HMCC Healthcare Compliance Fundamentals — Questions and Answers
Question 1: What is the primary purpose of the Health Insurance Portability and Accountability Act (HIPAA)?
- To protect the privacy and security of patients' health information and establish standards for electronic healthcare transactions (Correct answer)
- To set prices for medical procedures
- To license healthcare professionals
- To regulate pharmaceutical manufacturing
Correct answer: To protect the privacy and security of patients' health information and establish standards for electronic healthcare transactions
HIPAA establishes national standards for protecting sensitive patient health information (PHI), including privacy rules, security requirements for electronic PHI, and standardized electronic healthcare transactions.
Question 2: What is Protected Health Information (PHI)?
- Any individually identifiable health information held by a covered entity, including demographic data, medical records, and payment information (Correct answer)
- Only a patient's diagnosis
- Only electronic medical records
- Only information shared verbally
Correct answer: Any individually identifiable health information held by a covered entity, including demographic data, medical records, and payment information
PHI includes any information about health status, healthcare provision, or payment that can be linked to an individual, in any form (electronic, paper, or oral).
Question 3: What is the Stark Law and what does it prohibit?
- A federal law prohibiting physician self-referral for certain designated health services payable by Medicare or Medicaid (Correct answer)
- A law about hospital construction standards
- A regulation about medical school accreditation
- A rule about emergency room wait times
Correct answer: A federal law prohibiting physician self-referral for certain designated health services payable by Medicare or Medicaid
The Stark Law (Physician Self-Referral Law) prohibits physicians from referring patients for designated health services to entities where the physician has a financial relationship, preventing conflicts of interest.
Question 4: What is the Anti-Kickback Statute in healthcare?
- A federal law making it illegal to offer, pay, solicit, or receive anything of value to induce or reward referrals for services covered by federal healthcare programs (Correct answer)
- A law about employee termination procedures
- A regulation about equipment maintenance
- A rule about insurance premium calculations
Correct answer: A federal law making it illegal to offer, pay, solicit, or receive anything of value to induce or reward referrals for services covered by federal healthcare programs
The Anti-Kickback Statute criminalizes the exchange of remuneration (money, gifts, services) for referrals of patients covered by Medicare, Medicaid, or other federal healthcare programs.
Question 5: What is a Compliance Program in healthcare?
- A systematic framework of policies, procedures, and training designed to prevent, detect, and correct violations of laws and regulations (Correct answer)
- A computer software for billing
- A patient satisfaction survey program
- A marketing strategy for healthcare organizations
Correct answer: A systematic framework of policies, procedures, and training designed to prevent, detect, and correct violations of laws and regulations
An effective compliance program includes written standards of conduct, a designated compliance officer, education and training, communication channels, monitoring and auditing, enforcement, and corrective action procedures.
Question 6: What are the seven elements of an effective compliance program per OIG guidance?
- Written policies, compliance officer, training, communication, monitoring/auditing, enforcement, and corrective action (Correct answer)
- Marketing, sales, customer service, billing, coding, collections, and reporting
- Seven medical specialties
- Seven types of insurance coverage
Correct answer: Written policies, compliance officer, training, communication, monitoring/auditing, enforcement, and corrective action
The OIG (Office of Inspector General) recommends seven core elements: written standards, designated compliance officer/committee, effective training, open communication, internal monitoring, consistent enforcement, and prompt corrective action.
What is the primary purpose of the Health Insurance Portability and Accountability Act (HIPAA)?