RHIA Compliance, Privacy, and Security

Question 1

Under HIPAA, which rule specifically governs the security of electronic protected health information (ePHI)?

Accepted Answer

HIPAA Security Rule

Answer

HIPAA Privacy Rule

Answer

HIPAA Enforcement Rule

Answer

HIPAA Breach Notification Rule

Question 2

What is the minimum necessary standard under the HIPAA Privacy Rule?

Accepted Answer

Covered entities must disclose only the minimum PHI needed to accomplish the intended purpose

Answer

Providers must maintain the minimum number of health records

Answer

Patients must be notified of the minimum rights they have

Answer

Facilities must implement the minimum required security controls

Question 3

Who is considered a 'covered entity' under HIPAA?

Accepted Answer

Health plans, healthcare clearinghouses, and healthcare providers that transmit PHI electronically

Answer

Any company that employs healthcare workers

Answer

All US businesses with more than 50 employees

Answer

Only federal government health agencies

Question 4

Under the HIPAA Privacy Rule, which of the following does NOT require patient authorization for disclosure?

Accepted Answer

Disclosure for treatment, payment, or healthcare operations (TPO)

Answer

Disclosure to a marketing firm

Answer

Disclosure to a researcher without a waiver

Answer

Disclosure of psychotherapy notes

Question 5

What must a covered entity do when a breach of unsecured PHI affects 500 or more individuals in a state?

Accepted Answer

Notify affected individuals, HHS, and prominent media outlets in the affected state within 60 days

Answer

Notify HHS only within 60 days

Answer

Notify only the affected individuals within 30 days

Answer

File a police report and notify HHS annually

Question 6

What is a business associate agreement (BAA) under HIPAA?

Accepted Answer

A written contract requiring business associates to appropriately safeguard PHI they access on behalf of a covered entity

Answer

A contract requiring vendors to use only approved EHR software

Answer

An employment agreement for HIM staff handling PHI

Answer

An insurance agreement covering HIPAA violation fines