Patient Rights, Privacy & HIPAA Compliance Flashcards
7 cards from real CHT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Patient Rights, Privacy & HIPAA Compliance flashcards as text
A patient tells you they feel their privacy was violated during a previous transport. As a healthcare transporter, your best response is to:
Answer: Acknowledge their concern, listen respectfully, and encourage them to report it to the Patient Advocate
Acknowledging the patient's concern and directing them to the appropriate hospital resource, such as the Patient Advocate, respects their rights and ensures proper follow-up.
Under HIPAA, which entity is responsible for ensuring that business associates who handle PHI comply with privacy requirements?
Answer: The covered entity (e.g., hospital) through a Business Associate Agreement
Covered entities must have a signed Business Associate Agreement (BAA) with any third party that handles PHI on their behalf, making compliance a shared responsibility.
A transporter overhears a coworker discussing a patient's diagnosis in a crowded elevator. The appropriate response is to:
Answer: Gently remind the coworker that patient information should not be discussed in public areas
Politely reminding a colleague is the appropriate first step; discussing PHI in public areas like elevators constitutes an incidental privacy breach.
What is the primary purpose of requiring patients to sign an Authorization Form before sharing their PHI for non-TPO purposes?
Answer: To ensure patients understand and consent to the specific use or disclosure of their health information
An authorization form ensures patients give informed, voluntary consent for specific uses or disclosures of their PHI that fall outside treatment, payment, or healthcare operations.
Which of the following best describes 'incidental disclosure' under HIPAA?
Answer: An inadvertent disclosure that cannot reasonably be prevented while conducting normal healthcare operations
Incidental disclosure refers to secondary disclosures that occur as a byproduct of permissible uses or disclosures, such as another patient overhearing a clinician's conversation, and are permitted if reasonable safeguards are in place.
Which federal office is responsible for enforcing HIPAA Privacy and Security Rules?
Answer: The Office for Civil Rights (OCR) within the Department of Health and Human Services
The Office for Civil Rights (OCR) within HHS is the primary federal body responsible for investigating HIPAA complaints and enforcing HIPAA Privacy and Security Rules.
A pediatric patient being transported is accompanied by an adult who claims to be the child's guardian but cannot provide documentation. The transporter should:
Answer: Complete the transport and alert the nursing staff about the unverified guardian status
The transporter should complete necessary transport for the patient's safety and promptly notify nursing staff about the unverified guardian, allowing the clinical team to handle the issue appropriately.