RHIT - Registered Health Information Technician HIPAA Privacy and Security 3

Question 1

A hospital employee looks up a celebrity patient's record out of curiosity. What type of HIPAA violation is this?

Accepted Answer

An impermissible access/use of PHI that violates the minimum necessary standard

Answer

Not a violation since the employee has access

Answer

Only a violation if information is shared

Answer

A violation only if the patient complains

Question 2

What is a HIPAA Security Rule 'addressable' implementation specification?

Accepted Answer

A specification where the organization must assess if it is reasonable, and if not, document why and implement an alternative

Answer

A specification that is optional

Answer

Only applies to large hospitals

Answer

Only addresses physical security

Question 3

What are the HIPAA Security Rule's physical safeguard requirements?

Accepted Answer

Policies to protect electronic systems, equipment, and buildings from hazards and unauthorized intrusion

Answer

Only locking the front door

Answer

Only installing security cameras

Answer

Physical safeguards are not in the Security Rule

Question 4

What rights do patients have regarding restrictions on PHI use under HIPAA?

Accepted Answer

Patients can request restrictions, and providers must agree when patients pay out-of-pocket in full

Answer

No rights to restrict

Answer

Patients can demand all uses be restricted

Answer

Only attorneys can request restrictions

Question 5

What is the HIPAA Security Rule requirement for a designated security official?

Accepted Answer

Every covered entity must designate a security official responsible for developing and implementing security policies

Answer

It is optional for small practices

Answer

Only hospitals need one

Answer

The security official must be a physician

Question 6

What special protections does HIPAA provide for psychotherapy notes?

Accepted Answer

Separate patient authorization required for most uses and disclosures, beyond standard TPO permissions

Answer

Same protections as all other PHI

Answer

Not covered by HIPAA

Answer

Only the patient can access them