Safety & Infection Control Flashcards
7 cards from real CHP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Safety & Infection Control flashcards as text
A covered entity is training workforce members on proper disposal of PHI-containing materials. Which method satisfies HIPAA's requirements for paper PHI disposal?
Answer: Shredding, burning, or pulping paper PHI so it is unreadable and unrecoverable
HIPAA requires that paper PHI be disposed of in a manner that renders it unreadable, undecipherable, and otherwise unable to be reconstructed, such as shredding, burning, or pulping.
A healthcare facility is updating its visitor policy for areas containing ePHI. Which control BEST balances infection control needs with HIPAA physical safeguard requirements?
Answer: Requiring visitor sign-in, issuing escorts, and limiting visitor access to areas with PHI while enforcing appropriate PPE in clinical zones
Visitor management that includes sign-in, escort requirements, access restrictions, and appropriate PPE addresses both HIPAA facility access control requirements and infection prevention.
Which of the following is an example of a technical safeguard that also supports infection control by reducing the need for physical contact with shared input devices?
Answer: Implementing voice-activated or hands-free authentication and documentation systems
Voice-activated or hands-free systems reduce touchpoint contamination risks while also leveraging advanced authentication methods that can satisfy HIPAA technical safeguard requirements.
Under the HIPAA Privacy Rule, which of the following scenarios represents a permissible use of PHI related to infection control without patient authorization?
Answer: Disclosing the minimum necessary PHI to a public health authority for disease surveillance purposes
The Public Health Activities exception permits disclosure of the minimum necessary PHI to authorized public health authorities for lawful disease surveillance, investigation, and intervention.
A hospital's infection control team wants access to ePHI to track healthcare-associated infection (HAI) rates. Under HIPAA, this is best described as:
Answer: A permissible healthcare operations activity that requires limiting access to the minimum necessary PHI
Healthcare operations under HIPAA include quality assessment, quality improvement, and patient safety activities such as HAI tracking, provided access is limited to the minimum necessary PHI.
When decommissioning a medical device that stored ePHI and was used in isolation rooms, which combined approach BEST satisfies HIPAA device and media disposal requirements?
Answer: Sanitize the device following infection control protocols, then destroy or purge the storage media per HIPAA media disposal requirements before decommissioning
HIPAA's Device and Media Controls standard requires that ePHI be removed from electronic media before disposal; infection control requires the device be decontaminated before handling or transfer.
A covered entity's workforce member contracts a communicable disease and their infection status is documented in the occupational health record. Under HIPAA, this record is:
Answer: Protected PHI that may only be disclosed with the employee's authorization or as permitted by law
An employee's health record held by the covered entity in its capacity as a healthcare provider (occupational health) is PHI protected under HIPAA, with disclosures limited to authorized purposes.