11/5/24, 3:53 AM HIM 320 Exam 2 Flashcards | Quizlet
HIM 320 Exam 2WITH COMPLETE SOLUTIONS GRADED
A+.
when should a patient receive a notice of on the day of the first appointment.
privacy practices (NPP)?
which of the following would you expect to the provider's duties concerning PHI.
find in a provider's NPP?
true/false: if a patient does not sign the false; there are some occasions where you do not need to as long as it is
acknowledgement of receipt of the NPP, documented that you did try to get the signature.
the provider cannot see the patient.
state law requires reporting of child abuse. HIPAA will not preempt state law- PHI can be released in accordance with the state
which of the following is correct? law requirement for reporting of abuse.
-HIPAA will preempt state law: we need
patient authorization to release any PHI.
-HIPAA will not preempt state law: PHI can
be released in accordance with the state
law requirement for reporting of abuse.
state law requires patient records be release the records within 30 days- HIPAA preempts state law in this situation.
released within 45 days. HIPAA requires
patient records be released within 30 days.
which of the following is correct?
-release the records within 30 days: HIPAA
preempts state law in this situation.
-release the records within 45 days: HIPAA
does not preempt state law in this situation.
HIPAA requires providers comply with a HIPAA (gives the patient more rights over their health information)
patient request to restrict disclosures for
payment purposes if the patient pays for
the service in full. state law allows
providers to deny all requests for
restrictions. which law should be followed?
-HIPAA
-state law
https://quizlet.com/783814891/him-320-exam-2-flash-cards/ 1/8
, 11/5/24, 3:53 AM HIM 320 Exam 2 Flashcards | Quizlet
how long should policies and procedures 6 years.
related to HIPAA be retained?
true/false: policies and procedures related false (it is not specific; says you have to retain it but does not say how)
to HIPAA must be maintained in paper and
electronic format.
HIPAA's privacy rule creates significant understand and control how their health information is used and disclosed.
rights for patient to help them do what?
how it will use and disclose PHI, the policies and procedures it has adopted to
covered entities must inform individuals of
protect the privacy of PHI, and to inform them of their rights with respect to their
what?
PHI.
Bernadette has been denied access to her the requested records are part of a research study in which Bernadette has agreed
health record. which of the following would to suspend the right of access.
be a valid reason to deny Bernadette's
request?
which of the following rights is not required the right to have an advanced directive placed in the record.
to be included and explained in a
provider's notice of privacy practices?
Dr. Hofstadter has denied Amy's request to Dr. Hofstadter must provide Amy with an opportunity to submit a written
amend her health record. According to disagreement.
HIPAA:
Wharton Medical Center just discovered a post the content of the breach on the WMC website for at least 90 days.
breach involving the records of 423
individuals residing in Lafayette, LA. notice
was sent immediately to the patients via
first class mail. twenty of those letters were
returned to WMC for incorrect address.
according to HITECH WMC must:
what was proposed by NPRM to allow access report.
individuals to see who has viewed their
DRS in the previous 3 years. TPO disclosure
would be displayed in this.
what is the unauthorized acquisition, use, or breach.
disclosure of PHI which compromises the
security or privacy of such information?
what imposes obligations on entities when breach notification.
PHI in their custody has been wrongfully
used or disclosed?
policy that ensures the integrity of the retaliation and waiver.
individual's right to complain about alleged
privacy rule violations?
HIPAA is not just about protecting privacy, give patients more control over their health information.
what else does it aim to do?
-right of access
-right to notice of healthcare's privacy practice
-right to request amendment
what are the individual rights of a patient? -right to an accounting of disclosure
-right to request confidential communications of PHI
-right to request restrictions on certain uses and disclosures
-right to file a complaint
https://quizlet.com/783814891/him-320-exam-2-flash-cards/ 2/8
HIM 320 Exam 2WITH COMPLETE SOLUTIONS GRADED
A+.
when should a patient receive a notice of on the day of the first appointment.
privacy practices (NPP)?
which of the following would you expect to the provider's duties concerning PHI.
find in a provider's NPP?
true/false: if a patient does not sign the false; there are some occasions where you do not need to as long as it is
acknowledgement of receipt of the NPP, documented that you did try to get the signature.
the provider cannot see the patient.
state law requires reporting of child abuse. HIPAA will not preempt state law- PHI can be released in accordance with the state
which of the following is correct? law requirement for reporting of abuse.
-HIPAA will preempt state law: we need
patient authorization to release any PHI.
-HIPAA will not preempt state law: PHI can
be released in accordance with the state
law requirement for reporting of abuse.
state law requires patient records be release the records within 30 days- HIPAA preempts state law in this situation.
released within 45 days. HIPAA requires
patient records be released within 30 days.
which of the following is correct?
-release the records within 30 days: HIPAA
preempts state law in this situation.
-release the records within 45 days: HIPAA
does not preempt state law in this situation.
HIPAA requires providers comply with a HIPAA (gives the patient more rights over their health information)
patient request to restrict disclosures for
payment purposes if the patient pays for
the service in full. state law allows
providers to deny all requests for
restrictions. which law should be followed?
-HIPAA
-state law
https://quizlet.com/783814891/him-320-exam-2-flash-cards/ 1/8
, 11/5/24, 3:53 AM HIM 320 Exam 2 Flashcards | Quizlet
how long should policies and procedures 6 years.
related to HIPAA be retained?
true/false: policies and procedures related false (it is not specific; says you have to retain it but does not say how)
to HIPAA must be maintained in paper and
electronic format.
HIPAA's privacy rule creates significant understand and control how their health information is used and disclosed.
rights for patient to help them do what?
how it will use and disclose PHI, the policies and procedures it has adopted to
covered entities must inform individuals of
protect the privacy of PHI, and to inform them of their rights with respect to their
what?
PHI.
Bernadette has been denied access to her the requested records are part of a research study in which Bernadette has agreed
health record. which of the following would to suspend the right of access.
be a valid reason to deny Bernadette's
request?
which of the following rights is not required the right to have an advanced directive placed in the record.
to be included and explained in a
provider's notice of privacy practices?
Dr. Hofstadter has denied Amy's request to Dr. Hofstadter must provide Amy with an opportunity to submit a written
amend her health record. According to disagreement.
HIPAA:
Wharton Medical Center just discovered a post the content of the breach on the WMC website for at least 90 days.
breach involving the records of 423
individuals residing in Lafayette, LA. notice
was sent immediately to the patients via
first class mail. twenty of those letters were
returned to WMC for incorrect address.
according to HITECH WMC must:
what was proposed by NPRM to allow access report.
individuals to see who has viewed their
DRS in the previous 3 years. TPO disclosure
would be displayed in this.
what is the unauthorized acquisition, use, or breach.
disclosure of PHI which compromises the
security or privacy of such information?
what imposes obligations on entities when breach notification.
PHI in their custody has been wrongfully
used or disclosed?
policy that ensures the integrity of the retaliation and waiver.
individual's right to complain about alleged
privacy rule violations?
HIPAA is not just about protecting privacy, give patients more control over their health information.
what else does it aim to do?
-right of access
-right to notice of healthcare's privacy practice
-right to request amendment
what are the individual rights of a patient? -right to an accounting of disclosure
-right to request confidential communications of PHI
-right to request restrictions on certain uses and disclosures
-right to file a complaint
https://quizlet.com/783814891/him-320-exam-2-flash-cards/ 2/8
