Exam 4: Introduction to the Health Insurance Portability and Accountability Act Hipaa

What elements should be part of a contingency plan designed to protect data in the event of a disaster or emergency?

Healthcare providers who achieve the standards of each HITECH stage by a designated date are eligible for:

Which provision of HIPAA deals with procedures for investigations and hearings related to compliance issues and penalties for violations?

The Health Insurance Portability and Accountability Act (HIPAA) was signed into law in 1996, and covered entities were required to fully implement its guidelines by:

A person who has a privacy complaint can file it with the:

Which type of safeguard involves having disaster recovery procedures in place to secure data in the event of a disaster or emergency?

Approximately how many different formats are currently being used for electronic health claims?

Technical safeguards include data corroboration, authentication, and data security measures.

Protected health information (PHI) can be disclosed in which of the following circumstances?

Match the following -HIPAA provision that deals with protecting the confidentiality of electronically stored and transmitted patient health data

Under the HIPAA Privacy Rule, a physician can discuss a patient's medical condition or treatment with a family member or friend without written consent when:

The Omnibus Rule requires standards for the disclosure and use of protected health information (PHI), including established standards of enforcement for penalties and breach notification.

The Centers for Medicare and Medicaid Services issued a report of numerous errors related to a case with patient demographics similar to those of Joan Rivers.

ICD-10-CM is not approved as a uniform code set according to HIPAA guidelines.

Providers are legally obligated to disclose protected health information (PHI) to public health authorities when a:

Which stage of HITECH focuses on securing electronic messaging to communicate relevant health information to patients?

In the event of a security breach in regard to protected health information (PHI), providers and other covered entities must notify both the Office for Civil Rights (OCR) and the:

Match the following -HIPAA provision that deals with investigations, legal procedures, and penalties for violations

The HITECH Act is part of the:

Describe the types of electronic transactions to which HIPAA rules apply.