HCCA CHPC COMPREHENSIVE
EXAMINATION TEST SOLVED QUESTIONS
AND VERIFIED ANSWERS FULL SOLUTION
⩥ The privacy professional's main task
is to reduce risk by ensuring that privacy rights are not violated. How
does Minimum Necessary accomplish this?.
Answer: - justify why they want information sent
- why access is allowed, based on the use or disclosure but limited to the
minimum necessary
⩥ You MAY use or disclose without
authorization for which 14 circumstances?.
Answer: • Treatment
• Payment
• Business operations
• Research (under certain circumstances)
• As required by law
• To avert a serious threat to health or safety
• Workers compensation
• Public health activities
• Reporting abuse, neglect or domestic violence
,• Health oversight activities
• Organ and tissue donation
• Lawsuits and disputes
• Law enforcement
• Specialized government functions.
⩥ Who can Deceased Individuals information be released at anytime?.
Answer: decedent information can be released to coroners or medical
examiners
⩥ When can a decedent information be released for research?.
Answer: if the CE first obtains, from the
researcher, a representation that the use or
disclosure sought is solely for research on the
protected health information of decedents.
⩥ Are two specific instances where a CE must seek permission from the
individual if they want to use or disclose PHI?.
Answer: - "facility directories,"
- Second is "uses and disclosures for involvement in the individual's care
and notification purposes.
⩥ Is a valid authorization required for Psychotherapy Notes/Records?.
, Answer: yes, except for TPO including the entity's internal
training program and Marketing.
⩥ What are the seven elements of a valid Authorization?.
Answer: • A specific and meaningful description of the
information to be disclosed, including specific
• A specific division is identified as the one
authorized to disclose the medical record;
• The name or other specific identification of the
person(s) or entity(ies) to whom disclosure can
be made;
• A statement of the purpose of the requested
disclosure (which may be "at the request of the
client"), including any limitations on the use of
the information;
• An expiration date or a valid expiration event
AND check that the date has not passed nor
has the expiration event occurred;
• A signature dated by client or client's authorized
personal representative. If signed by the
authorized personal representative, a description
of such representative's authority to act for the
EXAMINATION TEST SOLVED QUESTIONS
AND VERIFIED ANSWERS FULL SOLUTION
⩥ The privacy professional's main task
is to reduce risk by ensuring that privacy rights are not violated. How
does Minimum Necessary accomplish this?.
Answer: - justify why they want information sent
- why access is allowed, based on the use or disclosure but limited to the
minimum necessary
⩥ You MAY use or disclose without
authorization for which 14 circumstances?.
Answer: • Treatment
• Payment
• Business operations
• Research (under certain circumstances)
• As required by law
• To avert a serious threat to health or safety
• Workers compensation
• Public health activities
• Reporting abuse, neglect or domestic violence
,• Health oversight activities
• Organ and tissue donation
• Lawsuits and disputes
• Law enforcement
• Specialized government functions.
⩥ Who can Deceased Individuals information be released at anytime?.
Answer: decedent information can be released to coroners or medical
examiners
⩥ When can a decedent information be released for research?.
Answer: if the CE first obtains, from the
researcher, a representation that the use or
disclosure sought is solely for research on the
protected health information of decedents.
⩥ Are two specific instances where a CE must seek permission from the
individual if they want to use or disclose PHI?.
Answer: - "facility directories,"
- Second is "uses and disclosures for involvement in the individual's care
and notification purposes.
⩥ Is a valid authorization required for Psychotherapy Notes/Records?.
, Answer: yes, except for TPO including the entity's internal
training program and Marketing.
⩥ What are the seven elements of a valid Authorization?.
Answer: • A specific and meaningful description of the
information to be disclosed, including specific
• A specific division is identified as the one
authorized to disclose the medical record;
• The name or other specific identification of the
person(s) or entity(ies) to whom disclosure can
be made;
• A statement of the purpose of the requested
disclosure (which may be "at the request of the
client"), including any limitations on the use of
the information;
• An expiration date or a valid expiration event
AND check that the date has not passed nor
has the expiration event occurred;
• A signature dated by client or client's authorized
personal representative. If signed by the
authorized personal representative, a description
of such representative's authority to act for the
