CHAA Legal and Regulatory Compliance 2

Question 1

Under HIPAA, which of the following is considered Protected Health Information (PHI)?

Accepted Answer

A patient's name combined with their diagnosis and date of service

Answer

A hospital's annual revenue report

Answer

General health statistics about a community

Answer

A physician's medical school transcripts

Question 2

What is the minimum necessary standard under HIPAA, and how does it apply to patient access?

Accepted Answer

It requires limiting PHI access and disclosure to the minimum amount needed to accomplish the intended purpose

Answer

It requires providing the minimum amount of care necessary

Answer

It sets the minimum number of staff required in the access department

Answer

It establishes minimum wait time standards for patients

Question 3

A patient requests a copy of their complete medical record. Under HIPAA, what is the organization's obligation?

Accepted Answer

Provide the records within 30 days (with a possible 30-day extension) in the format requested by the patient if readily producible

Answer

Deny the request as medical records are hospital property

Answer

Charge the patient the full cost of copying without any limits

Answer

Require the patient to obtain a court order

Question 4

What is the purpose of the Medicare Secondary Payer (MSP) questionnaire administered during registration?

Accepted Answer

To identify whether another insurer should be the primary payer before Medicare

Answer

To determine if the patient qualifies for Medicare Part D

Answer

To verify the patient's Medicare eligibility

Answer

To enroll the patient in a Medicare Advantage plan

Question 5

Which regulation requires healthcare facilities to inform patients of their right to create advance directives?

Accepted Answer

The Patient Self-Determination Act (PSDA)

Answer

HIPAA

Answer

The Stark Law

Answer

OSHA

Question 6

What constitutes a HIPAA breach, and what is the organization's notification obligation?

Accepted Answer

An impermissible use or disclosure of PHI that compromises the security or privacy of the information, requiring notification to affected individuals within 60 days

Answer

Any use of a computer system constitutes a breach

Answer

A breach only occurs if information is published in a newspaper

Answer

Breaches only need to be reported to the IT department