Confidentiality & Privacy Standards Flashcards
7 cards from real CACS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Confidentiality & Privacy Standards flashcards as text
A CAC overhears a colleague casually discussing a consumer's income and immigration status in a public waiting room. What should the CAC do?
Answer: Intervene immediately to stop the discussion and report the incident to a supervisor
CACs have an obligation to protect consumer privacy; overhearing an unauthorized disclosure requires immediate intervention and internal reporting.
Under the 'minimum necessary' privacy standard, what does a CAC's access to consumer information mean in practice?
Answer: CACs should only access and use the consumer information needed to perform their specific assistance function
The minimum necessary standard requires that access to and use of consumer information be limited to what is required to complete the specific enrollment task at hand.
A state agency contacts a CAC requesting information about a specific consumer's enrollment status. The CAC should:
Answer: Verify the request is legitimate and check whether a valid data-sharing agreement or consumer consent exists before disclosing
Even government agencies must have proper legal authority or consumer consent before a CAC can disclose information; the CAC must verify legitimacy first.
Which scenario BEST illustrates proper use of a consumer's immigration status information collected during enrollment?
Answer: Using it solely to determine eligibility for Marketplace coverage and APTC/CSR
Immigration status collected during enrollment may only be used to determine eligibility for the specific program — it cannot be shared for other purposes.
A consumer's ex-spouse calls a CAC claiming to be authorized to make changes to the consumer's Marketplace account. The CAC should:
Answer: Require written proof of legal authorization such as a power of attorney before taking any action
Verbal claims of authorization are insufficient; a CAC must verify legal authority through documented authorization before allowing a third party to modify an account.
What is the primary purpose of requiring CACs to use unique login credentials when accessing Marketplace systems?
Answer: To ensure accountability and maintain an audit trail of who accessed which consumer records
Unique credentials create an audit trail that links all system activity to a specific user, enabling accountability and detection of unauthorized access.
A consumer discloses they have HIV during an enrollment session. Under CAC confidentiality standards, this information:
Answer: Should not be recorded by the CAC unless it is directly relevant to determining plan eligibility
CACs should not collect or record health condition information unless it is directly required for the enrollment determination — sensitive health disclosures beyond that scope must remain confidential and unrecorded.