Health Law Exam 3 Questions With
Correct Answers
Privacy
Freedom from unauthorized intrusion in healthcare, including right of a
| | | | | | | | | |
patient to control the disclosure of PHI
| | | | | |
Confidentiality
Responsibility to use, disclose, or release information only with
| | | | | | | | |
knowledge and consent of individual
| | | |
HIPAA
Health Insurance Portability and Accountability Act. Assures privacy and
| | | | | | | | |
security of PHI | |
Health information
|
Any information in any from/medium that is created or received by a
| | | | | | | | | | | |
healthcare provider, health plan, public health authority, etc that relates
| | | | | | | | |
,to the past, present, or future physical or mental health or condition of
| | | | | | | | | | | | | |
an individuals
|
Covered Entity |
A health plan, a healthcare clearinghouse, or a healthcare provider who
| | | | | | | | | | |
transmits any health information in electronic form
| | | | | |
Business Associate and their workforce
| | | |
Person or organization that perform functions on behalf of the CE
| | | | | | | | | | |
involving the use or disclosure of individually identifiable health
| | | | | | | | |
information. Healthcare provider must have written agreement with BA
| | | | | | | |
3 aspects of PHI
| | |
Identifies the person, relates to ones health condition, is held by CE or
| | | | | | | | | | | | |
its BA |
Under what circumstances does HIPAA not apply?
| | | | | |
De-identified information (does not meet PHI aspects), identifiers relate
| | | | | | | | |
to individuals, CEs employment records
| | | |
, Decendants and HIPAA | |
PHI of decendants who are dead over 50 years loses PHI status and no
| | | | | | | | | | | | | |
longer protected by HIPPA
| | |
Notice of Privacy Practices
| | |
Document informing a patient of when and how their PHI can be used.
| | | | | | | | | | | | |
must be provided on first encounter and on request. Written
| | | | | | | | | |
acknowledgement must be obtained | | |
2 situations where HIPAA requires use or disclosure without an
| | | | | | | | | |
individuals authorization |
Individual or representative requests access to PHI or accounting of
| | | | | | | | | |
disclosures of PHI, US Department of Health and Human Services is
| | | | | | | | | | |
conducting an investigation, review, or enforcement action
| | | | | |
Incidental Uses and Disclosures of PHI
| | | | |
Occur as part of doing business as long as information disclosed is
| | | | | | | | | | | |
minimum necessary (calling out patient's name in office)
| | | | | | |
Correct Answers
Privacy
Freedom from unauthorized intrusion in healthcare, including right of a
| | | | | | | | | |
patient to control the disclosure of PHI
| | | | | |
Confidentiality
Responsibility to use, disclose, or release information only with
| | | | | | | | |
knowledge and consent of individual
| | | |
HIPAA
Health Insurance Portability and Accountability Act. Assures privacy and
| | | | | | | | |
security of PHI | |
Health information
|
Any information in any from/medium that is created or received by a
| | | | | | | | | | | |
healthcare provider, health plan, public health authority, etc that relates
| | | | | | | | |
,to the past, present, or future physical or mental health or condition of
| | | | | | | | | | | | | |
an individuals
|
Covered Entity |
A health plan, a healthcare clearinghouse, or a healthcare provider who
| | | | | | | | | | |
transmits any health information in electronic form
| | | | | |
Business Associate and their workforce
| | | |
Person or organization that perform functions on behalf of the CE
| | | | | | | | | | |
involving the use or disclosure of individually identifiable health
| | | | | | | | |
information. Healthcare provider must have written agreement with BA
| | | | | | | |
3 aspects of PHI
| | |
Identifies the person, relates to ones health condition, is held by CE or
| | | | | | | | | | | | |
its BA |
Under what circumstances does HIPAA not apply?
| | | | | |
De-identified information (does not meet PHI aspects), identifiers relate
| | | | | | | | |
to individuals, CEs employment records
| | | |
, Decendants and HIPAA | |
PHI of decendants who are dead over 50 years loses PHI status and no
| | | | | | | | | | | | | |
longer protected by HIPPA
| | |
Notice of Privacy Practices
| | |
Document informing a patient of when and how their PHI can be used.
| | | | | | | | | | | | |
must be provided on first encounter and on request. Written
| | | | | | | | | |
acknowledgement must be obtained | | |
2 situations where HIPAA requires use or disclosure without an
| | | | | | | | | |
individuals authorization |
Individual or representative requests access to PHI or accounting of
| | | | | | | | | |
disclosures of PHI, US Department of Health and Human Services is
| | | | | | | | | | |
conducting an investigation, review, or enforcement action
| | | | | |
Incidental Uses and Disclosures of PHI
| | | | |
Occur as part of doing business as long as information disclosed is
| | | | | | | | | | | |
minimum necessary (calling out patient's name in office)
| | | | | | |
