JKO HIPAA and Privacy Act Training
(1.5 hrs) Questions and Answers |
Latest Version | 2025/2026 | Correct &
Verified
The "minimum necessary" rule under HIPAA means:
A) Share all available PHI at once
✔✔B) Disclose only the least amount of PHI needed to accomplish a purpose
C) Share PHI only with family members
D) Never share PHI at all
Under HIPAA, who is considered a covered entity?
A) A retail clothing store
✔✔B) A health plan provider
C) A construction company
D) A library
Which of the following is an example of a physical safeguard?
A) Password protection
1
,✔✔B) Locked filing cabinets
C) Data encryption
D) Employee training
The Privacy Act applies to:
A) Private companies only
✔✔B) Federal agencies maintaining systems of records
C) Only state governments
D) Only non-profits
If a patient requests a copy of their health records, what should you do?
A) Deny the request
✔✔B) Provide access within the required timeframe
C) Sell the records
D) Post them online
Which is NOT considered PHI?
A) A patient’s lab test results
2
, ✔✔B) A car license plate
C) A prescription history
D) A medical billing statement
HIPAA violations can result in:
A) Extra vacation days
✔✔B) Civil and criminal penalties
C) Free training rewards
D) No disciplinary action
What does HIPAA primarily protect?
A) Credit scores
✔✔B) Health information
C) Employment history
D) Tax records
Which of the following is considered Protected Health Information (PHI)?
A) A person’s favorite color
3
(1.5 hrs) Questions and Answers |
Latest Version | 2025/2026 | Correct &
Verified
The "minimum necessary" rule under HIPAA means:
A) Share all available PHI at once
✔✔B) Disclose only the least amount of PHI needed to accomplish a purpose
C) Share PHI only with family members
D) Never share PHI at all
Under HIPAA, who is considered a covered entity?
A) A retail clothing store
✔✔B) A health plan provider
C) A construction company
D) A library
Which of the following is an example of a physical safeguard?
A) Password protection
1
,✔✔B) Locked filing cabinets
C) Data encryption
D) Employee training
The Privacy Act applies to:
A) Private companies only
✔✔B) Federal agencies maintaining systems of records
C) Only state governments
D) Only non-profits
If a patient requests a copy of their health records, what should you do?
A) Deny the request
✔✔B) Provide access within the required timeframe
C) Sell the records
D) Post them online
Which is NOT considered PHI?
A) A patient’s lab test results
2
, ✔✔B) A car license plate
C) A prescription history
D) A medical billing statement
HIPAA violations can result in:
A) Extra vacation days
✔✔B) Civil and criminal penalties
C) Free training rewards
D) No disciplinary action
What does HIPAA primarily protect?
A) Credit scores
✔✔B) Health information
C) Employment history
D) Tax records
Which of the following is considered Protected Health Information (PHI)?
A) A person’s favorite color
3
