HIPAA and Privacy Act Training (1.5 hrs.) - Pre-Test Answers | Latest Version | 2025/2026 | Correct & Verified

HIPAA and Privacy Act Training (1.5 hrs.) - Pre-Test Answers | Latest Version | 2025/2026 | Correct & Verified What is the Privacy Act of 1974 designed to protect? The privacy of personal information maintained by federal agencies What type of information is protected under both HIPAA and the Privacy Act? Personally identifiable information (PII) and protected health information (PHI) What should you do if you receive an email containing someone else's health information by mistake? Report it immediately to the privacy or security officer and delete the message securely What is the minimum necessary rule under HIPAA? Only the least amount of information needed should be used or disclosed When may PHI be disclosed without the individual’s authorization? When required by law, for treatment, payment, or healthcare operations 2 How long after a patient's death does HIPAA privacy protection remain in effect? 50 years What is the correct response if a patient asks to amend their health record? Direct them to the proper process and document the request according to policy What should be done before sharing patient information with another provider? Confirm the provider is involved in the patient’s treatment What must be done when storing paper medical records overnight? Secure them in a locked location or file cabinet Who must comply with HIPAA regulations? All healthcare providers, health plans, healthcare clearinghouses, and their business associates What is one way to safeguard PHI on a computer? 3 Use a strong password and log out when leaving the workstation What is an example of a Privacy Act violation? Accessing someone’s personnel file without a need-to-know basis What is required before a healthcare provider can share information with a family member? The patient’s verbal or written permission When is it appropriate to leave a voicemail with detailed medical information? Only if the patient has explicitly authorized this form of communication What should you do if someone without a need to know asks for patient information? Politely refuse and explain that access is restricted to authorized individuals only What is one responsibility of someone who handles PII or PHI in the workplace? To protect that information from unauthorized access, use, or disclosure What is the best way to dispose of printed documents containing PHI? 4 Use a designated, secure shredder or locked disposal bin What must be done before emailing PII or PHI? Ensure it is encrypted and the recipient is authorized What is considered a breach under HIPAA? Unauthorized access, use, or