Privacy and Security

When did HIPAA become law?

1996

According to the Security Rule in HIPAA, which of the following is an example of a physical safeguard?

Computer server rooms should be locked.

What is using discretion when handling protected health information?

Confidentiality

According to the Privacy Rule, which item must be included in a record of disclosures of protected health information?

Date of disclosure Name of the person or entity to whom information was disclosed Description of disclosure Reason for disclosure All of the above

What does HIPAA stand for?

Health Insurance Portability and Accountability Act

According to the Security Rule in HIPAA, which of the following is an example of a technical safeguard?

Passwords should be updated frequently. Computers should have anti-virus software. Electronically transmitted information should be encrypted. All of the above

With whom can patient information be shared without the patient's permission?

Patient's other health care providers at a practice

What is the term used to describe any individually identifiable health information about a patient?

Protected Health Information (PHI)

According to HIPAA, a health insurance company can deny coverage to a person with pre-existing health conditions.

f

According to the Privacy Rule, which of the following is true about authorization?

It must be signed and dated. It must be written in plain language. It must have an expiration date. It must state the right to refuse authorization. All of the above

Patients have a right to obtain a copy of their medical records. Which item is legally allowed to be kept from the patient?

Psychotherapy notes

According to the Privacy Rule in HIPAA, patients must provide written authorization before health information is released to anyone else.

T

According to the Privacy Rule, patients may request that medical facilities call them at a work phone number instead of a home phone number.

T

Information that is shared between a physician and patient is privileged communication.

T

Patients may request amendments to their medical records.

T

In the Privacy Rule, what is authorization?

The written permission that patients give to disclose protected health information

In HIPAA, what is the name of the rule that required nationally standardized medical transactions and codes?

Transaction and Code Set Rule