HIM 320 TEST 1 - CLASS PRACTICE
QUESTIONS COMPLETE WITH CORRECT
ANSWERS
\.Staff at Community Hospital, a 200-bed facility, has been busy with HIPAA Privacy Rule issues
recently. Community Hospital is regularly surveyed by the city safety department for compliance
with local codes related to issues such as fire and water safety. Community Hospital's privacy
officer has issued an unsigned business associate agreement to the department of health,
instructing the chief of its survey office to sign it because its surveyors, who may come into
contact with Community Hospital's PHI, function as business associates. Has Community
Hospital's privacy officer correctly interpreted the Privacy Rule?
A) Yes, due to the fact that employees of the department of health will have contact with
Community Hospital's PHI
B) Yes, due to the fact that the department of health may subcontract with others who access
Community Hospital's PHI
C) No, since the department of health is not using Community Hospital's - ANSWERS✔-C) No,
since the department of health is not using Community Hospital's PHI in their determination of
compliance with local codes
\.Recently, the hospital's emergency room staff has informed the privacy officer that patients'
family members have been bringing cameras into the emergency room to photograph
treatment as it is occurring. The privacy officer instructs emergency room staff to log the names
of individuals who are taking the pictures. He then sends letters to the family members,
notifying them that they have committed a HIPAA violation and their names may be turned over
to the Office for Civil Rights for investigation. Has Community Hospital's privacy officer correctly
interpreted the Privacy Rule?
, A) Yes, family members of patients are considered members of the CE's workforce once they
photograph/video care in the ER
B) Yes, since the photographs and/or videos may present a malpractice risk for the facility
C) No, since the hospital is considered part of an organized healthcare arrangement
D) No, since the family members of patient - ANSWERS✔-D) No, since the family members of
patients are not considered covered entities or members of their workforce
\.Elderly patients are frequently discharged from the hospital to local nursing homes for skilled
rehabilitation following orthopedic issues such as hip fractures and many types of surgeries.
Staff on the units from which patients have been discharged have routinely copied the entire
patient chart to accompany the patient to the nursing home, but the privacy officer informed
them that this is a violation of the HIPAA Privacy Rule. Has Community Hospital's privacy officer
correctly interpreted the Privacy Rule?
A) Yes, the hospital must apply the minimum necessary rule when releasing the records to long
term care facilities
B) Yes, release to long-term care facilities without patient authorization is a direct violation of
the Privacy Rule
C) No, the entire record may be released for treatment of the patient in the long-term care
facility
D) No, the entire record may be released if authorized by the attending physicia - ANSWERS✔-C)
No, the entire record may be released for treatment of the patient in the long-term care facility
\.True or False:
HITECH Act of ARRA made significant changes to the HIPAA Privacy Rule. - ANSWERS✔-True
\.True or False:
QUESTIONS COMPLETE WITH CORRECT
ANSWERS
\.Staff at Community Hospital, a 200-bed facility, has been busy with HIPAA Privacy Rule issues
recently. Community Hospital is regularly surveyed by the city safety department for compliance
with local codes related to issues such as fire and water safety. Community Hospital's privacy
officer has issued an unsigned business associate agreement to the department of health,
instructing the chief of its survey office to sign it because its surveyors, who may come into
contact with Community Hospital's PHI, function as business associates. Has Community
Hospital's privacy officer correctly interpreted the Privacy Rule?
A) Yes, due to the fact that employees of the department of health will have contact with
Community Hospital's PHI
B) Yes, due to the fact that the department of health may subcontract with others who access
Community Hospital's PHI
C) No, since the department of health is not using Community Hospital's - ANSWERS✔-C) No,
since the department of health is not using Community Hospital's PHI in their determination of
compliance with local codes
\.Recently, the hospital's emergency room staff has informed the privacy officer that patients'
family members have been bringing cameras into the emergency room to photograph
treatment as it is occurring. The privacy officer instructs emergency room staff to log the names
of individuals who are taking the pictures. He then sends letters to the family members,
notifying them that they have committed a HIPAA violation and their names may be turned over
to the Office for Civil Rights for investigation. Has Community Hospital's privacy officer correctly
interpreted the Privacy Rule?
, A) Yes, family members of patients are considered members of the CE's workforce once they
photograph/video care in the ER
B) Yes, since the photographs and/or videos may present a malpractice risk for the facility
C) No, since the hospital is considered part of an organized healthcare arrangement
D) No, since the family members of patient - ANSWERS✔-D) No, since the family members of
patients are not considered covered entities or members of their workforce
\.Elderly patients are frequently discharged from the hospital to local nursing homes for skilled
rehabilitation following orthopedic issues such as hip fractures and many types of surgeries.
Staff on the units from which patients have been discharged have routinely copied the entire
patient chart to accompany the patient to the nursing home, but the privacy officer informed
them that this is a violation of the HIPAA Privacy Rule. Has Community Hospital's privacy officer
correctly interpreted the Privacy Rule?
A) Yes, the hospital must apply the minimum necessary rule when releasing the records to long
term care facilities
B) Yes, release to long-term care facilities without patient authorization is a direct violation of
the Privacy Rule
C) No, the entire record may be released for treatment of the patient in the long-term care
facility
D) No, the entire record may be released if authorized by the attending physicia - ANSWERS✔-C)
No, the entire record may be released for treatment of the patient in the long-term care facility
\.True or False:
HITECH Act of ARRA made significant changes to the HIPAA Privacy Rule. - ANSWERS✔-True
\.True or False:
