RHIA Domain 2 Test with A
Graded Solutions
Which one of the following actions would NOT be included in the professional
obligations of the health information practitioner that lead to responsible handling of
patient health information?
- Take a compromising position toward optimal interpretation of nonspecific regulations
and laws.
- Extend privacy and security principles into all aspects of the data use, access, and
control program adopted in the organization.
- Educate consumers about their rights and responsibilities regarding the use of their
personal health information.
- Honor the patient-centric direction of the national agenda. - Answer-Take a
compromising position toward optimal interpretation of nonspecific regulations and laws.
You are the director of the Health Information Management Department for Bayshore
Hospital. A former patient of the hospital, Barbara Masters, is suing the hospital for
negligent care of an infected decubitus ulcer. You are asked by Barbara's attorney to
provide sworn verbal testimony and/or written answers to questions.
Referring to Case Study #2, what phase of the lawsuit are you involved in?
- trial
- discovery
- pretrial conference
- appeal - Answer-discovery.
You are the director of the Health Information Management Department for Bayshore
Hospital. A former patient of the hospital, Barbara Masters, is suing the hospital for
negligent care of an infected decubitus ulcer. You are asked by Barbara's attorney to
provide sworn verbal testimony and/or written answers to questions.
Referring to Case Study #2, Barbara Masters is the _____________ in this case.
- plaintiff
- appellee
- defendant
- appellant - Answer-plaintiff.
, To which of the following requesters can a facility release information about a patient
without that patient's authorization?
- a court with a court order
- the public health department
- the nurse caring for the patient
- a business associate - Answer-a court with a court order
One best practice to follow in order to establish safeguards for the security and
confidentiality of a patient's information when a person makes a request for his or her
records in person is to
- refer the requester to the facility's attorney.
- charge an exorbitant fee.
- ask the requester for identification and the request in writing.
- refuse the request. - Answer-ask the requester for identification and the request in
writing.
Before an employee can be given access to the EHR, someone has to determine what
the employee is allowed to have access to. What is this known as?
- authentication
- workforce clearance procedure
- authorization
- health care clearinghouse - Answer-workforce clearance procedure
Which of the following is an example of a security incident?
- A handheld device was left unattended on the crash cart in the hall for 10 minutes.
- An employee took home a laptop with unsecured PHI.
- A hacker accessed PHI from off site.
- Temporary employees were not given individual passwords. - Answer-A hacker
accessed PHI from off site.
HIM personnel charged with the responsibility of bringing a medical record to court
would ordinarily do so in answer to a
- deposition.
- personal subpoena.
- judgment.
- subpoena duces tecum. - Answer-subpoena duces tecum.
Substance abuse records cannot be redisclosed by a receiving facility to another health
care facility unless the
- physician signs the DNR form.
Graded Solutions
Which one of the following actions would NOT be included in the professional
obligations of the health information practitioner that lead to responsible handling of
patient health information?
- Take a compromising position toward optimal interpretation of nonspecific regulations
and laws.
- Extend privacy and security principles into all aspects of the data use, access, and
control program adopted in the organization.
- Educate consumers about their rights and responsibilities regarding the use of their
personal health information.
- Honor the patient-centric direction of the national agenda. - Answer-Take a
compromising position toward optimal interpretation of nonspecific regulations and laws.
You are the director of the Health Information Management Department for Bayshore
Hospital. A former patient of the hospital, Barbara Masters, is suing the hospital for
negligent care of an infected decubitus ulcer. You are asked by Barbara's attorney to
provide sworn verbal testimony and/or written answers to questions.
Referring to Case Study #2, what phase of the lawsuit are you involved in?
- trial
- discovery
- pretrial conference
- appeal - Answer-discovery.
You are the director of the Health Information Management Department for Bayshore
Hospital. A former patient of the hospital, Barbara Masters, is suing the hospital for
negligent care of an infected decubitus ulcer. You are asked by Barbara's attorney to
provide sworn verbal testimony and/or written answers to questions.
Referring to Case Study #2, Barbara Masters is the _____________ in this case.
- plaintiff
- appellee
- defendant
- appellant - Answer-plaintiff.
, To which of the following requesters can a facility release information about a patient
without that patient's authorization?
- a court with a court order
- the public health department
- the nurse caring for the patient
- a business associate - Answer-a court with a court order
One best practice to follow in order to establish safeguards for the security and
confidentiality of a patient's information when a person makes a request for his or her
records in person is to
- refer the requester to the facility's attorney.
- charge an exorbitant fee.
- ask the requester for identification and the request in writing.
- refuse the request. - Answer-ask the requester for identification and the request in
writing.
Before an employee can be given access to the EHR, someone has to determine what
the employee is allowed to have access to. What is this known as?
- authentication
- workforce clearance procedure
- authorization
- health care clearinghouse - Answer-workforce clearance procedure
Which of the following is an example of a security incident?
- A handheld device was left unattended on the crash cart in the hall for 10 minutes.
- An employee took home a laptop with unsecured PHI.
- A hacker accessed PHI from off site.
- Temporary employees were not given individual passwords. - Answer-A hacker
accessed PHI from off site.
HIM personnel charged with the responsibility of bringing a medical record to court
would ordinarily do so in answer to a
- deposition.
- personal subpoena.
- judgment.
- subpoena duces tecum. - Answer-subpoena duces tecum.
Substance abuse records cannot be redisclosed by a receiving facility to another health
care facility unless the
- physician signs the DNR form.
