HIPAA Training

HIPAA Training I don't need a business associate agreement for: - ANSContracted employees such as a respiratory therapist who perform a substantial portion of their work at my facility My employees My cleaning service It is permissible to store PHI on portable media such as a flash drive as long as the media doesn't leave your work environment. - ANSFalse PHI can ONLY be given out after obtaining written authorization. - ANSFalse I have loaded the company software to my personal smartphone so that I am able to access my work email account from my telephone. Which is true because I use my personal smartphone for work purposes? - ANSThe company can and does conduct regular audits of all personal devices to which company applications have been installed. In which cases can a facility legally share patient information? - ANSWhen making a legally mandated report or disclosure When working with other members of a patient's healthcare team to determine best treatment options PHI includes which of the following? - ANSThe patient's diagnosis PCI Compliance refers to: - ANSAll of the Above In which cases can a healthcare provider legally share patient information without the patient's consent? - ANSJudicial proceedings Identification of a dead body Billing information is protected under HIPAA. - ANSTrue Which of the following is NOT an example of PHI? - ANSA report containing the number of HIV cases in the state of TN. Which of the following refer to email phishing security concerns? - ANSAttempted attacks using methods such as emails that request recipients to update or to verify their personal and financial information but which appear to come from a legitimate source, such as a bank, online retailer, or shipping company. Attempted attacks which may include viruses embedded in attachments or accessed via web links contained in the emails which could adversely impact systems and applications in an effort to gain access to a company's network. What is the most serious consequence for intentionally breaching PHI security? - ANSYou can lose your license Which of the following is an example of a good precaution to protect patient information? - ANSLocking paper records and setting computer passwords Not using patients' names in public areas Taking the family aside and speaking quietly when discussing a patient's state When you discover that a breach in PHI security has occurred, to whom should you report it? - ANSYour supervisor and the facility privacy officer If a patient wants to request a restriction on the disclosure of their PHI: - ANSIt must be in writing. Which of the following methods ensures that PHI included in an email remains secure? - ANSEncrypting your work email by putting "PRIVATE" in the subject line before you transmit your email As a healthcare worker, you are permitted to access the medical record of which individual? - ANSYour patient What does the minimum necessary rule mean? - ANSEmployees only look at health information necessary to do their job. What is PHI? - ANSProtected Health Information HIPAA provides standards governing which aspects of a patient's PHI? - ANSPrivacy and security Under the American Recovery and Reinvestment Act (ARRA), when a suspected breach of PHI has been confirmed, a hospital must report the violation to: - ANSThe U.S. Department of Health and Human Services PHI in written or verbal form is considered secure. - ANSFalse Where do you need to exercise caution when talking about patients? - ANSIn the cafeteria, in the hospital halls, at the nurse's desk - all of the above PCI Compliance refers to: - ANS- commitment to compliance with the Payment Card Industry Data Security Standards - commitment to protecting cardholder data that we obtain from our patients and other third parties in the ordinary course of our business - commitment to safeguarding exposure to credit card information in electronic or paper format ALL OF THE ABOVE