HIT 101 EXAM III QUESTIONS WITH 100% PASSED
ANSWERS.
True or false. In all cases, a covered entity may deny an individual's request to
restrict the use or disclosure of his or her PHI. Answer - False
True or false. A notice of privacy practices should include a statement
explaining that individuals may complain to the Secretary of the Department of
Health and Human Services if they believe that their privacy rights have been
violated. Answer - True
What types of health records are subject to the HIPAA Privacy Rule? Answer -
Health records in any format
What does the acronym PHI stand for? Answer - Protected Health Information
Which of the following statements is true of the notice of privacy practices?
Answer - It must be provided to every individual at the first time of contact or
service with the covered entity.
Mary's PHI was breached by her physician office when it was disclosed in error
to another patient. Which of the following breach notification statements is
correct regarding the physician office's required action? Answer - It must
report the breach to HHS within 60 days after the end of the calendar year in
which the breach occurred
ANSWERS.
True or false. In all cases, a covered entity may deny an individual's request to
restrict the use or disclosure of his or her PHI. Answer - False
True or false. A notice of privacy practices should include a statement
explaining that individuals may complain to the Secretary of the Department of
Health and Human Services if they believe that their privacy rights have been
violated. Answer - True
What types of health records are subject to the HIPAA Privacy Rule? Answer -
Health records in any format
What does the acronym PHI stand for? Answer - Protected Health Information
Which of the following statements is true of the notice of privacy practices?
Answer - It must be provided to every individual at the first time of contact or
service with the covered entity.
Mary's PHI was breached by her physician office when it was disclosed in error
to another patient. Which of the following breach notification statements is
correct regarding the physician office's required action? Answer - It must
report the breach to HHS within 60 days after the end of the calendar year in
which the breach occurred
