Exam 1: Certified HIPAA Professional (CHP)

This security rule standard requires policies and procedures for authorizing access to electronic protected health information that are consistent with its required implementation specifications- which are Isolating Health Care Clearinghouse Function, Access Authorization, and Access Establishment and Modification

Select the best statement regarding the definition of the term "use" as used by the HIPAA regulations.

Select the best statement regarding de-identified information (DII).

Select the correct statement regarding code sets and identifiers.

The objective of this document is to safeguard the premises and building from unauthorized physical access and to safeguard the equipment therein from unauthorized physical access, tampering and theft:

To comply with the Final Privacy Rule, a valid Notice of Privacy Practices:

A hospital is preparing a file of treatment information for the state of California. This file is to be sent to external medical researchers. The hospital has removed SSN, name, phone and other information that specifically identifies an individual. However, there may still be data in the file that potentially could identify the individual. Can the hospital claim 'safe harbor" and release the file to the researchers?

Use or disclosure of Protected Health Information (PHI) for Treatment, Payment, and Health care Operations (TPO) is:

The National Provider Identifier (NPI) will eventually replace the:

The objective of this HIPAA security standard is to implement policies and procedures to prevent, detect, contain, and correct security Violations.

When submitting a Health Care Claim Status Request, it is important to provide the proper tracking information to exactly identify the previously submitted claim Select the information that would be most important to the claim inquiry/ process.

The implementation specifications for this HIPAA security standard (within Technical Safeguards) must support emergency access and unique user identification.

This code set describes drugs:

The Security Rule requires that the covered entity identifies a security official who is responsible for the development and implementation of the policies and procedures. This is addressed under which security standard?

Which of the following is example of "Payment" as defined in the HIPAA regulations?

Select the FALSE statement regarding the X12N Implementation Guides.

The National Provider Identifier (NPI) will eventually replace the:

The Final Privacy Rule requires a covered entity to obtain an individual's prior written authorization to use his or her PHI for marketing purposes except for:

Which of the following is NOT a correct statement regarding HIPAA requirements?

Which of the following is a required implementation specification associated with the Contingency Plan Standard?