HIPAA QUIZ

HIPPA Privacy Rule requires health care insitutions to:

take reasonable steps to limit the use or disclosure of protected health information.

A Covered entity must inform the client if:

there is a breach causing unlawful disclosure of PHI

Clients may restrict disclosure of PHI when:

paying for services out of pocket.

Do not leave PHI where it can be access by:

unauthorized individuals.

Anyone can visit if

no visiting restrictions.

1. A newly hired nurse is reviewing information about the HIPAA privacy rule during facility orientation. Which of the following statements by the nurse indicates an understanding of the privacy rule?

"I can give information about a client over the phone if the client gives permission."

Maximum penalty for a single violation

50,000 per record and up to one year in jail.

DO NOT SHARE OR USE ANOTHER EMPLOYEE'S

EMR LOGIN

A nurse is teaching a newly licensed nurse about using a computer to document in a client's health record. Which of the following statements by the newly licensed nurse indicates an understanding of the teaching?

"I should remain aware of my surroundings when documenting in the computer."

Disclosure is permissible when:

A client has committed or threatened to commit a crime on the premises or against personnel.

A nurse in a pediatrician's office is speaking on the telephone with a guardian of a school-age child who will become a new client at the office. The nurse should instruct the guardian to call the child's previous provider's office to request which of the following?

A form authorizing release of copies of the child's medical records to be signed by the guardian

What is an example of HIPPA VIOLATION?

Accessing PHI of patients you are not currently treating.

What organizational requirements are necessary for HIPPA compliance?

Building initial organizational awareness of HIPPA, assessing the organizations privacy practices, formulating an action plan for compliance with each rule, developing a technical and management infrastructure to implement the plans, implementing a comprehensive action plan

Sharing protected information:

Can share with PCP as long as client does not object. If no capacity, can share if best interest of client.

1. Which of the following actions should the nurse take after witnessing a breach of a client's confidentiality in a provider's office?

Complete a health information privacy complaint form.

A nurse in the emergency department is caring for a client following a motor vehicle crash. The client is unresponsive, and the client's spouse is not present at the facility. Which of the following actions should the nurse take to assist with obtaining consent for the client's surgery? Inform

Inform the provider of the spouse's contact information so consent can be obtained over the phone.

Does the HIPPA privacy rule permit treatment of children without parental consent?

No

Can you discard PHI in trash cans?

No, this is a HIPAA VIOLATION.

1. A client tells a nurse that they feel their privacy has been violated and wants to file a formal complaint with someone other than the medical facility. Through which of the following agencies should the nurse instruct the client to file the complaint?

Office for Civil Rights (OCR)

It is our _______ and ______ duty to use what we know to enhance client care.

Professional, Ethical

What is the security rule?

Published Feb 20, 2003 provides for a uniform level of protection of all health information that is houses or transmitted electronically and that pertains to an individual.

A group of nurses on a clinical unit are planning to research the incidence of falls among clients following joint replacement surgery. Which of the following actions should the nurse take to ensure the study complies with the HIPAA privacy rule?

Submit their proposal to the institutional review board for review and describe how they will de-identify client information

Clergy Visits are allowed :

With consent (list of name and room numbers)

HIPPA VIOLATION without intent

XRAY or EKG with no name visible.

Can health care providers engage in confidential conversations in environments where there is the possibility of being overheard?

YES. The ability to communicate freely might affect how quickly treatment can be provided. Covered entities can engage in conversation as needed to provide high quality client care as long as they implement reasonable safeguards appropriate to each environment ot minimize risk of overhearing. Communication among staff at nurse's stations for the purpose of coordination of care. Discussion of a client's condition by telephone with a provider.

Family members are able to access:

a decendants PHI records

You may disclose if:

abuse and neglect is found under state law to appropriate authorities.

The Privacy Rule covers:

all medical records and other individually identifiable health information held or disclosed by a covered entity in any form. Electronic, Paper, Oral.

Who is affected by HIPPA?

Virtually all health care organizations as well as life insurers, information systems vendors, various service organizations and universities are affected by HIPPA.

Which of the following methods of information exchange can occur without client authorization?

Walking rounds that involve two nurses discussing an assigned client at the client's bedside in a private room.

What does HIPPA stand for?

Health Insurance Portability and Accountability Act of 1996