Hipaa Quiz and Answers COMPLETE A+

1. Each healthcare agency and provider must have policies and procedures for maintaining the privacy of Protected Health Information (PHI). True False 2. Under the HIPAA privacy rule, it is illegal to: a. Obtain information from a patient during treatment b. Share information obtained from a patient with the patient's physican c. Fail to adequately protect health information from relase 3. Healthcare agencies must have policies that provide guidelines for: a. Training requirements b. Penalties for not complying with the privacy requirements c. a and b d. None of the above 4. Patients have a right to: a. Restrict access to their protected health information (PHI) b. Amend their protected health information (PHI) c. Request an accounting for disclosures of their protected health information (PHI) d. All of the above 5. Health care operations are defined as activities considered in support of treatment and payment for which protected health information could be used or disclosed without individual authorizations. True False 6. "Minimum Necessary" means, when protected health information is used, disclosed, or requested, reasonable efforts must be taken to determine how much information will be sufficient to serve the intended purpose. True False 7. Privacy regulations cover use of disclosure of personal health information in the following format: a. Oral communication b. Written communication c. Electronic communication d. All of the above 8. It is important to remember that you should never discuss patient information with anyone unless it is for an approved purpose. True False 9. It is important that patients understand how their healthcare providers and insurer protect their information. True False 10. Which of the following is a prodedure that protects the confidentiality of patient information? a. Medical record file cabinets and file room doors are kept locked b. Passwords to access computerized medical records are not shared c. There are rules that prohibit employees from looking at records unless they have a need to know the information d. All of the above 11. It is the duty of every healthcare provider and agency to protect the confidentiality and privacy of patient healthcare information. True False 12. If you suspect a fellow employee of violating privacy policies, you should: a. Try to ignore the violation if it doesn't directly concern you b. Watch the individual until you have gathered solid evidence c. Report your suspicions to your supervisor 13. The Notice of Privacy Practices informs patients of their right to: a. Inspect their medical records b. Request amendments to their medical records c. View a list of disclosures of their medical information d. All of the above 14. Knowingly releasing patient information can result in civil and/or criminal sanctions including fines and jail time. True False 15. Health Care Operations are described in the Notice of Private Practices (NPP). True False 16. "Minimum necessary" means, when PHI is used, disclosed, or requested, reasonable efforts must be taken to determine how much information will be sufficient to serve the intended purpose. True False 17. It is the duty of every healthcare provider to protect the confidentiality and privacy of patient health information. True False 18. While visiting his mother, Mrs. Jones' son, a laboratory technician, notices that the hospital has an electronic health record system. He recognizes the software program and wants to see how it works. He sits down at an open computer and begins to look at the program. The nurse should: a. Ask him if any additional assistance is needed b. Ask him to close the program c. Provide him a private location to review the program 19. An individual who wishes to file a complaint concerning a violation of privacy may: a. File the complaint with the Federal Government b. File the complaint with the individual employee c. File the complaint with the healthcare agency d. a and c 20. Mrs. White's daughter is assisting her mother in maintaining a personal health record. She asks the record department of the hospital for copies of important documents from her mother's medical records. Is the hospital allowed to release this information to Mrs. White's daughter? a. No, because PHI may be released only to the individual b. No, because the daughter may not understand the results of the diagnostics test c. Yes, but only if the physician agrees to the request d. Yes, but only if Mrs. White signs an authorization After you click submit, your results will be calculated