HIPAA and Privacy Act Training Exam Questions and Answers Already Passed
Which HHS Office is charged with protecting an individual patient's health information privacy and
security through the enforcement of HIPAA?
Office of Medicare Hearings and Appeals (OMHA)
Office for Civil Rights (OCR)
Office of the National Coordinator for Health Information Technology (ONC)
None of the above - Answers Office for Civil Rights (OCR)
Which of the following are examples of personally identifiable information (PII)?
Social Security number
Home address
Telephone
All of the above - Answers All of the above
Which of the following are categories for punishing violations of federal health care laws?
Criminal penalties
Civil money penalties
Sanctions
All of the above - Answers
A breach as defined by the DoD is broader than a HIPAA breach (or breach defined by HHS).
True
False - Answers T
Under HIPAA, a covered entity (CE) is defined as:
, A health plan
A health care clearinghouse
A health care provider engaged in standard electronic transactions covered by HIPAA
All of the above - Answers
The HIPAA Security Rule applies to which of the following:
PHI transmitted orally
PHI on paper
PHI transmitted electronically
All of the above - Answers PHI transmitted electronically
The minimum necessary standard:
Limits uses, disclosures, and requests for PHI to the minimum necessary amount of PHI needed to carry
out the intended purposes of the use or disclosure
Does not apply to exchanges between providers treating a patient
Does not apply to uses or disclosures made to the individual or pursuant to the individual's
authorization
All of the above - Answers All of the above
Technical safeguards are:
Administrative actions, and policies and procedures that are used to manage the selection,
development, implementation and maintenance of security measures to protect electronic PHI (ePHI).
These safeguards also outline how to manage the conduct of the workforce in relation to the protection
of ePHI
Which HHS Office is charged with protecting an individual patient's health information privacy and
security through the enforcement of HIPAA?
Office of Medicare Hearings and Appeals (OMHA)
Office for Civil Rights (OCR)
Office of the National Coordinator for Health Information Technology (ONC)
None of the above - Answers Office for Civil Rights (OCR)
Which of the following are examples of personally identifiable information (PII)?
Social Security number
Home address
Telephone
All of the above - Answers All of the above
Which of the following are categories for punishing violations of federal health care laws?
Criminal penalties
Civil money penalties
Sanctions
All of the above - Answers
A breach as defined by the DoD is broader than a HIPAA breach (or breach defined by HHS).
True
False - Answers T
Under HIPAA, a covered entity (CE) is defined as:
, A health plan
A health care clearinghouse
A health care provider engaged in standard electronic transactions covered by HIPAA
All of the above - Answers
The HIPAA Security Rule applies to which of the following:
PHI transmitted orally
PHI on paper
PHI transmitted electronically
All of the above - Answers PHI transmitted electronically
The minimum necessary standard:
Limits uses, disclosures, and requests for PHI to the minimum necessary amount of PHI needed to carry
out the intended purposes of the use or disclosure
Does not apply to exchanges between providers treating a patient
Does not apply to uses or disclosures made to the individual or pursuant to the individual's
authorization
All of the above - Answers All of the above
Technical safeguards are:
Administrative actions, and policies and procedures that are used to manage the selection,
development, implementation and maintenance of security measures to protect electronic PHI (ePHI).
These safeguards also outline how to manage the conduct of the workforce in relation to the protection
of ePHI
