HIPAA and Privacy Act Training (1.5 hrs) (DHA-US001)

HIPAA and Privacy Act Training (1.5 hrs) (DHA -US001) Select all that apply: In which of the following circumstances must an individual be given the opportunity to agree or object to the use and disclosure of their PHI? - Both A and C -Before PHI directly relevant to a person's involvement with the individual's care or payment of health care is shared with that person - Before their information is included in a facility directory Which of the following statements about the HIPAA Security Rule are true? - All of the above A covered entity (CE) must have an established complaint process. - True The e -Government Act promotes the use of electronic government services by the public and improves the use of information techn ology in the government. - True When must a breach be reported to the U.S. Computer Emergency Readiness Team? - Within 1 hour of discovery Which of the following statements about the Privacy Act are true? - All of the above What of the following are cat egories for punishing violations of federal health care laws? - All of the above Which of the following are common causes of breaches? - All of the above Which of the following are fundamental objectives of information security? - All of the above If an individual believes that a DoD covered entity (CE) is not complying with HIPAA, he or she may file a complaint with the: - All of the above Technical safeguards are: - Information technology and the associated policies and procedures that are used to protect and control access to ePHI A Privacy Impact Assessment (PIA) is an analysis of how information is handled: - All of the above A breach as defined by the DoD is broader than a HIPAA breach (or breach defined by HHS). - True Which of the following are breach prevention best practices? - All of the above