Patient Rights Under HIPAA Flashcards
7 cards from real HIPAA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Patient Rights Under HIPAA flashcards as text
Under HIPAA, which of the following is NOT a valid ground for a covered entity to deny a patient's amendment request?
Answer: The patient did not submit the request during business hours
Business hours of submission is never a valid basis for denying an amendment request under HIPAA.
A patient wants to know who has accessed their electronic health record in the past year. Which HIPAA right most directly addresses this?
Answer: Right to an accounting of disclosures
The right to an accounting of disclosures allows patients to learn which entities have received their PHI.
A covered entity may charge a fee for providing PHI to a patient. Under HIPAA, this fee must be:
Answer: Cost-based and limited to labor, supplies, and postage
HIPAA permits only a reasonable, cost-based fee covering labor for copying, supplies, and postage.
Which statement correctly describes the relationship between HIPAA patient rights and state law?
Answer: State laws that provide greater privacy protections than HIPAA generally prevail
HIPAA sets a federal floor; state laws that are more protective of patient privacy are not preempted.
If a covered entity denies access to PHI in a designated record set, it must provide the denial in writing and include:
Answer: The basis for denial, the patient's right to review, and complaint procedures
A written denial must explain the basis, inform the patient of their right to request a review, and describe how to file a complaint.
Under HIPAA, a patient's right to receive a Notice of Privacy Practices (NPP) applies when?
Answer: At first service delivery and whenever the notice is materially revised
Covered entities must provide the NPP at first service and notify patients of material revisions.
A deceased patient's executor requests access to the patient's PHI. Under HIPAA, the executor is considered:
Answer: A personal representative with the same access rights as the patient had
HIPAA allows personal representatives of deceased individuals, such as executors, the same PHI access rights the patient had.