CMAA Chapter 4- Compliance Exam
Questions and Answers 100% Pass
When was HIPPA enacted - ✔✔1996
HIPAA guidelines - ✔✔national standards to protect PHI
patient control over medical records
informed choices about PHI
boundaries on use of record
safeguards to protect heath information
complaint sign-in sheet - ✔✔one patient at a time
conceals other patients
pressure- sensitive stickers
privacy rule - ✔✔PHI about specific patient
record belongs to provider
right to adequate notice of PHI use
100% Pass Guarantee Olivia West, All Rights Reserved © 2025 1
,notice of privacy practices - ✔✔how facility uses PHI
duties of provider in protecting PHI
patients rights of PHI
how patient can file report
whom to contact at facility
effective date
documentation - ✔✔ask patient to sign
acknowledges understanding
most patients sign
note refusals in record
due diligence by office
good faith effort
covered entities - ✔✔health plans
health care clearinghouses
providers that transit electronic info
noncovered entities - ✔✔do not comply with Privacy Rule
100% Pass Guarantee Olivia West, All Rights Reserved © 2025 2
, use, collect, access, disclose
researchers - ✔✔privacy rule doesn't apply
some are covered entities
may need supporting documentation
PHI restrictions- patient requests in writing - ✔✔form for requests
complete within 30 days
Restrictions to PHI - ✔✔provider can decline
must review
give justification
appeal process to place
HIPAA restricts access - ✔✔psychotherapy notes
info for legal proceedings
exempted from disclosure by CLIA
Disclosing Info - ✔✔covers treatment, payment and operation
receipt of signed document
document posted prominently
100% Pass Guarantee Olivia West, All Rights Reserved © 2025 3
Questions and Answers 100% Pass
When was HIPPA enacted - ✔✔1996
HIPAA guidelines - ✔✔national standards to protect PHI
patient control over medical records
informed choices about PHI
boundaries on use of record
safeguards to protect heath information
complaint sign-in sheet - ✔✔one patient at a time
conceals other patients
pressure- sensitive stickers
privacy rule - ✔✔PHI about specific patient
record belongs to provider
right to adequate notice of PHI use
100% Pass Guarantee Olivia West, All Rights Reserved © 2025 1
,notice of privacy practices - ✔✔how facility uses PHI
duties of provider in protecting PHI
patients rights of PHI
how patient can file report
whom to contact at facility
effective date
documentation - ✔✔ask patient to sign
acknowledges understanding
most patients sign
note refusals in record
due diligence by office
good faith effort
covered entities - ✔✔health plans
health care clearinghouses
providers that transit electronic info
noncovered entities - ✔✔do not comply with Privacy Rule
100% Pass Guarantee Olivia West, All Rights Reserved © 2025 2
, use, collect, access, disclose
researchers - ✔✔privacy rule doesn't apply
some are covered entities
may need supporting documentation
PHI restrictions- patient requests in writing - ✔✔form for requests
complete within 30 days
Restrictions to PHI - ✔✔provider can decline
must review
give justification
appeal process to place
HIPAA restricts access - ✔✔psychotherapy notes
info for legal proceedings
exempted from disclosure by CLIA
Disclosing Info - ✔✔covers treatment, payment and operation
receipt of signed document
document posted prominently
100% Pass Guarantee Olivia West, All Rights Reserved © 2025 3
