RHIA Domain 2 Exam Study Questions with
Answers
Which of the following statements is true with regard to responding to requests
from individuals for access to their PHI? - Answer b. A cost-based fee may be
charged for making a copy of the PHI.
Charlie went to the HIM department at Langford Hospital to request an
amendment to his PHI. The HIM staff required that he make the request in
writing. He said this violated his HIPAA rights. Who is correct? - Answer d. The
HIM department, because the Privacy Rule allows covered entities to require that
amendment requests be made in writing
Which of the following is the appropriate method for destroying electronic data? -
Answer Degaussing
Emma is getting ready to begin kindergarten. Her school is requesting her
immunization records as required by state law. Per HIPAA, Emma's pediatrician
may: - Answer c. Disclose this PHI with verbal permission from Emma's parent
Generally, policies addressing the confidentiality of quality improvement (QI)
committee data (minutes, actions, and so forth) state that this kind of data is: -
Answer a. Protected from disclosure
Jan Carlson is the HIM manager at Community Hospital, and she is designing a
health record retention policy for the facility. Which legal source should she use
to determine how long medical records should be retained by the facility? -
Answer b. State law
, Which of the following is an administrative safeguard action? - Answer b.
Documentation retention guidelines
Employees in the hospital business office may have legitimate access to patient
health information without patient authorization based on what HIPAA standard
or principle? - Answer a. Minimum necessary
A patient requests copies of her medical records in an electronic format. The
hospital maintains a portion of the designated record set in a paper format and a
portion of the designated record set in an electronic format. How should the
hospital respond? - Answer c. Provide the patient with both paper and electronic
copies of the record
The HIPAA Privacy Rule states that the covered entity must provide individuals
with their information in the form that is requested by the individuals, if it is
readily producible in the requested format. The covered entity can certainly
decide, along with the individual, the easiest and least expensive way to provide
the copies they request. Per the request of an individual, a covered entity must
provide an electronic copy of any and all health information that the covered
entity maintains electronically in a designated record set. If a covered entity does
not maintain the entire designated record set electronically, there is not a
requirement that the covered entity scan paper documents so the documents can
be delivered electronically (Thomason 2013, 102).
The legal health record for disclosure consists of: - Answer c. The data,
documents, reports, and information that comprise the formal business records
of any healthcare entity that are to be utilized during legal proceedings
Answers
Which of the following statements is true with regard to responding to requests
from individuals for access to their PHI? - Answer b. A cost-based fee may be
charged for making a copy of the PHI.
Charlie went to the HIM department at Langford Hospital to request an
amendment to his PHI. The HIM staff required that he make the request in
writing. He said this violated his HIPAA rights. Who is correct? - Answer d. The
HIM department, because the Privacy Rule allows covered entities to require that
amendment requests be made in writing
Which of the following is the appropriate method for destroying electronic data? -
Answer Degaussing
Emma is getting ready to begin kindergarten. Her school is requesting her
immunization records as required by state law. Per HIPAA, Emma's pediatrician
may: - Answer c. Disclose this PHI with verbal permission from Emma's parent
Generally, policies addressing the confidentiality of quality improvement (QI)
committee data (minutes, actions, and so forth) state that this kind of data is: -
Answer a. Protected from disclosure
Jan Carlson is the HIM manager at Community Hospital, and she is designing a
health record retention policy for the facility. Which legal source should she use
to determine how long medical records should be retained by the facility? -
Answer b. State law
, Which of the following is an administrative safeguard action? - Answer b.
Documentation retention guidelines
Employees in the hospital business office may have legitimate access to patient
health information without patient authorization based on what HIPAA standard
or principle? - Answer a. Minimum necessary
A patient requests copies of her medical records in an electronic format. The
hospital maintains a portion of the designated record set in a paper format and a
portion of the designated record set in an electronic format. How should the
hospital respond? - Answer c. Provide the patient with both paper and electronic
copies of the record
The HIPAA Privacy Rule states that the covered entity must provide individuals
with their information in the form that is requested by the individuals, if it is
readily producible in the requested format. The covered entity can certainly
decide, along with the individual, the easiest and least expensive way to provide
the copies they request. Per the request of an individual, a covered entity must
provide an electronic copy of any and all health information that the covered
entity maintains electronically in a designated record set. If a covered entity does
not maintain the entire designated record set electronically, there is not a
requirement that the covered entity scan paper documents so the documents can
be delivered electronically (Thomason 2013, 102).
The legal health record for disclosure consists of: - Answer c. The data,
documents, reports, and information that comprise the formal business records
of any healthcare entity that are to be utilized during legal proceedings
