HIPAA Overview Questions with Complete and Certified Answers

HIPAA Overview Questions with Complete and Certified Answers Which of the following would be considered PHI? A. An individual's first and last name and the medical diagnosis in a physician's progress report B. Individually identifiable health information (IIHI) in employment records held by a covered entity (CE) in its role as an employer C. Results of an eye exam taken at the DMV as part of a driving test D. IIHI of persons deceased more than 50 years A. An individual's first and last name and the medical diagnosis in a physician's progress report Under HIPAA, a covered entity (CE) is defined as: A. A health plan. B. A health care clearinghouse. C. A health care provider engaged in standard electronic transactions covered by HIPAA D. All of the above The correct answer is D. Under HIPAA, a CE is a health plan, a health care clearinghouse, or a health care provider engaged in standard electronic transactions covered by HIPAA. Select the best answer. The HIPAA Privacy Rule applies to which of the following? A. PHI transmitted orally B. PHI in paper form C. PHI transmitted electronically D. All of the above The correct answer is D. The HIPAA Privacy Rule applies to PHI that is transmitted or maintained by a covered entity or a business associate in any form or medium. An incidental use or disclosure is not a violation of the HIPAA Privacy Rule if the covered entity (CE) has: A. Implemented the minimum necessary standard B. Established appropriate administrative safeguards C. Established appropriate physical and technical safeguards D. All of the above The correct answer is D. An incidental use or disclosure is an unintended use or disclosure that occurs as a result of another use or disclosure that is permitted by the HIPAA Privacy Rule. Uses or disclosures that occur when carrying out a use or disclosure that is permitted or required by HIPAA are not considered a violation of the HIPAA Privacy Rule, provided that the CE has implemented the minimum necessary standard and established appropriate administrative, physical, and technical safeguards Select the best answer. Which of the following are true statements about limited data sets? A. A limited data set is PHI that excludes 16 specific direct identifiers of the individual or relatives, employers or household members of the individual, as set forth in the HIPAA Privacy Rule and DoD 's implementing issuance B. A limited data set can be used or disclosed only