Patient Rights Under HIPAA Flashcards
7 cards from real HIPAA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Patient Rights Under HIPAA flashcards as text
A patient requests electronic copies of their PHI from a covered entity that maintains an EHR. The entity must provide the records:
Answer: In the electronic format the patient requests if readily producible
Under the HIPAA right of access, entities with EHRs must provide electronic copies in the patient's requested format if it is readily producible.
A patient submits a restriction request asking a hospital not to share their PHI with family members. The hospital may voluntarily agree, but if it does, it is then:
Answer: Bound by the restriction and must honor it
If a covered entity voluntarily agrees to a restriction it was not required to honor, it is legally bound to comply with it.
Which of the following scenarios BEST illustrates the right to confidential communications?
Answer: A patient asks the provider to call them at their work number rather than home
Requesting an alternative contact number is a classic example of exercising the right to confidential communications.
Under the HIPAA Privacy Rule, how many free accountings of disclosures is a patient entitled to receive per 12-month period?
Answer: One
Patients are entitled to one free accounting per 12-month period; subsequent requests in the same period may incur a fee.
A hospital refuses to provide a patient's records because the patient owes an outstanding balance. Is this permissible under HIPAA?
Answer: No, the right to access PHI cannot be conditioned on payment of outstanding balances
HIPAA does not permit covered entities to withhold PHI access simply because a patient has an unpaid balance.
A covered entity disagrees with a patient's amendment request and submits a written denial. The patient may then:
Answer: Submit a written statement of disagreement to be included with the PHI
When an amendment is denied, patients have the right to submit a statement of disagreement that the covered entity must attach to the disputed record.
Which of the following is included in a patient's 'designated record set' for purposes of the HIPAA right to access?
Answer: Medical and billing records used to make decisions about the patient
The designated record set includes medical and billing records used to make decisions about individuals, giving patients the right to access them.