Deck 28: The Manager and Living With Hipaa

Question 1

The sole purpose of HIPAA-the Health Insurance Portability and Accountability Act-was to enable workers to move between employers' plans without gaps in coverage.

Answer 1

False

Question 2

The healthcare managers who were initially most concerned with HIPAA were those in human resources.

Answer 2

True

Question 3

It is the contentious Title IV of HIPAA that is labeled Administrative Simplification.

Answer 3

False

Question 4

The Data Security Rule of IHPAA provides for the privacy of personal medical information and governs its distribution.

Question 5

The essential intent of the Privacy Rule is an effort to strike ensure that personal health information is accessible only to those who truly need it.

Question 6

Your personal health information may be disclosed if the organization believes that disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or group.

Question 7

It is evident that HIPAA will prove to be temporary, giving way to new legislation in the coming few years.

Question 8

Fortunately, compliance with HIPAA essentially consists simply putting the appropriate policies and procedures and systems in place and mandating their use.

Question 9

Under HIPAA there can be severe financial penalties for wrongful disclosure of protected information.

Question 10

Most provider organizations have been able to implement HIPAA with no expense and little change in procedures.

Question 11

The subcontractors, suppliers, and other involved entities coming into contact with protected patient information must:

A) Safely store all information once it is no longer needed.
B) Report to the government any irregularities noted in the principal organization's HIPAA procedures.
C) Disclose when and if patient information is improperly used or disclosed.
D) Sort the records by patient classification and use only that which is pertinent.

Question 12

Despite its five Titles and 11 rules, it can truthfully be said that the portion of most interest to most provider organizations addresses:

A) Data security.
B) Patient privacy.
C) Coding for reimbursement purposes.
D) Employee confidentiality.

Question 13

Indicate which of the following of the "Rules" of HIPAA is yet to be released.

A) The Standard Transaction for First Report of Injury Rule
B) The Transactions and Code Sets Rule
C) The Standard Unique Employer Identification Rule
D) The Security Rule

Question 14

According to the HIPAA Privacy Rule, provider organizations must now:

A) Secure their information systems from unauthorized access.
B) Ensure that all employees are trained in HIPAA's privacy requirements.
C) Establish polices and procedures for the use and disclosure of protected information.
D) All of the above.

Question 15

The HIPAA definition of provider organizations excludes: include physicians' and dentists' offices; hospitals, nursing homes, and hospices; home health providers; clinical laboratories, imaging (radiologic) services; pharmacies, clinics and free-standing surgical centers and urgent care centers; and any other providers of health-related services to individuals.

A) Urgent care centers.
B) Dentists' offices.
C) Home health providers.
D) None of the above.

Question 16

The ______________________ requires a single patient identifier for all of an individual's patient health information

Question 17

The controversy over the intent versus the reality of HIPAA primarily concerns the ___________ Rule and the requirements supporting this rule.

Question 18

Under the HIPAA Privacy Rule, "small" organization is a provider having fewer than 25 ___________________ employees.

Question 19

Under HIPAA rules __________________ are prevented from obtaining patient medical information without the patient's express written authorization.

Question 20

A supervisor involved with information technology or information systems will be primarily concerned with the __________Rule of HIPAA.