HIPAA Guidelines for Clinical Practice

16. While visiting his mother, Mrs. Jones' son, a laboratory technician, notices that the hospital has an electronic health record system. He recognizes the software program and wants to see how it works. He sits down at an open computer and begins to look at the program. The nurse should:

Ask him to close the program

2. Under the HIPAA privacy rule, it is illegal to:

Fail to adequately protect health information from release

15. Health Care Operations are described in the Notice of Private Practices (NPP).

False

17. An individual who wishes to file a complaint concerning a violation of privacy may:

File the complaint with the Federal Government & File the complaint with the healthcare agency

19. If I forget to give a Notice of Privacy Practices (NPP) to a patient:

I have to mail it on the date of service and document my actions

13. The Notice of Privacy Practices informs patients of their right to:

Inspect their medical records, Request amendments to their medical records, & View a list of disclosures of their medical information

10. Which of the following is a prodedure that protects the confidentiality of patient information?

Medical record file cabinets and file room doors are kept locked, Passwords to access computerized medical records are not shared, & There are rules that prohibit employees from looking at records unless they have a need to know the information

20. My practice can respond to a request to amend a record:

Only if deemed to affect a patient's care

7. Privacy regulations cover use of disclosure of personal health information in the following format:

Oral communication, Written communication, & Electronic communication

12. If you suspect a fellow employee of violating privacy policies, you should:

Report your suspicions to your supervisor

4. Patients have a right to:

Request an accounting for disclosures of their protected health information (PHI)

3. Healthcare agencies must have policies that provide guidelines for:

Training requirements & Penalties for not complying with the privacy requirements

1. Each healthcare agency and provider must have policies and procedures for maintaining the privacy of Protected Health Information (PHI).

True

11. It is the duty of every healthcare provider and agency to protect the confidentiality and privacy of patient healthcare information.

True

14. Knowingly releasing patient information can result in civil and/or criminal sanctions including fines and jail time.

True

5. Health care operations are defined as activities considered in support of treatment and payment for which protected health information could be used or disclosed without individual authorizations.

True

6. "Minimum Necessary" means, when protected health information is used, disclosed, or requested, reasonable efforts must be taken to determine how much information will be sufficient to serve the intended purpose.

True

8. It is important to remember that you should never discuss patient information with anyone unless it is for an approved purpose.

True

9. It is important that patients understand how their healthcare providers and insurer protect their information.

True

18. Mrs. White's daughter is assisting her mother in maintaining a personal health record. She asks the record department of the hospital for copies of important documents from her mother's medical records. Is the hospital allowed to release this information to Mrs. White's daughter?

Yes, but only if Mrs. White signs an authorization