HIPAA - JKO – Remedial QUESTIONS AND ANSWERS ALL CORRECT
True or False? Under HIPAA, a person or entity that provides services to a CE that do not
involve the use or disclosure of PHI would be considered a BA. Correct Answer: False
Do Betty's actions in this scenario constitute a HIPAA Privacy Rule violation? Correct Answer:
Yes, because Betty's actions are in violation of the minimum necessary standard in that John did
not need access to the patient's complete medical file (PHI) to perform his job duties
A friend of Phillip Livingston, a military service member who is being treated for a broken leg at
Valley Forge MTF, asked what room Phillip is in so that he can visit.
Which of the following is required? Correct Answer: The patient must be given an opportunity
to agree or object to the use or disclosure
The Chief Medical Officer for Valley Forge MTF utilizing PHI is conducting a monthly
physician peer review operations exercise.
Which of the following is required? Correct Answer: Neither an authorization nor an
opportunity to agree or object is required
Abigail Adams is a TRICARE beneficiary and patient at Valley Forge MTF and is applying for
Sun Life Insurance. Sun Life has requested some of Abigail's medical records in order to
evaluate her application.
Which of the following is required? Correct Answer: An authorization is required
Dr. Jefferson sends a patient's medical record to the surgeon's office in support of a referral for
treatment he made for the patient.
Which of the following is required? Correct Answer: Neither an authorization nor an
opportunity to agree or object is required
Valley Forge MTF discloses a patient's information in response to a request from HHS in the
investigation of a patient complaint.
Which of the following is required? Correct Answer: Neither an authorization nor an
opportunity to agree or object is required
Did Valley Forge MTF handle George's request appropriately? Correct Answer: No, because the
MTF is required to respond to George in writing, providing an accounting of certain disclosures
going back 6 years from the date of the request
Which of the following would be considered PHI? Correct Answer: An individual's first and last
name and the medical diagnosis in a physician's progress report
Select the best answer. The HIPAA Privacy Rule applies to which of the following? Correct
Answer: All of the above
Which of the following is not electronic PHI (ePHI)? Correct Answer: Health information stored
on paper in a file cabinet
True or False? Under HIPAA, a person or entity that provides services to a CE that do not
involve the use or disclosure of PHI would be considered a BA. Correct Answer: False
Do Betty's actions in this scenario constitute a HIPAA Privacy Rule violation? Correct Answer:
Yes, because Betty's actions are in violation of the minimum necessary standard in that John did
not need access to the patient's complete medical file (PHI) to perform his job duties
A friend of Phillip Livingston, a military service member who is being treated for a broken leg at
Valley Forge MTF, asked what room Phillip is in so that he can visit.
Which of the following is required? Correct Answer: The patient must be given an opportunity
to agree or object to the use or disclosure
The Chief Medical Officer for Valley Forge MTF utilizing PHI is conducting a monthly
physician peer review operations exercise.
Which of the following is required? Correct Answer: Neither an authorization nor an
opportunity to agree or object is required
Abigail Adams is a TRICARE beneficiary and patient at Valley Forge MTF and is applying for
Sun Life Insurance. Sun Life has requested some of Abigail's medical records in order to
evaluate her application.
Which of the following is required? Correct Answer: An authorization is required
Dr. Jefferson sends a patient's medical record to the surgeon's office in support of a referral for
treatment he made for the patient.
Which of the following is required? Correct Answer: Neither an authorization nor an
opportunity to agree or object is required
Valley Forge MTF discloses a patient's information in response to a request from HHS in the
investigation of a patient complaint.
Which of the following is required? Correct Answer: Neither an authorization nor an
opportunity to agree or object is required
Did Valley Forge MTF handle George's request appropriately? Correct Answer: No, because the
MTF is required to respond to George in writing, providing an accounting of certain disclosures
going back 6 years from the date of the request
Which of the following would be considered PHI? Correct Answer: An individual's first and last
name and the medical diagnosis in a physician's progress report
Select the best answer. The HIPAA Privacy Rule applies to which of the following? Correct
Answer: All of the above
Which of the following is not electronic PHI (ePHI)? Correct Answer: Health information stored
on paper in a file cabinet
