HIPAA Regulations Exam Questions
and Answers
It is illegal for a patient to be denied a copy of his chart if he is unable to pay the fee to
obtain it? T/F - ANS-True
Only the patient can waive the right to confidentiality? T/F - ANS-True
According to HIPAA, individually identifiable information does NOT include vehicle
identification number. T/F - ANS-False
It is not acceptable to have patients sign in to the office on a common sheet? T/F - ANS-
True
A medical assistant may fax a patient's record? T/F - ANS-True, if it related to TPO.
If a person has the ability to access facility's computer systems or applications, they
have the right to view any information contained in that system or application? T/F -
ANS-False
Copies of patient information may be disposed of in any garbage can in the facility? T/F
- ANS-False
Protected health information is anything that connects a patient to his or her health
information? T/F - ANS-True, past, present, or future.
HIPAA security and privacy regulations apply to? (A. only attending healthcare workers
who do direct patient care, B. only the billing department, C. anyone working in a
medical facility, D. Top management) - ANS-C
A visitor who asks for a patient by name may receive the following information except?
(A. patient name, B. patient condition in general terms e.g. stable, critical, etc., C.
patient room number, D. patient diagnosis) - ANS-D
Which of the following are some common features designed to protect confidentiality of
health information contained in patient medical records? (A. locks on medical records
rooms, B. passwords to access computerized records, C. rules that prohibits employees
from looking at records unless they have a need to know, D. all of the above) - ANS-D
, Confidential information must not be shared with another unless the recipient has? (A.
OK from a doctor, B. the need to know, C. permission from Human Resources, D. is a
family member of the patient) - ANS-B
Which of the following is the appropriate person with whom to share patient information
even if the patient has NOT specifically authorized the release of the information to the
individual? (A. a former physician of the patient who is concerned about the patient, B. a
colleague who needs information about the patient to provide proper care, C. a friend of
the patient, D. a pharmaceutical salesman who is offering a fee for a list of patients to
whom he could send a free sample of it's product) - ANS-B
What is the standard for accessing patient information? (A. a need to know for the
performance of your job, B. if a physician asks you the diagnosis of the patient, C. just
because you are curious, D. you are a relative of the patient) - ANS-A
Confidentiality and privacy are important concepts in healthcare because? (A. they help
protect a medical facility from lawsuits, B. they allow patients to feel comfortable sharing
information with their doctors, C. they avoid the confusion of having people other than a
physician distributing information about a patient, D. both A & B) - ANS-D
You are approached by an individual who tells you that he is here to work on the
computers and wants you to open a door for him or point the way to a workstation. How
do you respond to his request? (A. provide him with the information or access he needs
because he looks official, B. ask him who at the medical facility has hired him and refer
him to that person for assistance, C. immediately detain him and call the police and let
them investigate weather he has a legitimate reason for being there, D. none of the
above) - ANS-B
When is the patient's written authorization to release information required? (A. in most
cases, when patient information is going to be shared with anyone for reasons other
than treatment, payment, or health care operations, B. upon admission the medical
facility, C. When patient information is to be shared among two or more clinicians, D.
when patient information is used for billing a private insurer) - ANS-A
Civil Money Penalty (CMP) - ANS-A punitive fine imposed by a civil court on a covered
entity that has profited from illegal or unethical activity.
Code of Federal Regulations (CFR) - ANS-The codified regulations of the Federal
government based on the final agency regulations published in the Federal Register.
Deficit Reduction Act of 2005 - ANS-Created Medicaid Integrity Program (MIP), which
increased resources available to CMS to combat abuse, fraud, and waste in the
Medicaid program. Congress requires annual reporting by CMS about the use and
effectiveness of funds appropriated for the MIP.
and Answers
It is illegal for a patient to be denied a copy of his chart if he is unable to pay the fee to
obtain it? T/F - ANS-True
Only the patient can waive the right to confidentiality? T/F - ANS-True
According to HIPAA, individually identifiable information does NOT include vehicle
identification number. T/F - ANS-False
It is not acceptable to have patients sign in to the office on a common sheet? T/F - ANS-
True
A medical assistant may fax a patient's record? T/F - ANS-True, if it related to TPO.
If a person has the ability to access facility's computer systems or applications, they
have the right to view any information contained in that system or application? T/F -
ANS-False
Copies of patient information may be disposed of in any garbage can in the facility? T/F
- ANS-False
Protected health information is anything that connects a patient to his or her health
information? T/F - ANS-True, past, present, or future.
HIPAA security and privacy regulations apply to? (A. only attending healthcare workers
who do direct patient care, B. only the billing department, C. anyone working in a
medical facility, D. Top management) - ANS-C
A visitor who asks for a patient by name may receive the following information except?
(A. patient name, B. patient condition in general terms e.g. stable, critical, etc., C.
patient room number, D. patient diagnosis) - ANS-D
Which of the following are some common features designed to protect confidentiality of
health information contained in patient medical records? (A. locks on medical records
rooms, B. passwords to access computerized records, C. rules that prohibits employees
from looking at records unless they have a need to know, D. all of the above) - ANS-D
, Confidential information must not be shared with another unless the recipient has? (A.
OK from a doctor, B. the need to know, C. permission from Human Resources, D. is a
family member of the patient) - ANS-B
Which of the following is the appropriate person with whom to share patient information
even if the patient has NOT specifically authorized the release of the information to the
individual? (A. a former physician of the patient who is concerned about the patient, B. a
colleague who needs information about the patient to provide proper care, C. a friend of
the patient, D. a pharmaceutical salesman who is offering a fee for a list of patients to
whom he could send a free sample of it's product) - ANS-B
What is the standard for accessing patient information? (A. a need to know for the
performance of your job, B. if a physician asks you the diagnosis of the patient, C. just
because you are curious, D. you are a relative of the patient) - ANS-A
Confidentiality and privacy are important concepts in healthcare because? (A. they help
protect a medical facility from lawsuits, B. they allow patients to feel comfortable sharing
information with their doctors, C. they avoid the confusion of having people other than a
physician distributing information about a patient, D. both A & B) - ANS-D
You are approached by an individual who tells you that he is here to work on the
computers and wants you to open a door for him or point the way to a workstation. How
do you respond to his request? (A. provide him with the information or access he needs
because he looks official, B. ask him who at the medical facility has hired him and refer
him to that person for assistance, C. immediately detain him and call the police and let
them investigate weather he has a legitimate reason for being there, D. none of the
above) - ANS-B
When is the patient's written authorization to release information required? (A. in most
cases, when patient information is going to be shared with anyone for reasons other
than treatment, payment, or health care operations, B. upon admission the medical
facility, C. When patient information is to be shared among two or more clinicians, D.
when patient information is used for billing a private insurer) - ANS-A
Civil Money Penalty (CMP) - ANS-A punitive fine imposed by a civil court on a covered
entity that has profited from illegal or unethical activity.
Code of Federal Regulations (CFR) - ANS-The codified regulations of the Federal
government based on the final agency regulations published in the Federal Register.
Deficit Reduction Act of 2005 - ANS-Created Medicaid Integrity Program (MIP), which
increased resources available to CMS to combat abuse, fraud, and waste in the
Medicaid program. Congress requires annual reporting by CMS about the use and
effectiveness of funds appropriated for the MIP.
