Deck 10: Patient Confidentiality and Hipaa

Question 1

The use of communication and information in medical practice, research, and education is called

A) sanctions.
B) covered entities.
C) the privacy rule.
D) medical informatics.

Answer 1

medical informatics.

Question 2

Healthcare fraud alerts are issued by the

A) Inspector General of the HHS.
B) Attorney General of the United States.
C) Surgeon General of the United States.
D) Postmaster General of the United States.

Answer 2

Inspector General of the HHS.

Question 3

The objective of the Health Insurance Portability and Accountability Act of 1998 is to

A) combat fraud, abuse, and waste in healthcare.
B) promote medical savings accounts.
C) simplify the administration of health insurance.
D) all of the above

Answer 3

all of the above

Question 4

Those who would be covered under HIPAA include

A) life insurers.
B) information systems vendors.
C) universities.
D) all of the above

Question 5

The individual or group that provides or pays for the patient's medical care is the

A) healthcare plan.
B) covered entity.
C) Office of Civil Rights.
D) patient.

Question 6

The reasonable effort that a healthcare provider uses to limit disclosure of patient information is referred to as

A) the privacy rule.
B) the minimum necessary standard.
C) confidentiality.
D) all of the above.

Question 7

An exception to the release of information policy under HIPAA would allow information to be released to

A) a priest or minister for the purpose of religious counseling.
B) a news reporter reporting a crime.
C) the police investigating a crime.
D) the military on induction of a service person.

Question 8

The federal office that investigates violations of HIPAA is the

A) National Institutes of Health.
B) Healthcare Integrity and Protection Data Bank.
C) Social Security Administration.
D) Supreme Court.

Question 9

A number assigned to an employer for purposes of identification is the

A) social security number.
B) employer identifier standard.
C) privacy number.
D) employer identification number.

Question 10

Which title of HIPAA most affects confidentiality issues for healthcare providers?

A) Title I: Insurance Portability
B) Title II: Administrative Simplification
C) Title III: Medical Savings and Tax Deduction
D) Title IV: Group Health Plan Provisions
E) Title V: Revenue Offset Provisions

Question 11

HIPAA law stipulates that the patient

A) may sue over privacy violations.
B) may not sue over privacy violations.
C) may register a complaint to the government.
D) b and c.

Question 12

The privacy rule is meant to ensure that there is/are

A) security of electronic transfer of information.
B) disclosure of only the necessary information.
C) no longer a need for patient consent.
D) a and b.

Question 13

Researchers who wish to obtain individually identifiable medical information must

A) pay the patient for the information that is obtained for the research.
B) obtain a patient authorization that complies with the rules set by HIPAA.
C) use the information only after the patient is deceased.
D) pay the institution that has initially obtained the information from the patient.

Question 14

A healthcare organization covered under HIPAA regulations is a

A) healthcare plan.
B) HMO.
C) covered entity.
D) PPO.

Question 15

HIPAA allows all of the following except

A) physicians or hospitals to share patient information with each other to treat the patient.
B) complete disclosure of patient information by an EMT.
C) disclosure to clergy of patient admission to a facility.
D) all of the above.

Question 16

Protected health information relates to

A) past individually identifiable health information.
B) present individually identifiable health information.
C) future individually identifiable health information.
D) all of the above.

Question 17

The original intent of HIPAA was to

A) protect medical records and billing.
B) protect computerized medical records and billing.
C) provide easier access of medical records for the patient.
D) b and c.

Question 18

A national source of reports of actions taken against healthcare providers, practitioners, and vendors who are in noncompliance or performing fraudulent activities is the

A) Office of Civil Rights.
B) wireless local area networks.
C) Healthcare Integrity and Protection Data Bank.
D) Health Insurance Portability and Accountability Act.

Question 19

A private or public healthcare entity that facilitates the processing of nonstandard electronic transactions into HIPAA transactions is a

A) healthcare plan.
B) clearinghouse.
C) covered entity.
D) wireless local area network.

Question 20

Violation of HIPAA is a

A) misdemeanor.
B) local criminal offense.
C) state criminal offense.
D) federal criminal offense.

Question 21

Suggestions for physicians and physician groups when implementing HIPAA include

A) appointing and training a privacy officer.
B) adopting procedures for handling patient requests.
C) implementing a notice of privacy practices.
D) all of the above

Question 22

Wireless local area networks are used by physicians and nurses to

A) access bank accounts for patients who are hospitalized.
B) access patient records from central databases.
C) add patient observations and assessments to databases.
D) b and c.

Question 23

The application of communication and information to medical practice, research, and education is called

A) telemedicine.
B) informatics.
C) clearinghouse.
D) sanctions.

Question 24

The use of communications and information technologies to provide healthcare services to people at a distance is known as

A) computer technology.
B) clearinghouse.
C) family practice.
D) telemedicine.

Question 25

Signed authorizations and any agreements with patients restricting disclosure of PHI should be retained for a period of

A) 5 years.
B) 6 years.
C) 10 years.
D) the lifetime of the patient.