& As
Which are considered PII? CORRECT ANS-All of the Above
Organizations must report to Congress the status of their PII holdings every: CORRECT
ANS-Year
Covered entities must notify the affected individuals of a PHI breach within: CORRECT
ANS-60 days
Misuse of PII can result in legal liability of the organization. CORRECT ANS-True
The acronym PHI, in this context, refers to: CORRECT ANS-Protected Health Information
Where is a System of Records Notice (SORN) filed? CORRECT ANS-C. Federal Register
Misuse of PII can result in legal liability of the individual. CORRECT ANS-True
Covered entities must report all PHI breaches to the __________ annually. CORRECT ANS-
Secretary of Health and Human Services
A PIA is required if your system for storing PII is entirely on paper. CORRECT ANS-False