ATI Skills Module 3.0 - HIPAA

A newly hired nurse is reviewing information about the HIPAA privacy rule during facility orientation. Which of the following statements by the nurse indicates an understanding of the privacy rule? "Clients do not have the right to read their charts." "I can read the charts of other clients on my floor." "I will expect a list of clients and their admitting diagnoses to be posted on my unit." "I can give information about a client over the phone if the client gives permission."

"I can give information about a client over the phone if the client gives permission."

A nurse is teaching a newly licensed nurse about using a computer to document in a client's health record. Which of the following statements by the newly licensed nurse indicates an understanding of the teaching? "I should share my computer password with the nurse orienting care." "I should remain aware of my surroundings when documenting in the computer." "I can step away from the computer for a short time if I am logged on and no one is around." "I can review the health records of other clients on the unit not assigned to me."

"I should remain aware of my surroundings when documenting in the computer."

A nurse in a pediatrician's office is speaking on the telephone with a guardian of a school-age child who will become a new client at the office. The nurse should instruct the guardian to call the child's previous provider's office to request which of the following? The guardian be allowed to take the child's medical records and make photocopies for the new pediatrician's office. The child's original medical records be given to the new pediatrician's office. A form authorizing release of copies of the child's medical records to be signed by the guardian. A form authorizing release of the child's medical records to be signed by the new pediatrician and sent back to the previous provider.

A form authorizing release of copies of the child's medical records to be signed by the guardian.

Which of the following actions should the nurse take after witnessing a breach of a client's confidentiality in a provider's office? Complete a health information privacy complaint form. Anonymously notify the proper governmental agency. Notify the client and ask them to complete a health information privacy complaint form. Inform the provider that a formal complaint will be submitted if another breach is committed.

Complete a health information privacy complaint form.

A nurse in the emergency department is caring for a client following a motor vehicle crash. The client is unresponsive and the client's spouse is not present at the facility. Which of the following actions should the nurse take to assist with obtaining consent for the client's surgery? Ask the facility's Privacy Officer to witness the informed consent to document. Inform the client's friends that are present about the surgery and obtain group consent. Ask the nursing supervisor to provide implied emergency consent. Inform the provider of the spouse's contact information so consent can be obtained over the phone.

Inform the provider of the spouse's contact information so consent can be obtained over the phone.

A client tells a nurse that they feel their privacy has been violated and wants to file a formal complaint with someone other than the medical facility. Through which of the following agencies should the nurse instruct the client to file the complaint? Occupational Safety and Health Administration (OSHA) The Joint Commission Office for Civil Rights (OCR) Privacy and Civil Liberties Office

Office for Civil Rights (OCR)

A group of nurses on a clinical unit are planning to research the incidence of falls among clients following joint replacement surgery. Which of the following actions should the nurse take to ensure the study complies with the HIPAA privacy rule? Contact the medical record department to obtain permission to access clients' charts. Submit their proposal to the institutional review board for review and describe how they will de-identify client information. Notify the clients who will be included in the study to submit a written request if they choose not to participate. Obtain permission form from the risk management department to gain access to incident reports that were filed due to clients' falls.

Submit their proposal to the institutional review board for review and describe how they will de-identify client information

Which of the following methods of information exchange can occur without client authorization? Walking rounds that involve two nurses discussing an assigned client at the client's bedside in a private room. Recording shift report on a device for all oncoming staff to access information about all clients on the unit. Talking about a client's information during a staff in-service with all levels of unit staff present. Providing an employer with confirmation that their employee is currently being treated in the facility.

Walking rounds that involve two nurses discussing an assigned client at the client's bedside in a private room.