Deck 3: Patient Protection Policies and Regulations

Question 1

The _____ is a list of guarantees to those receiving medical care, that may take the form of a law or nonbinding declaration.

A) electronic health record
B) Enforcement Rule
C) Health Insurance Portability and Accountability Act
D) Patient Bill of Rights

Answer 1

D

Question 2

Which of the following is primarily focused on enforcing laws that prohibits discrimination based on race, color, national origin, sex, disability, and age?

A) Health Insurance Portability and Accountability Act
B) Office for Civil Rights
C) health care clearinghouses
D) Enforcement Rule regulators

Answer 2

B

Question 3

The Health Insurance Portability and Accountability Act (HIPAA) Enforcement Rule contains provisions relating to compliance, procedures for hearings, and investigations and ________________.

A) allows patient health information to be held indefinitely
B) clears up gray areas of CMS and HITECH
C) imposes civil money penalties for violations
D) is the most recent act of health policy

Answer 3

C

Question 4

How did the Final Omnibus Rule of 2013 clear up gray areas of HIPAA and HITECH?

A) Provided limitations on monetary penalties for violations
B) Provided a framework for reporting noncompliance
C) Expanded time limits on maintaining patient records
D) Expanded the list of covered entities to EHR vendors

Question 5

What would be considered a covered entity under HIPAA?

A) individual patients
B) employers
C) state board of health
D) health care providers

Question 6

Which of the following is considered protected patient information?

A) Diagnosis
B) Primary language
C) Patient's address
D) Name of prescriber

Question 7

Which of the following is an example of a violation of the HIPAA Privacy Rule and not the HIPAA Security Rule?

A) A healthcare worker shares their computer password for medical records.
B) A healthcare worker discusses a patient's medical care in a public space.
C) The health care worker views a family member's electronic chart without permission.
D) The facility does not utilize virus protection software for computerized billing.

Question 8

. Which of the following is an example of an individual's right under the HIPAA Privacy Rule?

A) The individual was able to obtain a copy of their surgical records.
B) The individual was able to complain about their care.
C) The individual's family member requested a copy of the medical records.
D) The individual's employer requested a copy of the medical records.

Question 9

An individual is concerned that their employer will terminate their employment because the employer has seen the individual's record of a recent abortion. Which of the following would be an example of an appropriate complaint to the Office of Civil Rights regarding HIPAA?

A) The individual wishes to complain of the quality of care received in a facility.
B) The individual believes that their records are incorrect and want to change them.
C) The individual has discovered that their health records have been breached by a facility.
D) The individual requests the medical diagnosis of their nursing home room mate.

Question 10

The Health Information Technology for Economic and Clinical Health Act established which of the following punitive measures for violation of electronic health records?

A) Tiers of penalty amounts which increases for each violation with a maximum amount of $1.5 million for all violations
B) Notifications for the patient of the extent to which private health information has been compromised
C) Avenues for complaints to reach providers and the U.S. DHHS for denial of access to medical records
D) Fines for obstructing the flow of health information necessary for providing and promoting high quality health care