Exam 4: Hipaa: Health Insurance Portability and Accountability Act of 1996

The HITECH requirements for the implementation of standardized electronic health records and related technologies are known as: A)standard code sets. B)meaningful use. C)certification. D)computerized provider order entry.

Providers who do NOT achieve the HITECH meaningful use standards by 2015 and in subsequent years will face penalties that consist of: A)reductions in the rate of Medicare reimbursement. B)reductions in the rate of Medicaid reimbursement. C)annual fines until they are in compliance. D)all of the above.

Patients have the right to access and copy their medical records, but they cannot dispute anything in the record.

A patient's electronic health record can contain information from multiple providers at multiple facilities such as physician offices, hospitals, imaging centers, and laboratories.

Under HIPAA, health plans, providers, and clearinghouses are considered __________ .

The HITECH Act expands the privacy provisions of HIPAA to include: A)corporate owners of covered entities. B)business associates of covered entities. C)friends and family of providers. D)friends and family of patients.

Which stage of HITECH requirements focuses on the use of electronic health records in disease management, clinical decision support, and quality measurement? A)Stage 1 B)Stage 2 C)Stage 3 D)Stage 4

The advantage of using electronic data interchange standards (EDI) in the transmission of medical and claims data is: A)improved data quality. B)faster processing of transactions. C)lower operating costs. D)all of the above.

Which type of safeguard involves the use of encryption when data is transmitted over open networks? A)Administrative B)Procedural C)Physical D)Technical

Providers may be asked to provide protected health information (PHI) as part of FDA investigations related to product defects or recalls.

HITECH Stage 1 requirements include the implementation of a computerized: A)medical coding system. B)medical practice management system. C)provider order entry system. D)accounting system.

Administrative safeguards are policies and procedures that demonstrate how a covered entity will comply with HIPAA rules.

The HIPAA Privacy rule forbids providers from ever disclosing protected health information (PHI) without the patient's permission, even in response to a court order.

The unique identifier for insurance plans and third-party payers and administrators is the: A)Federal Employer Identification Number (EIN). B)Social Security number. C)National Provider Identifier (NPI). D)National Health Plan Identifier.

HIPAA guidelines grant patients the right to access their own medical records and the right to: A)at least 10 free copies. B)request corrections of any inaccuracies in the records. C)designate a specific person at an insurance company who may also have access. D)file a complaint about how long it takes to get a claim paid.

HIPAA guidelines apply to which of the following types of healthcare administrative transactions? A)Health insurance claims B)Claim status requests and reports C)Eligibility requests and verifications D)All of the above

Which type of safeguard involves having procedures that clearly identify which employees have access to electronic protected health information (EPHI) and ongoing employee training on the proper methods for handling EPHI? A)Administrative B)Procedural C)Physical D)Technical

The electronic record that includes documentation of patient care across multiple healthcare organizations that can be viewed by all providers who have a relationship with the patient is the electronic: A)data interchange. B)health record. C)medical record. D)patient database.

The provision of HIPAA that applies to the use and disclosure of protected health information is the: A)Administrative Rule. B)Reimbursement Rule. C)Privacy Rule. D)Medical Records Rule.

Data that has been scrambled and/or encoded to prevent it from being readable by unauthorized users is __________ .