HMCC Privacy & Data Security

Question 1

What is the HIPAA Privacy Rule?

Accepted Answer

Federal regulations establishing standards for how covered entities must protect and handle patients' protected health information

Answer

A rule about keeping medical offices clean

Answer

A regulation about patient visiting hours

Answer

A law about hospital noise levels

Question 2

What is the HIPAA Security Rule?

Accepted Answer

Federal regulations requiring covered entities to implement administrative, physical, and technical safeguards to protect electronic PHI

Answer

A rule about hospital building security

Answer

A regulation about drug storage security

Answer

A law about patient identification

Question 3

What is a Business Associate Agreement (BAA)?

Accepted Answer

A contract between a covered entity and a business associate that establishes permitted uses and required protections for PHI

Answer

A general partnership agreement

Answer

An agreement between two hospitals to share patients

Answer

A vendor payment contract

Question 4

What is the HIPAA Breach Notification Rule?

Accepted Answer

A requirement to notify affected individuals, HHS, and sometimes the media when unsecured PHI is accessed or disclosed without authorization

Answer

A rule about notifying patients of appointment changes

Answer

A regulation about reporting medication errors

Answer

A law about building evacuation procedures

Question 5

What is the minimum necessary standard under HIPAA?

Accepted Answer

The requirement to limit PHI use, disclosure, and requests to the minimum amount necessary to accomplish the intended purpose

Answer

Using the smallest possible font for medical records

Answer

Keeping medical records as short as possible

Answer

Limiting hospital staff to the minimum number

Question 6

What are a patient's rights under the HIPAA Privacy Rule?

Accepted Answer

Right to access their records, request amendments, receive an accounting of disclosures, request restrictions, and receive a notice of privacy practices

Answer

Patients have no rights regarding their health information

Answer

Only the right to view records at the hospital

Answer

Only the right to request paper copies