HCCA - CHCP: Breach Notification QUESTIONS WITH COMPLETE SOLUTIONS

Which rule requires HHS to issue interim final regulations for breach notification? correct answer: - Health Information Technology for Economic and Clinical Health (HITECH) Act as Title XIII of Division A and Title IV of Division B of the American Recovery and Reinvestment Act of 2009 (ARRA) (Pub. L. 111-5). Subtitle D of the HITECH Act (the Act), entitled ''Privacy,'' among other provisions Which government agency handles Personal Health Records (PHR)? correct answer: FTC Access correct answer: ability or means necessary to read, write, modify, communicate, or otherwise use data/information. Authorized Person correct answer: individual authorized by the entity or the entity's Business Associate to acquire, access, or use Protected Health Information ("PHI") that is within the individual's scope of employment Limited Data Set. correct answer: PHI that excludes 16 specific identifiers as defined in the HIPAA Privacy Rule, but includes: - zip codes - geographical codes - dates of birth - other date information - any other code. Organized Healthcare Arrangement correct answer: A clinically integrated care setting in which individuals typically receive health care from more than one provider Unauthorized correct answer: An impermissible use or disclosure of PHI under the HIPAA Privacy Rule Unauthorized Access correct answer: inappropriate viewing of a patient's medical or financial information without a direct need for diagnosis, treatment, payment, or other lawful use. Unsecured Protected Health Information correct answer: PHI that is not secured through the use of a technology or methodology that renders PHI "unusable, unreadable, or indecipherable to unauthorized" - encryption _ destruction