Exam 4: Introduction to the Health Insurance Portability and Accountability Act Hipaa

The person in medical practice who handles requests for medical records and serves as the primary contact person in regard to HIPAA confidentiality issues is the ________ Officer.

The document used to authorize permission for the release of protected health information (PHI) is the:

When patients ask a family member to remain with them in a treatment room, this implies that they have given permission for the doctor and/or staff to discuss their condition in front of the family member.

Which type of safeguard involves having procedures that clearly identify which employees have access to electronic protected health information (EPHI)?

Data that has been scrambled and/or encoded to prevent it from being readable by unauthorized users is ________.

Technical safeguards are rules and policies related to documenting time-consuming, complex medical procedures.

What is the purpose of an internal audit?

Explain a civil money penalty.

The unique identifier for insurance plans and third-party payers and administrators is the:

The HITECH Act is a subset of the original HIPAA legislation.

The electronic transfer of information in a standardized format between trading partners is called ________.

The electronic record that documents a patient's encounters with physicians and other clinicians that is stored within one provider's system is the electronic:

The provision of HIPAA that regulates the use and disclosure of protected health information is the:

HHS is prohibited from imposing civil penalties if the violation is unintentional and corrected within 30 days.

Match the following -Information held by a HIPAA-covered entity that concerns patient identity, health status, or payment for healthcare

Which type of safeguard involves the use of encryption when data is transmitted over open networks?

Criminal penalties for HIPAA violations can include prison time and financial penalties up to what maximum amount?

The Department of Health and Human Services agency that handles privacy complaints is the Office for ________.

Describe how protected health information (PHI) may be used by a coroner or medical examiner.

Under HIPAA, which of the following are covered entities?