Question 1

Emails or faxes that are sent and arrive at the wrong location constitute a privacy

Accepted Answer

When emails or faxes are sent to the wrong location, it results in unauthorized access to potentially sensitive information, constituting a privacy breach.

Question 2

Each person who has the ability to access a computer software system, for instance, Prime Suite, is set up within the software and assigned a/an __________________, which is typically based on the person's name.

Accepted Answer

A user ID is typically based on the person's name and is used to identify the individual within the software system.

Question 3

Which of the following is an independent, nonprofit organization with the mission "To lead healthcare transformation through the effective use of health information technology"?

Accepted Answer

The Healthcare Information and Management Systems Society (HIMSS) is an independent, nonprofit organization focused on improving healthcare through the use of health information technology.

Question 4

An employee at Memorial Medical Practice released the diagnosis of a patient to the patient's spouse without an authorization. This is known as a/an _________________________.

Accepted Answer

Releasing a patient's diagnosis without authorization is a breach of confidentiality, as it violates the patient's privacy rights.

Question 5

In order for the healthcare facility to know what to do in case of a situation that interrupts access to the EHR, a written ____________________ should be in place.

Accepted Answer

A disaster recovery plan is essential for a healthcare facility to manage and respond to situations that interrupt access to the Electronic Health Record (EHR) system.

Question 6

James Philips has asked that certain personnel within the office be prohibited from seeing his health information. How will this record be flagged in Prime Suite?

Accepted Answer

In Prime Suite, records that need to be restricted from certain personnel are flagged as "restricted access" to ensure that only authorized individuals can view the information.

Question 7

You are the office manager of Greensburg Medical Center. You have received a letter from one of your patients, Ida Healthway, asking to know the names of all employees and care providers who have accessed her EHR within the last year, since she believes someone has been spreading information about her in the community. You will provide Ms. Healthway with this information, which is known as

Accepted Answer

An accounting of information disclosures is a record that shows who has accessed a patient's electronic health records (EHR) and for what purpose, which is what Ms. Healthway is requesting.

Question 8

When correcting written documentation in a paper record, it is necessary to

Accepted Answer

Crossing out the incorrect information with one line, entering the correct information, and dating and initialing the correction maintains the integrity and traceability of the record.

Question 9

Keeping health information to oneself is known as protecting

Accepted Answer

Confidentiality refers to the protection of personal information, including health information, from unauthorized access or disclosure.

Question 10

Which of the following passwords would be considered most secure?

Accepted Answer

The most secure password is the one that is the longest and contains a variety of characters, including upper and lower case letters, numbers, and symbols. The password "Record**58" meets all of these criteria and is therefore the most secure.

Question 11

A staff member who monitors existing and new regulations and is the "go-to" person should an incident occur is known as the _____________________.

Accepted Answer

A compliance officer is responsible for ensuring that an organization adheres to legal standards and internal policies, and they are the point of contact for any compliance-related issues.

Question 12

Lisa Haver is a patient of Dr. Randolph's. You have just opened today's mail and opened a letter from Ms. Haver's attorney because she is involved in a lawsuit regarding an auto accident. What will you do?

Accepted Answer

You should look for a signed authorization in the envelope that authorizes the release of Lisa Haver's records to the attorney. Without proper authorization, you cannot release patient records due to privacy laws.

Question 13

Blocking access to a facility's computer systems by unauthorized users is accomplished through the use of

Accepted Answer

Firewalls are used to block unauthorized access to computer systems by monitoring and controlling incoming and outgoing network traffic based on predetermined security rules.

Question 14

HIPAA defines a patient's name, social security number, employer, or medical record/account numbers that tie information to a particular person as

Accepted Answer

HIPAA defines such information as "protected health information" (PHI), which includes any information that can be used to identify a patient and is related to their health condition, provision of healthcare, or payment for healthcare.

Question 15

The law that strengthened HIPAA privacy and security regulations was

Accepted Answer

The Health Information Technology for Economic and Clinical Health Act (HITECH) strengthened HIPAA privacy and security regulations.

Question 16

CPT, which is used to code procedures in an office, is an example of a/an _____________.

Accepted Answer

CPT stands for Current Procedural Terminology, which is a code set used to describe medical, surgical, and diagnostic procedures and services.

Question 17

Which of the following is not included in a Notice of Privacy Practices?

Accepted Answer

A Notice of Privacy Practices typically outlines how a patient's health information may be used, the patient's rights regarding their health information, and entities to whom the information may be released, but it does not include specific names of individuals to whom records were released.

Question 18

Some states have a Health Information __________________, funded through the ONC, which allows the sharing of health information for continuity of care purposes.

Accepted Answer

Health Information Exchange (HIE) is a system that allows the sharing of health information across different healthcare organizations, funded by the Office of the National Coordinator for Health Information Technology (ONC).

Question 19

How is a correction made to an electronic health record?

Accepted Answer

Corrections to electronic health records are made by correcting the entry while keeping the original entry hidden but retrievable to maintain a complete audit trail.

Question 20

Nancy Jackson is the office manager of a medical practice. Each month she reviews a report that shows which staff members viewed, edited, or deleted data on a random selection of patient's records, and whether or not the access or the actions taken were justified. Nancy is performing which function?

Accepted Answer

Nancy is performing an auditing function, as she is reviewing and verifying the actions taken by staff members on patient records to ensure they are justified.

Quiz 7: Privacy, Security, Confidentiality, and Legal Issues