MOA-160 HIPAA EXAM STUDY GUIDE

Covered entity

Any, health plan, or clearing house to which the Privacy Rule applies.

If a medical practice denies an individual's request for medical records, the medical practice must provide the individual with a statement of his or her review rights and an explanation of how to complain to the Secretary of the U.S. Department of Health and Human Services. (True or False)

True

If you have made your best effort to obtain a patient's signature verifying that he or she has received the Notice of Privacy Practices but the patient has refused to sign, you are required to document the reason that you were not able to obtain the signature. (True or False)

True

The Office of Civil Rights (OCR), committed to strong enforcement of the Privacy Rule to protect patients' rights, has imposed penalties on covered entities (CEs) that have violated those rights as a means of encouraging other CEs to examine and improve their privacy protections. (True or False)

True

Viewing your own medical records in the healthcare organization you work for may be considered a violation of the organization's policy on access to medical records. (True or False)

True

Monies collected under penalties imposed under the __________ , not disbursed to the complainant.

U.S. Treasury

A healthcare employee, volunteer, student, or trainee; responsible for protecting patients' health information.

Workforce member

Under the Privacy Rule, a covered entity is required is required to put forth its _______________ to obtain an individual's signature indicating receipt of the Notice of Privacy Practices.

best effort

Any provider, health plan, or clearinghouse to which the Privacy Rule applies

covered entity

The release, transfer, or sharing of health information with another individual or entity outside the healthcare organization holding this information is referred to as

disclosure

Unnecessary use of disclosure of health information that could have been reasonably prevented is referred to as

impermissible

As a workforce members we must understand that if an incident of noncompliance with the Privacy Rule is not resolved by the covered entity (CE) in a satisfactory manner, the Office of Civil Rights (OCR) may:

impose a civil monetary penalty.

As workforce members, we must be aware that under the Privacy Rule access to the medical records:

is not restricted, other than psycho theraphy on the basis of diagnosis.

Under the Privacy Rule, _____________ guidelines restrict the amount of health information that may be used or disclosed to that needed to accomplish the purpose in question.

minimum necessary

Workforce members must stay informed of enforcement activities related to the Privacy Rule. Information on these activities may be found:

on the website of the Office of Civil Rights (OCR).

Under the Privacy Rule, ____________ may be imposed to violations of patient confidentiality.

penalties

A _______________ is an order of the court that prohibits parties from using protected health information (PHI) for any purpose other than litigation or proceedings for which PHI has been requested.

qualified protective order

Under the Privacy Rule, workforce members are expected to ___________ steps to safeguard protected health information.

reasonable

The Privacy Rule prohibits acts of revenge, known as __________ against any person filing a complaint about a privacy violation

retaliation

It is essential that workforce members understand that the Privacy Rule applies to:

Paper, Electronic, and Oral Communications.

Workforce members should be aware that under the Privacy Rule, an individual has the right to request copies of his or her health records. The provider may deny the patient access:n

under limited circumstances that must be communicated in writing to the patient.

The Act of accessing any health the information by a workforce member for the purpose of performing a task within a healthcare organization is referred to as

use

When operations, the authorization for the release of the (PHI) is being used or disclosed for reasons other than treatment, payment, or healthcare operations, the authorization for the release of the PHI must be

valid

Many healthcare organizations are adopting ____________ policies in regard to workforce members who violate the organization's privacy policies.

zero tollerance

On detecting a Privacy Rule violation, the U.S. Department of Health and Human Services (DHHS) will exercise discretion to consider not only what harm has been done but also the willingness of the covered entity (CE) to achieve voluntary compliance. (True or False

True

The Privacy Rule requires that all covered entities (CEs) have and apply appropriate sanctions against those workforce members who fail to comply with the rule. (True or False)

True

Under the Privacy Rule, the covered entity is required to appoint a ___________, who will be responsible for various aspects of the rule, including assistance to workforce members in maintaining compliance.

privacy official

As workforce members, it is important for us to understand the purpose of HIPAA. Furthermore, we should be able to explain the purpose of this legislation to patients. In this training HIPAA has been described as:

1. A catalyst for change in American Healthcare. 2. Federal Legislation for used on healthcare ref reform. 3. A complex and for reacting set of healthcare regular requirements.

To ensure compliance with the Privacy Rule the workforce member should:

1. Continue to his/her knowledge of the privacy rule. 2. Focus on risk areas identified by his/her healthcare organization and office of civil rights. 3. Commit to continues improvement of all processes relating to the protection of patient privacy.

Workforce member

A Healthcare employee, volunteer, student or trainee responsible for protecting patient's health information.

Administrative law judge

A federal official who may be requested by a covered entity to preside over a trial-type hearing and make decisions to resolve disputes

Under the Privacy Rule, the covered entity must provide the individual with a ______________ service which outlines the patient's rights under the rule.

Accounting

Under the Privacy Rule, the patient has the right to request _____________ or obtain copies of his or her health records.

Active to

When you are entering the workforce of a healthcare organization, what is the best method of strengthening your knowledge of the Privacy Rule and how the organization expects you to protect the privacy of its patients?

Adding knowledge, reading updates, focus on risk areas identified by OCR.

A federal official who may be requested by a covered entity to preside over a trial-type hearing and make decisions to resolve disputes.

Administrative law Judge

Under the Privacy Rule, the patient has the right to request communication by _______________.

Alternative means

Business associate

An organization or person who provides services to a healthcare organization and requires protected health information to carry out the function or activity.

An organization or person who provides services to a healthcare organization and requires protected health information to carry out that function or activity

Business Associates

The government agency that investigates the most serious violations of the Privacy Rule

Department of Justice (DOJ)

If a business associate violates the privacy of an individual, it is not necessary for the covered entity (CE) to investigate or act upon knowledge of the violation. (True or False)

False

In determining what constitutes a reasonable safeguard for the protection of patient privacy, we should assess the risk without consideration of patient care. (True or False)

False

To meet the requirements of the Privacy Rule, it is not necessary to hand a copy of the Notice of Privacy Practices to the individual if it has already been posted in the waiting room. (True or False)

False

When state laws regarding the protection of medical records are stricter than the federal Privacy Rule, the workforce member must follow the federal rule. (True or False).

False. Must follow the rule that is more strict.

Workforce members should be aware of the greatest areas of non compliance risk and focus their attention on these areas. According to the Office of Civil Rights, the most frequently reported violation of the Privacy Rule is:

IAmpermissible uses and disclosures of (PHI) Protected Health Information.

The person who is seeking medical care; the person whose information we are protecting

Individuals

Officers of the federal, state, or local government who have legal authority to investigate violations of the law.

Law Enforcement

Any piece of information that identifies or could be used to identify a specific individual is referred to in the healthcare setting as

Protected Health Information

The government agency that accepts and investigates complaints related to the Privacy Rule

Office Civil Rights

Law enforcement

Officers of the federal, state or local government to have legal authority to investigate violations of the law.

Under the Privacy Rule, the covered entity (CE) is obligated to implement, maintain, and provide workforcemembers with ____________ to make clear CE's expectations and assist in protecting the privacy of its patients.

Policies and Procedures

Workforce members should understand that the Privacy Rule:

Requires that reasonable efforts be made to eliminate incident use or disclosure of protected health information.

Under the Privacy Rule, a written authorization must be obtained when the release of information is not related to

TPO- Treatment, Payment, Healthcare Operations

Office of Civil Rights

The government agency that accepts and investigates complaints related to the Privacy Rule.

Department of Justice

The government agency that investigates the most serious violations of the Privacy Rule.

Individual

The person who is seeking medical care, the person who's information we are protecting.