6/15/25, 11:14 AM CDEO - Chapter 2
CDEO CHAPTER 2 \COMPLETE QUESTIONS AND
ACCURATE ANSWERS \ ACTUAL EXAM 2025 -2026
\LATEST UPDATE
Under , electronic HIPAA
transactions must
use the adopted standard
and adhere to the content
and format requirements of
ASC X12N or NCPDP
(used for certain
pharmacy transactions) for
each
transaction. An additional
rule was adopted to
standardize the code sets
for diagnoses and
procedures. These code
sets include: HCPCS
(Healthcare Common
Procedure Coding
System—ancillary services
and
procedures); CPT® (Current
Procedural Terminology—
physician's procedures);
CDT® (Current Dental
Terminology—dental
procedures); ICD-9
(International
Classification of Diseases-9th
revision— diagnosis and
inpatient hospital
procedures); ICD-10
(International
Classification of Diseases-
10th Revision, which
1/93
,6/15/25, 11:14 AM CDEO - Chapter 2
replaced ICD-9 on October
1, 2015); and NDC
(National Drug Codes).
In addition to the unique identifier
standardization of the
codes used to request
payment for
medical services, a for
employers and
providers must be used on all
transactions.
_ _ perform certain functions Business associates
or activities,
which involve the use or
disclosure of
individually identifiable
health information, on
behalf of another person
or
organization, without being
a member of the entity's
workforce. These services
include claims processing or
administration, data
analysis, utilization review,
billing, benefit
management, and re-
pricing.
2/93
,6/15/25, 11:14 AM CDEO - Chapter 2
_ _ associate services to a Business
covered entity
are limited to legal, actuarial,
accounting,
consulting, data aggregation,
management, administrative,
accreditation, or financial
services.
To be considered a business protected health information
associate, the persons or
organizations would involve
the use or disclosure of
_______________ between
the two
parties.
A covered entity be a can
business
associate of another covered
entity.
HITECH Health Information Technology for Economic and Clinical Health
Act
3/93
, 6/15/25, 11:14 AM CDEO - Chapter 2
The _ enacted as part of the HITECH
American
Recovery and Reinvestment
Act (ARRA) of 2009, also
specifies that an
organization
that provides data
transmission of PHI to a
covered entity and that
requires access to PHI
routinely, such as a Health
Information Exchange
Organization, will be treated
as a business associate.
A __ is required between contract
business
associates to impose specified
written
safeguards on the individually
identifiable
health information used or
disclosed by the business
associate. It must describe
the
permitted and required uses
of protected health
information by the business
associate, limit the business
associate from using or
further disclosing the
protected
health information (except
where permitted by
contract or required by law), and require the business associate
to follow
appropriate safeguards to prevent use or disclosure of
the protected health information, except as expressly
defined in the contract.
4/93
CDEO CHAPTER 2 \COMPLETE QUESTIONS AND
ACCURATE ANSWERS \ ACTUAL EXAM 2025 -2026
\LATEST UPDATE
Under , electronic HIPAA
transactions must
use the adopted standard
and adhere to the content
and format requirements of
ASC X12N or NCPDP
(used for certain
pharmacy transactions) for
each
transaction. An additional
rule was adopted to
standardize the code sets
for diagnoses and
procedures. These code
sets include: HCPCS
(Healthcare Common
Procedure Coding
System—ancillary services
and
procedures); CPT® (Current
Procedural Terminology—
physician's procedures);
CDT® (Current Dental
Terminology—dental
procedures); ICD-9
(International
Classification of Diseases-9th
revision— diagnosis and
inpatient hospital
procedures); ICD-10
(International
Classification of Diseases-
10th Revision, which
1/93
,6/15/25, 11:14 AM CDEO - Chapter 2
replaced ICD-9 on October
1, 2015); and NDC
(National Drug Codes).
In addition to the unique identifier
standardization of the
codes used to request
payment for
medical services, a for
employers and
providers must be used on all
transactions.
_ _ perform certain functions Business associates
or activities,
which involve the use or
disclosure of
individually identifiable
health information, on
behalf of another person
or
organization, without being
a member of the entity's
workforce. These services
include claims processing or
administration, data
analysis, utilization review,
billing, benefit
management, and re-
pricing.
2/93
,6/15/25, 11:14 AM CDEO - Chapter 2
_ _ associate services to a Business
covered entity
are limited to legal, actuarial,
accounting,
consulting, data aggregation,
management, administrative,
accreditation, or financial
services.
To be considered a business protected health information
associate, the persons or
organizations would involve
the use or disclosure of
_______________ between
the two
parties.
A covered entity be a can
business
associate of another covered
entity.
HITECH Health Information Technology for Economic and Clinical Health
Act
3/93
, 6/15/25, 11:14 AM CDEO - Chapter 2
The _ enacted as part of the HITECH
American
Recovery and Reinvestment
Act (ARRA) of 2009, also
specifies that an
organization
that provides data
transmission of PHI to a
covered entity and that
requires access to PHI
routinely, such as a Health
Information Exchange
Organization, will be treated
as a business associate.
A __ is required between contract
business
associates to impose specified
written
safeguards on the individually
identifiable
health information used or
disclosed by the business
associate. It must describe
the
permitted and required uses
of protected health
information by the business
associate, limit the business
associate from using or
further disclosing the
protected
health information (except
where permitted by
contract or required by law), and require the business associate
to follow
appropriate safeguards to prevent use or disclosure of
the protected health information, except as expressly
defined in the contract.
4/93
