other than TPO
E)Permission granted to disclose PHI for purposes of TPO
F)Persons with legal authority to act on behalf of minor children

Question 42

Match these Privacy Rule definitions with the correct word or phrase.

Consent

A)Administrative Simplification
B)Reasonable effort to limit PHI to only that which is necessary to accomplish intended purpose
C)PHI that excludes direct identifiers for research purposes
D)Written permission allowing disclosure of PHI for purposes other than TPO
E)Permission granted to disclose PHI for purposes of TPO
F)Persons with legal authority to act on behalf of minor children

Question 43

Match these Privacy Rule definitions with the correct word or phrase.

Title II

A)Administrative Simplification
B)Reasonable effort to limit PHI to only that which is necessary to accomplish intended purpose
C)PHI that excludes direct identifiers for research purposes
D)Written permission allowing disclosure of PHI for purposes other than TPO
E)Permission granted to disclose PHI for purposes of TPO
F)Persons with legal authority to act on behalf of minor children

Question 44

Match these Privacy Rule definitions with the correct word or phrase.

limited data set

A)Administrative Simplification
B)Reasonable effort to limit PHI to only that which is necessary to accomplish intended purpose
C)PHI that excludes direct identifiers for research purposes
D)Written permission allowing disclosure of PHI for purposes other than TPO
E)Permission granted to disclose PHI for purposes of TPO
F)Persons with legal authority to act on behalf of minor children

Question 45

Match these Privacy Rule definitions with the correct word or phrase.

in loco parentis

A)Administrative Simplification
B)Reasonable effort to limit PHI to only that which is necessary to accomplish intended purpose
C)PHI that excludes direct identifiers for research purposes
D)Written permission allowing disclosure of PHI for purposes other than TPO
E)Permission granted to disclose PHI for purposes of TPO
F)Persons with legal authority to act on behalf of minor children

Question 46

Match the terms "disclosure of PHI" and "use of PHI" according to HIPAA definition of inside the covered entity or outside the covered entity.

within the entity

A)Use of PHI is for sharing, examination, or analysis of IIHI
B)Disclosure of PHI is for releasing IIHI

Question 47

Match these Privacy Rule definitions with the correct word or phrase.

Authorization

A)Administrative Simplification
B)Reasonable effort to limit PHI to only that which is necessary to accomplish intended purpose
C)PHI that excludes direct identifiers for research purposes
D)Written permission allowing disclosure of PHI for purposes other than TPO
E)Permission granted to disclose PHI for purposes of TPO
F)Persons with legal authority to act on behalf of minor children