Patient Rights, Privacy & HIPAA Compliance Flashcards
7 cards from real CHT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Patient Rights, Privacy & HIPAA Compliance flashcards as text
Which of the following is NOT one of the patient rights protected under HIPAA?
Answer: Right to receive free unlimited copies of all records immediately
HIPAA gives patients the right to access and request copies of their records, but facilities may charge a reasonable fee and are not required to provide unlimited free copies immediately.
A HIPAA breach must be reported to the affected individual within how many days of discovery?
Answer: 60 days
HIPAA's Breach Notification Rule requires covered entities to notify affected individuals within 60 days of discovering a breach of unsecured PHI.
A patient's spouse approaches you in the hallway asking for an update on the patient's condition during transport. You should:
Answer: Decline to share clinical information and direct them to the nursing staff
Transporters should not disclose clinical information to family members without patient authorization; the nursing team is the appropriate resource for family communication.
What is the Notice of Privacy Practices (NPP)?
Answer: A document informing patients of how their health information may be used and their rights under HIPAA
The Notice of Privacy Practices is a HIPAA-required document that explains how a covered entity uses and discloses PHI and informs patients of their privacy rights.
Posting a photo of a patient on social media without their explicit consent is:
Answer: A HIPAA violation that could result in disciplinary action and legal penalties
Sharing any patient image or information on social media without written authorization is a HIPAA violation regardless of whether the face is visible or the hospital is named.
When transporting a patient who is an incarcerated individual, the transporter should:
Answer: Treat the patient with the same dignity, respect, and privacy protections as any other patient
All patients, regardless of legal status, retain the right to dignity, respect, and privacy protections under HIPAA and professional ethical standards.
Which of the following disclosures of PHI is generally permitted under HIPAA without patient authorization?
Answer: Disclosing PHI to treatment providers involved in the patient's care
HIPAA permits disclosure of PHI for treatment, payment, and healthcare operations (TPO) purposes, including sharing with providers directly involved in the patient's care.