Exam 4: Hipaa: Health Insurance Portability and Accountability Act of 1996

Pharmacies and __________ equipment (DME) companies can be more flexible than providers' offices in their requirements for authorizations for the release of information.

What is the purpose of an internal audit?

ICD-10-CM will NOT be approved as a uniform code set according to HIPAA guidelines.

The HITECH Act is a subset of the original HIPAA legislation.

What type of information is regulated by the HIPAA Privacy Rule?

When patients ask a family member to remain with them in a treatment room, this implies that they have given permission for the doctor and/or staff to discuss their condition in front of the family member.

Under HIPAA, which of the following are covered entities? A)Health insurance plans B)Healthcare providers C)Clearinghouses D)Most employers

In the event of a security breach in regard to protected health information (PHI), providers and other covered entities must notify both the DHHS Office for Civil Rights (OCR) and the: A)individuals whose records were affected. B)Centers for Medicare and Medicaid Services (CMS). C)insurance carriers whose claims were affected. D)Consumer Protection Agency.

The Health Insurance Portability and Accountability Act (HIPAA) was signed into law in 1996, and covered entities were required to fully implement its guidelines by: A)2000. B)2002. C)2003. D)2005.

Which type of safeguard involves controlling access to facility security plans and maintenance records and requiring all visitors to sign in? A)Administrative B)Procedural C)Physical D)Technical

HIPAA privacy protections apply to which type of healthcare data? A)Paper and electronic records B)Paper records only C)Electronic records only D)Paper and electronic records created in the last 5 years

What types of automated functions may be part of electronic information systems?

Civil penalties are penalties that include prison time.

The electronic record that documents a patient's encounters with physicians and other clinicians that is stored within one provider's system is the electronic: A)data interchange. B)health record. C)medical record. D)patient database.

The HIPAA Privacy Rule regulates the use and __________ of protected health information (PHI).

The overall purpose of HIPAA transactions and code set rules is to: A)require that all claims be submitted in exactly the same electronic format. B)limit the number of methods that can be used for file encryption. C)standardize the electronic exchange of protected health information (PHI). D)authorize certain organizations to act as claims clearinghouses.

Under the HIPAA Privacy Rule, a physician may discuss a patient's medical condition or treatment with a family member or friend only if: A)it is necessary in discussing payment for services. B)the patient is unconscious. C)the patient agrees verbally, in writing, or consent is implied. D)the patient has a terminal illness.

Compliance with the HITECH Act is to occur in three stages, and organizations can receive financial incentives for achieving compliance objectives by designated dates.

Protected health information (PHI) can be disclosed in which of the following circumstances? A)A coroner requests it to assist in identifying a body. B)The U.S. Food and Drug Administration requests it in relation to a product recall. C)An organ procurement organization requests it to facilitate the donation and transplantation of organs. D)A patient has been admitted to the emergency department and the family is trying to locate him or her.

Providers are legally obligated to disclose protected health information (PHI) to public health authorities when a: A)particularly severe flu epidemic has occurred. B)person may have been exposed to certain communicable diseases. C)patient or staff member has a prison record. D)patient has returned from a trip to a country with poor sanitation.