Regulations and Compliance Flashcards

Which of the following actions best demonstrates compliance with OSHA's standard precautions in a clinical setting?

Answer: Treating all patient blood and body fluids as potentially infectious at all times

Standard precautions require treating all blood and body fluids as potentially infectious regardless of the patient's known infection status.

Under HIPAA, a Business Associate Agreement (BAA) is required when a covered entity shares PHI with:

Answer: A third-party vendor that creates, receives, or transmits PHI on behalf of the covered entity

A BAA is a contract required between a covered entity and a business associate who handles PHI on the covered entity's behalf, such as a billing company or IT vendor.

The Employee Retirement Income Security Act (ERISA) primarily affects medical offices by regulating:

Answer: Retirement and health benefit plans offered to employees

ERISA sets minimum standards for employer-sponsored retirement and health benefit plans to protect employees participating in those plans.

Which of the following is an example of a HIPAA-permitted disclosure without patient authorization?

Answer: Reporting a communicable disease to the state health department as required by law

HIPAA permits covered entities to disclose PHI without patient authorization when required by law, such as mandatory public health reporting to state health departments.

A patient revokes a previously signed HIPAA authorization. The covered entity:

Answer: Must honor the revocation prospectively but may not undo prior disclosures made in reliance on the authorization

Patients have the right to revoke a HIPAA authorization at any time in writing, but the revocation does not apply retroactively to actions already taken in reliance on the authorization.

Under the Occupational Safety and Health Act, employers must maintain OSHA Form 300 logs for:

Answer: 5 years

OSHA requires employers to maintain the OSHA 300 Log of Work-Related Injuries and Illnesses for five years following the end of the calendar year the records cover.

Which federal program sets the quality and safety standards that nursing facilities and home health agencies must meet to participate in Medicare and Medicaid?

Answer: CMS Conditions of Participation

CMS Conditions of Participation (CoPs) establish the health and safety standards that healthcare organizations must meet to participate in the Medicare and Medicaid programs.