RHIA Domain 2 Exam Questions and
Answers
What is the Purpose of the security rule? - Answer-The Security Rule specifies a series
of administrative, physical, and technical safeguards for covered entities to use to
assure the confidentiality, integrity, and availability of electronic protected health
information, both in transit and at rest.
Which law was enacted to To improve portability and continuity of health insurance
coverage - Answer-HIPAA
Which law was enacted to combat waste, fraud, and abuse in health insurance and
healthcare delivery - Answer-HIPAA
Which piece of legislation pertains to making available the records of the executive
branch of the federal government? - Answer-Freedom of information act
Which law was enacted to
reduce costs and the administrative burdens of healthcare by improving efficiency and
effectiveness of the healthcare system by standardizing the interchange of electronic
data for specified administrative and financial transactions - Answer-HIPAA
Which law was enacted To ensure protecting the privacy of Americans' personal health
records by protecting the security and confidentiality of healthcare information - Answer-
HIPAA
The right of an individual to be left alone is the definition of ________ - Answer-Privacy
HIPAA mandated the ________ and _________ standards - Answer-Privacy and
security
The decision as to whether an item is considered protected under the privacy rule
depends largely on the definition of: - Answer-individually identifiable health information
(IIHI).
The HIPAA Privacy Rule defines protected health information as - Answer-"individually
identifiable information that is transmitted by electronic medium (paper or electronic), or
is transmitted or maintained in any other form or medium."
What is IIHI? - Answer-Individually identifiable health information
, What is the definition of IIHI? - Answer-The rule defines IIHI as information that is a
subset of health information, including demographic information collected from an
individual and the following:
The individual's past, present, or future physical or mental health condition
The provision of healthcare to the individual
The past, present, or future payment for the provision of health care to the individual
What does the Privacy rule cover? - Answer-protected health information in any format,
while the HIPAA security rule covers electronic protected health information (both in
transit and at rest).
What is a covered entiity? - Answer-as any health plan, healthcare clearinghouse, or
healthcare provider that transmits specific healthcare transactions in electronic form
(also called a "covered health care provider").
HITECH for the first time directly regulated business associates. Effective February 17,
2010, HITECH began to: - Answer--Require business associates to comply directly with
Rule provisions directing implementation of administrative, physical, and technical
safeguards for electronic PHR; and development and enforcement of related policies,
procedures, and documentation standards.
-Impose on business associates an obligation to directly comply with HIPAA's business
associate safeguards, including limiting use and disclosure of PHI as specified in
agreement or as required by law; facilitating access, amendment ,and accounting of
disclosures; opening books and records to DHHS; and returning or destroying PHI upon
contract termination.
-Deem a business associate to violate HIPAA if the business associate knows of a
"pattern of activity or practice" by a covered entity that breaches their business
association agreement, but fails to cure the breach, terminate the business associate
agreement or report the non-compliance to DHHS.
What is the fine for a HIPAA breach? - Answer-fine of up to $50,000 or up to one year in
prison or both
If a HIPAA offense is committed under false pretenses what could be the fine and
Prison time? - Answer-a fine of up to $100,000, up to five years in prison, or both
If the HIPAA offense is committed with intent to sell, transfer, or use individually
identifiable health information for commercial advantage, personal gain, or malicious
harm, the fine and prison time can be: - Answer-a fine up to $250,000, or up to 10 years
in prison, or both
Privacy is: " - Answer-the right of an individual to be let alone. It includes freedom from
intrusion into or observation of one's private affairs and the right to maintain control over
certain personal and health information."
Answers
What is the Purpose of the security rule? - Answer-The Security Rule specifies a series
of administrative, physical, and technical safeguards for covered entities to use to
assure the confidentiality, integrity, and availability of electronic protected health
information, both in transit and at rest.
Which law was enacted to To improve portability and continuity of health insurance
coverage - Answer-HIPAA
Which law was enacted to combat waste, fraud, and abuse in health insurance and
healthcare delivery - Answer-HIPAA
Which piece of legislation pertains to making available the records of the executive
branch of the federal government? - Answer-Freedom of information act
Which law was enacted to
reduce costs and the administrative burdens of healthcare by improving efficiency and
effectiveness of the healthcare system by standardizing the interchange of electronic
data for specified administrative and financial transactions - Answer-HIPAA
Which law was enacted To ensure protecting the privacy of Americans' personal health
records by protecting the security and confidentiality of healthcare information - Answer-
HIPAA
The right of an individual to be left alone is the definition of ________ - Answer-Privacy
HIPAA mandated the ________ and _________ standards - Answer-Privacy and
security
The decision as to whether an item is considered protected under the privacy rule
depends largely on the definition of: - Answer-individually identifiable health information
(IIHI).
The HIPAA Privacy Rule defines protected health information as - Answer-"individually
identifiable information that is transmitted by electronic medium (paper or electronic), or
is transmitted or maintained in any other form or medium."
What is IIHI? - Answer-Individually identifiable health information
, What is the definition of IIHI? - Answer-The rule defines IIHI as information that is a
subset of health information, including demographic information collected from an
individual and the following:
The individual's past, present, or future physical or mental health condition
The provision of healthcare to the individual
The past, present, or future payment for the provision of health care to the individual
What does the Privacy rule cover? - Answer-protected health information in any format,
while the HIPAA security rule covers electronic protected health information (both in
transit and at rest).
What is a covered entiity? - Answer-as any health plan, healthcare clearinghouse, or
healthcare provider that transmits specific healthcare transactions in electronic form
(also called a "covered health care provider").
HITECH for the first time directly regulated business associates. Effective February 17,
2010, HITECH began to: - Answer--Require business associates to comply directly with
Rule provisions directing implementation of administrative, physical, and technical
safeguards for electronic PHR; and development and enforcement of related policies,
procedures, and documentation standards.
-Impose on business associates an obligation to directly comply with HIPAA's business
associate safeguards, including limiting use and disclosure of PHI as specified in
agreement or as required by law; facilitating access, amendment ,and accounting of
disclosures; opening books and records to DHHS; and returning or destroying PHI upon
contract termination.
-Deem a business associate to violate HIPAA if the business associate knows of a
"pattern of activity or practice" by a covered entity that breaches their business
association agreement, but fails to cure the breach, terminate the business associate
agreement or report the non-compliance to DHHS.
What is the fine for a HIPAA breach? - Answer-fine of up to $50,000 or up to one year in
prison or both
If a HIPAA offense is committed under false pretenses what could be the fine and
Prison time? - Answer-a fine of up to $100,000, up to five years in prison, or both
If the HIPAA offense is committed with intent to sell, transfer, or use individually
identifiable health information for commercial advantage, personal gain, or malicious
harm, the fine and prison time can be: - Answer-a fine up to $250,000, or up to 10 years
in prison, or both
Privacy is: " - Answer-the right of an individual to be let alone. It includes freedom from
intrusion into or observation of one's private affairs and the right to maintain control over
certain personal and health information."
