Question 1

In HIPAA usage, TPO stands for treatment, payment, and optional care.

Accepted Answer

TPO stands for treatment, payment, and healthcare operations, not "optional care".

Question 2

Consent as defined by HIPAA is for

Accepted Answer

Consent as defined by HIPAA can encompass permission to reveal Protected Health Information (PHI) for various purposes including payment for services provided to a patient, comprehensive treatment of a patient, and normal business operations of the provider's facility.

Question 3

The HIPAA Privacy Rule gives patients assurance that their personal health information will be treated the same no matter which state or organization receives their medical information.

Accepted Answer

The HIPAA Privacy Rule establishes national standards for how protected health information may be used and disclosed. It applies to all covered entities, regardless of location or organizational structure, ensuring consistent protection of patient privacy throughout the country.

Question 4

During an investigation by the Office for Civil Rights, the inspector will depend upon the HIPAA Officer to know the details of the written policies of the organization.

Accepted Answer

The HIPAA Officer is responsible for ensuring that the organization has written policies and procedures in place for compliance with HIPAA regulations. The inspector from the Office for Civil Rights will look to the HIPAA Officer to provide information and details about these policies during an investigation.

Question 5

Protected health information is an association between a(n)

Accepted Answer

Protected health information (PHI) is any information in a medical record or other health-related information that can be linked to an individual, thus making diagnosis and individual the correct association.

Question 6

The Privacy Rule

Accepted Answer

The Privacy Rule applies only to protected health information (PHI) and details when authorization to release PHI is needed. The Privacy Rule also establishes policies for covered entities, so answer choice B is partially correct as well. Therefore, the best answer is E, as it includes both correct options.

Question 7

An emancipated minor is

Accepted Answer

An emancipated minor is a person who is younger than 18, but who has been granted legal independence from their parents or guardians. This means they are completely responsible for themselves and have all the decision-making rights of an adult. To be considered emancipated, the minor must also be self-supporting and financially independent. Option D is the only choice that accurately describes an emancipated minor.

Question 8

Financial records fall outside the scope of HIPAA law.

Accepted Answer

The answer of Financial records fall outside the scope of...

Question 9

Nursing notes are not considered PHI since they are not physician's notes and therefore are not protected by HIPAA law.

Accepted Answer

Nursing notes are considered part of the patient's medical record and can contain PHI, therefore they are protected by HIPAA law.

Question 10

If a medical office does not use electronic means to send its insurance claims, it is considered a covered entity .

Accepted Answer

According to HIPAA regulations, any healthcare provider that transmits healthcare information electronically is considered a covered entity.

Question 11

Who in the health care organization is responsible to know where the written policies are located regarding HIPAA compliance?

Accepted Answer

All staff members, paid or not paid, should be aware of the location of written policies regarding HIPAA compliance. This is important to ensure that everyone within the organization is knowledgeable about HIPAA regulations and their responsibilities in maintaining patient privacy and confidentiality.

Question 12

The response "She was taken to ICU because her diabetes became acute" is an example of HIPAA-compliant disclosure of information.

Accepted Answer

The statement provides specific medical information about an individual's health condition, which could potentially identify the person and thus violates HIPAA's privacy rules without explicit consent.

Question 13

Any covered entity does not have to disclose PHI to the Office for Civil Rights if they come to investigate a complaint. That is not allowed by HIPAA law.

Accepted Answer

Covered entities are required to cooperate with the Office for Civil Rights during an investigation and provide access to PHI as necessary.

Question 14

A signed receipt of the facility's Notice of Privacy Practices (NOPP) is mandated by the Privacy Rule in order for a patient to receive services from a health care provider.

Accepted Answer

The Privacy Rule requires that health care providers make a good faith effort to obtain written acknowledgment from patients that they have received the Notice of Privacy Practices, but it does not mandate that services be withheld if the patient chooses not to sign the acknowledgment.

Question 15

Insurance companies who provide automobile and life insurance come under the HIPAA ruling as covered entities?

Accepted Answer

Insurance companies who provide only automobile and life insurance are not considered covered entities under the HIPAA ruling, as they do not handle protected health information (PHI).

Question 16

Use and disclosure of PHI is permitted without authorization with the EXCEPTION of which of the following?

Accepted Answer

Process or psychotherapy notes cannot be disclosed without authorization, even if it is for treatment, payment or healthcare operations.

Question 17

A refusal by patient to sign a receipt of the NOPP allows the physician to refuse treatment to that patient.

Accepted Answer

Refusing to sign a receipt of the Notice of Privacy Practices (NOPP) does not give the physician the right to refuse treatment to the patient. It is the patient's right to receive and review the NOPP, but their refusal to sign it does not remove their right to receive treatment.

Question 18

What specific government agency receives complaints about the HIPAA Privacy ruling?

Accepted Answer

The Office for Civil Rights (OCR) is the specific government agency that receives complaints about the HIPAA Privacy rule. The OCR is responsible for enforcing the HIPAA privacy, security, and breach notification rules. They investigate complaints and can impose fines and penalties on covered entities that violate the rules.

Question 19

The Regional Offices of the Centers for Medicare and Medicaid Services (CMS) is the only way to contact the government about HIPAA questions and complaints.

Accepted Answer

There are several ways to contact the government about HIPAA questions and complaints including the Office for Civil Rights (OCR) and the CMS Privacy Officer. Additionally, patients can file a complaint with their healthcare provider, health plan, or the OCR.

Question 20

It is possible for a first name and zip code to be considered individually identifiable health information (IIHI).

Accepted Answer

The answer of It is possible for a first name...

Quiz 2: Privacy Issues Explained