Client Confidentiality and HIPAA Flashcards
7 cards from real CBHT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Client Confidentiality and HIPAA flashcards as text
A BHT overhears a coworker discussing a client's diagnosis loudly in the break room with another staff member who is not involved in that client's care. What is the most appropriate action?
Answer: Interrupt and remind the coworker that this conversation should occur in a private area
HIPAA's minimum necessary standard requires that PHI be discussed only in appropriate settings with those who have a need to know, so the BHT should redirect the conversation.
Under HIPAA, which of the following best describes 'protected health information' (PHI)?
Answer: Any individually identifiable health information held or transmitted by a covered entity
PHI is any individually identifiable health information created, received, maintained, or transmitted by a covered entity in any form or medium.
A client's employer calls the facility asking whether the client is currently receiving treatment there. How should the BHT respond?
Answer: Neither confirm nor deny the client's presence without a signed authorization from the client
Even confirming or denying enrollment constitutes a disclosure of PHI, which requires client authorization unless an exception applies.
Which of the following is a permissible disclosure of PHI without client authorization under HIPAA?
Answer: Reporting a gunshot wound to law enforcement as required by state law
HIPAA permits disclosure without authorization for certain public health and law enforcement activities, including mandatory reporting required by state law.
A BHT accidentally sends an email containing a client's treatment summary to the wrong address. What is the FIRST step the BHT should take?
Answer: Immediately report the incident to a supervisor or the privacy officer
A misdirected email containing PHI is a potential breach that must be reported to the privacy officer promptly so a breach assessment can occur.
Which individual right is guaranteed to clients under the HIPAA Privacy Rule?
Answer: The right to request an amendment to their health records if they believe information is incorrect
The HIPAA Privacy Rule grants clients the right to request amendments to inaccurate or incomplete PHI in their records.
A minor client's parent demands to see the child's full behavioral health treatment records. Under HIPAA, when may access be restricted?
Answer: When the minor consented to treatment without parental consent as allowed by state law
When a minor has legally consented to treatment on their own under applicable state law, HIPAA may permit restrictions on parental access to protect the minor's privacy.