HCCA CHPC EXAM PREP QUESTIONS AND
SOLUTIONS FULL STUDY SHEET
PROFESSIONAL REVIEW RESOURCE
GRADED A+
⩥ What is Limited data set?.
Answer: CE may use or disclose a
limited data set if the CE enters into a data use agreement with the
following direct identifiers
of the individual or of relatives, employers, or
household members of the individual:
• Names;
• Postal address information, other than town or
city, state, and zip code;
• Telephone numbers;
• Fax numbers;
• Electronic mail addresses;
• Social security numbers;
• Medical record numbers;
• Health plan beneficiary numbers;
• Account numbers;
• Certificate/license numbers;
,• Vehicle identifiers/serial numbers or license
plate numbers;
• Device identifiers and serial numbers;
• Web Universal Resource Locators (URLs);
• Internet Protocol (IP) address numbers;
• Biometric identifiers, including finger and voice
prints; and
• Full face photographic images and any
comparable images.
⩥ What is Re-identification?.
Answer: CE may assign a number for re-identification; however, the
creation of the numbering system should not be based on the information
and the CE is forbidden from disclosing the e-identification scheme.
⩥ What is Unsecured PHI?.
Answer: "PHI that is not secured by a technology standard that renders
protected health information unusable, unreadable, or indecipherable to
unauthorized individuals and is
developed or endorsed by a standards developing organization that is
accredited by the American National Standards Institute
⩥ Use & Disclosure (U&D), and Authorization.
, Answer: ...
⩥ Mandated Disclosures.
Answer: - to the individual who is the subject of the information (or their
legal representative), and to - the Secretary of Health and Human
Services.
⩥ What is the one exception to releasing information.
Answer: provider has determined that the information might cause harm
to the individual who is the subject of the information (164.524(a))
⩥ Use.
Answer: employment of information internally in an organization. This
is interpreted to mean either inside the legal boundary of an entity or
inside the HIPAA CE functions of a hybrid entity
⩥ Disclosure.
Answer: when information leaves the boundary of the legal entity or
when it leaves the HIPAA CE functions in a hybrid entity
⩥ What Rule changed the requirement that you track a disclosure as part
of the TPO relationship..
Answer: HITECH
SOLUTIONS FULL STUDY SHEET
PROFESSIONAL REVIEW RESOURCE
GRADED A+
⩥ What is Limited data set?.
Answer: CE may use or disclose a
limited data set if the CE enters into a data use agreement with the
following direct identifiers
of the individual or of relatives, employers, or
household members of the individual:
• Names;
• Postal address information, other than town or
city, state, and zip code;
• Telephone numbers;
• Fax numbers;
• Electronic mail addresses;
• Social security numbers;
• Medical record numbers;
• Health plan beneficiary numbers;
• Account numbers;
• Certificate/license numbers;
,• Vehicle identifiers/serial numbers or license
plate numbers;
• Device identifiers and serial numbers;
• Web Universal Resource Locators (URLs);
• Internet Protocol (IP) address numbers;
• Biometric identifiers, including finger and voice
prints; and
• Full face photographic images and any
comparable images.
⩥ What is Re-identification?.
Answer: CE may assign a number for re-identification; however, the
creation of the numbering system should not be based on the information
and the CE is forbidden from disclosing the e-identification scheme.
⩥ What is Unsecured PHI?.
Answer: "PHI that is not secured by a technology standard that renders
protected health information unusable, unreadable, or indecipherable to
unauthorized individuals and is
developed or endorsed by a standards developing organization that is
accredited by the American National Standards Institute
⩥ Use & Disclosure (U&D), and Authorization.
, Answer: ...
⩥ Mandated Disclosures.
Answer: - to the individual who is the subject of the information (or their
legal representative), and to - the Secretary of Health and Human
Services.
⩥ What is the one exception to releasing information.
Answer: provider has determined that the information might cause harm
to the individual who is the subject of the information (164.524(a))
⩥ Use.
Answer: employment of information internally in an organization. This
is interpreted to mean either inside the legal boundary of an entity or
inside the HIPAA CE functions of a hybrid entity
⩥ Disclosure.
Answer: when information leaves the boundary of the legal entity or
when it leaves the HIPAA CE functions in a hybrid entity
⩥ What Rule changed the requirement that you track a disclosure as part
of the TPO relationship..
Answer: HITECH
