Certified Information Privacy Professional HIPAA Privacy Requirements 2

Question 1

Which de-identification method under HIPAA requires a statistician to certify that risk of identification is very small?

Accepted Answer

Expert determination method

Answer

Safe harbor method

Answer

Limited data set method

Answer

Aggregate anonymization method

Question 2

What is a 'limited data set' under HIPAA?

Accepted Answer

PHI with most direct identifiers removed, used for research, public health, or healthcare operations under a data use agreement

Answer

Any data set with fewer than 50 records

Answer

PHI that has been fully anonymized

Answer

Data restricted to internal use only

Question 3

Under HIPAA, what is required when a covered entity engages a business associate to perform functions involving PHI?

Accepted Answer

A Business Associate Agreement (BAA) must be in place

Answer

A federal license for the business associate

Answer

HHS approval of the business associate

Answer

A patient consent form for each engagement

Question 4

Which HIPAA right allows a patient to request that a covered entity not disclose their PHI to their health plan for services paid out-of-pocket?

Accepted Answer

Right to request restrictions on disclosures to health plans

Answer

Right to amend PHI

Answer

Right to access and portability

Answer

Right to file a complaint

Question 5

What is the HIPAA Privacy Rule's general rule on the use of PHI for marketing?

Accepted Answer

PHI cannot be used for marketing without written patient authorization

Answer

PHI can be used freely for marketing if the covered entity benefits patients

Answer

Marketing using PHI requires only an opt-out opportunity

Answer

PHI may be used for marketing under a business associate agreement

Question 6

Under the HIPAA Privacy Rule, which government entity receives patient complaints about HIPAA violations?

Accepted Answer

HHS Office for Civil Rights (OCR)

Answer

FTC Bureau of Consumer Protection

Answer

State Attorney General offices

Answer

Centers for Medicare & Medicaid Services