HIPAA test Questions With Explanations Of Answers Graded A+.

When discussing protected health information with others who are involved in their care you should consider: - correct answer Incidental uses and disclosures, reasonable safeguards, minimum necessary, and verification of the identity and authority of person You may disclose information: - correct answer After the patient has been given an opportunity to object, two people identified by the patient, when it is in the best interest of the patient, and if there is a direct relationship to the person's involvement Taking reasonable safeguards to protect patients privacy includes: - correct answer Not sharing passwords Once a patient or personal representative has signed the patient agreement and acknowledgment Huntsville Hospital: - correct answer Cannot use or disclose that person's PHI as it chooses A restriction to the use or disclosure of PHI is: - correct answer When a patient is granted a restriction to use and disclosure of their PHI When discussing treatment with a patient who is 14 years or older, it is important to remember the: - correct answer Patients privacy rights You can protect a patient privacy when others are with the patient by: - correct answer Asking the patient for permission, when family members or friends are not present, and by asking to talk about their health information for other people or present When a patient complaints about the misuse and/or disclosure of their PHI you should: - correct answer Go to pulse, print the incident/complaint form, complete, submit, and contact the privacy officer immediately You can protect the patient's data privacy when the patient is not present or not able to agree by knowing that: - correct answer The individual you are disclosing too was involved in the patient's care, and your professional judgment it is in the best interest of the patient, and it is an emergency situation and the reason is documented Change jones is admitted to Huntsville Hospital from a local nursing home. She has brought directly to the nursing unit. It is determined that the patient is incompetent and unable to sign the patient agreement and acknowledgment form. Staff should document: - correct answer The reason why signature was not obtained HIPPA allows two reasons for not getting the patient agreement and acknowledgment signed before treatment begins: - correct answer They are emergency situation and communication barrier When a patient or authorize representative signs the patient authorization and acknowledgment form, they must indicate: - correct answer If they wish to be in the directory or not Patients _______ change their facility directory status - correct answer Can All restrictions to PHI must be submitted in: - correct answer Writing Restrictions to PHI will be approved by: - correct answer The privacy officer or designee The notice of privacy practices is presenting to every patient. It tells patients: - correct answer How their information is used in disclosed, advisers patient of their privacy rights, and is offered at registration The minimum necessary role requires you to: - correct answer Use or disclose information only to accomplish the intended purpose, does not apply to the treatment information between providers, and requires you to request only the PHII that is necessary to accomplish your task Those with the need to know to do their job have access to _________ on charts - correct answer Patient data You ___________ have to provide a law-enforcement officer the patient information they request if it does not apply to the minimum necessary rule - correct answer Do not Trash that contains PHI should be placed in: - correct answer A trash receptacle in a secure area PH I should never be taken off campus: - correct answer Unless you have permission Patient protected health information learned at work from staff discussions or the chart may be disclosed with: - correct answer Friends and relatives who have the patient's permission and to staff who have a job-related need to know An email containing confidential information that must be transmitted over the Internet to a destination that is External should be encrypted 1st by: - correct answer Putting the word [encrypt] in the subject line, using square brackets. Or you secure: with a colon And employee should report I suspected privacy or security breach by telling your supervisor or privacy officer: - correct answer Immediately and filling out an incident report If you suspect PHI has been faxed from your machine in error: - correct answer You should alert the recipient, request the confidentiality statement on the cover sheet to be completed and returned, and report the incident immediately to the privacy officer My coworkers spouse notified me that my coworker was recently admitted to the emergency department and won't be coming into work tomorrow. My coworker and I have a great relationship, and I'd like to know how they're doing. May I access the records to check on her condition? - correct answer No, it is not necessary for my job, so I would be violating the patients privacy by accessing her records. I should contact her husband to check on her condition A young patient in your care went into cardiac arrest and was not able to be resuscitated. you feel upset, stressed, and overwhelmed with this loss of precious life. You want to share this experience in your thoughts and feelings with your family and friends on Facebook. What must you consider before doing this? - correct answer You cannot post anything on Facebook. I called a patient's phone number and left a voicemail for Mr. John Smith to contact Huntsville Hospital health system regarding his scheduled thyroid surgery. What is this A privacy breach? - correct answer Yes, I stated his name and medical procedure As part of my job, are used a HH issued laptop for my work at various health system sites. I have patient emails, addresses, and medical information on the laptop. What is the best way to protect this device? - correct answer The information on my portable device is encrypted, or use a complex password, and I physically secure the device when leaving it unattended Sanctions for violating the data privacy and security policies include: - correct answer Greater penalties, including larger fines and potential litigation, termination, sued, loss of your license, and be reported to the office of civil rights Technical safeguards used at Huntsville Hospital include: - correct answer Unique individual passwords, audits of the individuals who access PHI, and virus protection software What does minimum necessary mean? - correct answer They work force members access to PHI is limited to only what is needed to perform his/her responsibilities and request for an disclosures of PHI are limited to what is needed to perform the task H IPAA is: - correct answer A federal law which focuses on patient privacy and confidentiality The following are ways to protect PHR that is printed includes: - correct answer Avoid leaving PHI on your desk, unattended, double check when handing PHI2 patients, check boxes, printers, and copiers to make sure PHI is not left unattended, and use the approved organization fax sheet, that has a confidentiality statement when faxing PHI You _______ share your password with anyone - correct answer Cannot