HIPAA Training

PCI Compliance refers to:

- commitment to compliance with the Payment Card Industry Data Security Standards - commitment to protecting cardholder data that we obtain from our patients and other third parties in the ordinary course of our business - commitment to safeguarding exposure to credit card information in electronic or paper format ALL OF THE ABOVE

Which of the following is NOT an example of PHI?

A report containing the number of HIV cases in the state of TN.

PCI Compliance refers to:

All of the Above

Which of the following refer to email phishing security concerns?

Attempted attacks using methods such as emails that request recipients to update or to verify their personal and financial information but which appear to come from a legitimate source, such as a bank, online retailer, or shipping company. Attempted attacks which may include viruses embedded in attachments or accessed via web links contained in the emails which could adversely impact systems and applications in an effort to gain access to a company's network.

Where do you need to exercise caution when talking about patients?

In the cafeteria, in the hospital halls, at the nurse's desk - all of the above

If a patient wants to request a restriction on the disclosure of their PHI:

It must be in writing.

In which cases can a healthcare provider legally share patient information without the patient's consent?

Judicial proceedings Identification of a dead body

Which of the following is an example of a good precaution to protect patient information?

Locking paper records and setting computer passwords Not using patients' names in public areas Taking the family aside and speaking quietly when discussing a patient's state

HIPAA provides standards governing which aspects of a patient's PHI?

Privacy and security

What is PHI?

Protected Health Information

Under the American Recovery and Reinvestment Act (ARRA), when a suspected breach of PHI has been confirmed, a hospital must report the violation to:

The U.S. Department of Health and Human Services

I have loaded the company software to my personal smartphone so that I am able to access my work email account from my telephone. Which is true because I use my personal smartphone for work purposes?

The company can and does conduct regular audits of all personal devices to which company applications have been installed.

PHI includes which of the following?

The patient's diagnosis

Billing information is protected under HIPAA.

True

In which cases can a facility legally share patient information?

When making a legally mandated report or disclosure When working with other members of a patient's healthcare team to determine best treatment options

What is the most serious consequence for intentionally breaching PHI security?

You can lose your license

As a healthcare worker, you are permitted to access the medical record of which individual?

Your patient

When you discover that a breach in PHI security has occurred, to whom should you report it?

Your supervisor and the facility privacy officer

I don't need a business associate agreement for:

Contracted employees such as a respiratory therapist who perform a substantial portion of their work at my facility My employees My cleaning service

What does the minimum necessary rule mean?

Employees only look at health information necessary to do their job.

Which of the following methods ensures that PHI included in an email remains secure?

Encrypting your work email by putting "PRIVATE" in the subject line before you transmit your email

It is permissible to store PHI on portable media such as a flash drive as long as the media doesn't leave your work environment.

False

PHI can ONLY be given out after obtaining written authorization.

False

PHI in written or verbal form is considered secure.

False