Question 1

Identify the choice that best completes the statement or answers the question.
-Psychotherapy notes or process notes include

Accepted Answer

A) the treatment plan for the patient. 
B) a summary of medications the patient is prescribed. 
C) the therapist's impressions of the patient. 
D) the current state of the patient, medications prescribed, and their side effects. 
A) the treatment plan for the patient. 
B) a summary of medications the patient is prescribed. 
C) the therapist's impressions of the patient. 
D) the current state of the patient, medications prescribed, and their side effects.

Question 2

Identify the choice that best completes the statement or answers the question.
-The Privacy Rule

Accepted Answer

A) applies only to protected health information (PHI). 
B) establishes policies for covered entities. 
C) details when authorization to release PHI is needed. 
D) none of the above. 
E) both answers A and C. 
A) applies only to protected health information (PHI). 
B) establishes policies for covered entities. 
C) details when authorization to release PHI is needed. 
D) none of the above. 
E) both answers A and C.

Question 3

Identify the choice that best completes the statement or answers the question.
-Who in the health care organization is responsible to know where the written policies are located regarding HIPAA compliance?

Accepted Answer

A) Only the HIPAA Officer 
B) Office workers who send electronic PHI 
C) All staff members, paid or not paid 
D) All clinical staff members 
A) Only the HIPAA Officer 
B) Office workers who send electronic PHI 
C) All staff members, paid or not paid 
D) All clinical staff members

Question 4

The response, "She was taken to ICU because her diabetes became acute" is an example of HIPAA-compliant disclosure of information.

Accepted Answer

A) True 
 B)False

Question 5

Match these Privacy Rule definitions with the correct word or phrase.

-Consent

Accepted Answer

A) Administrative Simplification 
B) Reasonable effort to limit PHI to only that which is necessary to accomplish intended purpose 
C) PHI that excludes direct identifiers for research purposes 
D) Written permission allowing disclosure of PHI for purposes other than TPO 
E) Permission granted to disclose PHI for purposes of TPO
F)Persons with legal authority to act on behalf of minor children 
A) Administrative Simplification 
B) Reasonable effort to limit PHI to only that which is necessary to accomplish intended purpose 
C) PHI that excludes direct identifiers for research purposes 
D) Written permission allowing disclosure of PHI for purposes other than TPO 
E) Permission granted to disclose PHI for purposes of TPO
F)Persons with legal authority to act on behalf of minor children

Question 6

If a medical office does not use electronic means to send its insurance claims, it is considered a covered entity.

Accepted Answer

A) True 
 B)False

Question 7

Nursing notes are not considered PHI since they are not physician's notes and therefore are not protected by HIPAA.

Accepted Answer

A) True 
 B)False

Question 8

Identify the choice that best completes the statement or answers the question.
-Use and disclosure of PHI is permitted without authorization with the EXCEPTION of which of the following?

Accepted Answer

A) When incidental to a permitted use and disclosure 
B) When releasing process or psychotherapy notes 
C) For public interest and to benefit the public 
D) When releasing to the individual whose health information it is 
A) When incidental to a permitted use and disclosure 
B) When releasing process or psychotherapy notes 
C) For public interest and to benefit the public 
D) When releasing to the individual whose health information it is

Question 9

Identify the choice that best completes the statement or answers the question.
-For individuals requesting to amend their medical record

Accepted Answer

A) the replaced portion of the record is destroyed. 
B) the provider has the option to reject the amendment. 
C) there is a new file made just for the amendment. 
D) it is not possible without a court order. 
A) the replaced portion of the record is destroyed. 
B) the provider has the option to reject the amendment. 
C) there is a new file made just for the amendment. 
D) it is not possible without a court order.

Question 10

The HIPAA Privacy Rule gives patients assurance that their personal health information will be treated the same no matter which state or organization receives their medical information.

Accepted Answer

A) True 
 B)False

Question 11

During an investigation by the Office for Civil Rights, the inspector will depend upon the HIPAA Officer to know the details of the written policies of the organization.

Accepted Answer

A) True 
 B)False

Question 12

Identify the list of disclosures that are or are not for public interest or benefit.

-disclosure if serious threat to health and safety of person or public

Accepted Answer

A) For public interest or benefit 
B) Not for public interest or benefit 
A) For public interest or benefit 
B) Not for public interest or benefit

Question 13

Identify the choice that best completes the statement or answers the question.
-Protected health information is an association between a(n)

Accepted Answer

A) diagnosis and a payer. 
B) individual and a physician. 
C) health care provider and a patient or two businesses. 
D) diagnosis and an individual. 
A) diagnosis and a payer. 
B) individual and a physician. 
C) health care provider and a patient or two businesses. 
D) diagnosis and an individual.

Question 14

Identify the choice that best completes the statement or answers the question.
-When there is an alleged violation to HIPAA Privacy Rule

Accepted Answer

A) an individual may sue the offending health care provider. 
B) an individual may join a class action lawsuit against the provider. 
C) the individual should report the provider to the local county sheriff. 
D) there is no option to sue a health care provider for HIPAA violations. 
A) an individual may sue the offending health care provider. 
B) an individual may join a class action lawsuit against the provider. 
C) the individual should report the provider to the local county sheriff. 
D) there is no option to sue a health care provider for HIPAA violations.

Question 15

Identify the choice that best completes the statement or answers the question.
-Consent as defined by HIPAA is for

Accepted Answer

A) permission to reveal PHI for payment of services provided to a patient. 
B) permission to reveal PHI for comprehensive treatment of a patient. 
C) permission to reveal PHI for normal business operations of the provider's facility. 
D) all of the above. 
E) both A and B. 
A) permission to reveal PHI for payment of services provided to a patient. 
B) permission to reveal PHI for comprehensive treatment of a patient. 
C) permission to reveal PHI for normal business operations of the provider's facility. 
D) all of the above. 
E) both A and B.

Question 16

It is possible for a first name and zip code to be considered individually identifiable health information (IIHI).

Accepted Answer

A) True 
 B)False

Question 17

Identify the choice that best completes the statement or answers the question.
-The Office for Civil Rights receives complaints regarding the Privacy Rule.About what percentage of these complaints have been ruled either no violation or the entity is working toward compliance?

Accepted Answer

A) About 25% 
B) About 50% 
C) About 75% 
D) About 90% 
A) About 25% 
B) About 50% 
C) About 75% 
D) About 90%

Question 18

Identify the choice that best completes the statement or answers the question.
-Requesting to amend a medical record was a feature included in HIPAA because of

Accepted Answer

A) increase in theft of medical information for criminal purposes. 
B) possible difference in opinion between patient and physician regarding the diagnosis and treatment. 
C) ease of human entry error when posting patient information. 
D) all of the above. 
E) both B and C. 
A) increase in theft of medical information for criminal purposes. 
B) possible difference in opinion between patient and physician regarding the diagnosis and treatment. 
C) ease of human entry error when posting patient information. 
D) all of the above. 
E) both B and C.

Question 19

Match these Privacy Rule definitions with the correct word or phrase.

-Title II

Accepted Answer

A) Administrative Simplification 
B) Reasonable effort to limit PHI to only that which is necessary to accomplish intended purpose 
C) PHI that excludes direct identifiers for research purposes 
D) Written permission allowing disclosure of PHI for purposes other than TPO 
E) Permission granted to disclose PHI for purposes of TPO
F)Persons with legal authority to act on behalf of minor children 
A) Administrative Simplification 
B) Reasonable effort to limit PHI to only that which is necessary to accomplish intended purpose 
C) PHI that excludes direct identifiers for research purposes 
D) Written permission allowing disclosure of PHI for purposes other than TPO 
E) Permission granted to disclose PHI for purposes of TPO
F)Persons with legal authority to act on behalf of minor children

Question 20

Match the terms "disclosure of PHI" and "use of PHI" according to HIPAA definition of inside the covered entity or outside the covered entity.

-within the entity

Accepted Answer

A) Use of PHI is for sharing, examination, or analysis of IIHI 
B) Disclosure of PHI is for releasing IIHI 
A) Use of PHI is for sharing, examination, or analysis of IIHI 
B) Disclosure of PHI is for releasing IIHI

Identify the choice that best completes the statement or answers the question. -Psychotherapy notes or process notes include

Identify the choice that best completes the statement or answers the question. -The Privacy Rule

Identify the choice that best completes the statement or answers the question. -Who in the health care organization is responsible to know where the written policies are located regarding HIPAA compliance?

The response, "She was taken to ICU because her diabetes became acute" is an example of HIPAA-compliant disclosure of information.

Match these Privacy Rule definitions with the correct word or phrase. -Consent

If a medical office does not use electronic means to send its insurance claims, it is considered a covered entity.

Nursing notes are not considered PHI since they are not physician's notes and therefore are not protected by HIPAA.

Identify the choice that best completes the statement or answers the question. -Use and disclosure of PHI is permitted without authorization with the EXCEPTION of which of the following?

Identify the choice that best completes the statement or answers the question. -For individuals requesting to amend their medical record

The HIPAA Privacy Rule gives patients assurance that their personal health information will be treated the same no matter which state or organization receives their medical information.

During an investigation by the Office for Civil Rights, the inspector will depend upon the HIPAA Officer to know the details of the written policies of the organization.

Identify the list of disclosures that are or are not for public interest or benefit. -disclosure if serious threat to health and safety of person or public

Identify the choice that best completes the statement or answers the question. -Protected health information is an association between a(n)

Identify the choice that best completes the statement or answers the question. -When there is an alleged violation to HIPAA Privacy Rule

Identify the choice that best completes the statement or answers the question. -Consent as defined by HIPAA is for

It is possible for a first name and zip code to be considered individually identifiable health information (IIHI).

Identify the choice that best completes the statement or answers the question. -The Office for Civil Rights receives complaints regarding the Privacy Rule.About what percentage of these complaints have been ruled either no violation or the entity is working toward compliance?

Identify the choice that best completes the statement or answers the question. -Requesting to amend a medical record was a feature included in HIPAA because of

Match these Privacy Rule definitions with the correct word or phrase. -Title II

Match the terms "disclosure of PHI" and "use of PHI" according to HIPAA definition of inside the covered entity or outside the covered entity. -within the entity

Introduction to Hipaa

Transactions and Code Sets

Security Ruling Explained

Unique Health Identifiers and Hipaa Myths

Further Rulings Influencing Hipaa

Filters

Exam 2: Privacy Issues Explained

Identify the choice that best completes the statement or answers the question. -Psychotherapy notes or process notes include

Identify the choice that best completes the statement or answers the question. -The Privacy Rule

Identify the choice that best completes the statement or answers the question. -Who in the health care organization is responsible to know where the written policies are located regarding HIPAA compliance?

The response, "She was taken to ICU because her diabetes became acute" is an example of HIPAA-compliant disclosure of information.

Match these Privacy Rule definitions with the correct word or phrase. -Consent

If a medical office does not use electronic means to send its insurance claims, it is considered a covered entity.

Nursing notes are not considered PHI since they are not physician's notes and therefore are not protected by HIPAA.

Identify the choice that best completes the statement or answers the question. -Use and disclosure of PHI is permitted without authorization with the EXCEPTION of which of the following?

Identify the choice that best completes the statement or answers the question. -For individuals requesting to amend their medical record

The HIPAA Privacy Rule gives patients assurance that their personal health information will be treated the same no matter which state or organization receives their medical information.

During an investigation by the Office for Civil Rights, the inspector will depend upon the HIPAA Officer to know the details of the written policies of the organization.

Identify the list of disclosures that are or are not for public interest or benefit. -disclosure if serious threat to health and safety of person or public

Identify the choice that best completes the statement or answers the question. -Protected health information is an association between a(n)

Identify the choice that best completes the statement or answers the question. -When there is an alleged violation to HIPAA Privacy Rule

Identify the choice that best completes the statement or answers the question. -Consent as defined by HIPAA is for

It is possible for a first name and zip code to be considered individually identifiable health information (IIHI).

Identify the choice that best completes the statement or answers the question. -The Office for Civil Rights receives complaints regarding the Privacy Rule.About what percentage of these complaints have been ruled either no violation or the entity is working toward compliance?

Identify the choice that best completes the statement or answers the question. -Requesting to amend a medical record was a feature included in HIPAA because of

Match these Privacy Rule definitions with the correct word or phrase. -Title II

Match the terms "disclosure of PHI" and "use of PHI" according to HIPAA definition of inside the covered entity or outside the covered entity. -within the entity

Introduction to Hipaa

Transactions and Code Sets

Security Ruling Explained

Unique Health Identifiers and Hipaa Myths

Further Rulings Influencing Hipaa

Filters