HIPAA (Maricopa)

As a student, if you witness what you think is a violation of the privacy statutes you should immediately notify the faculty and/or clinical facility staff member to whom you are assigned. True or False (Please select an appropriate answer) A True B False

A. True If you witness what you believe to be a violation of privacy statutes, it is important to report it to the appropriate authority, such as your faculty or clinical facility staff member to whom you are assigned. Reporting potential violations helps to ensure that the issue is addressed and that patient privacy is protected.

Protected health information is individually identifiable health information collected by healthcare providers that relates to the mental or physical health of a patient True or False (Please select an appropriate answer) A True B False

A. True Protected health information (PHI) is any information about health status, provision of health care, or payment for health care that is created or collected by a health care provider, and that can be linked to a specific individual. This includes any part of a patient's medical record or payment history.

Releasing any protected health information outside the guidelines of information sharing is a HIPAA violation. True or False (Please select an appropriate answer) A True B False

A. True Releasing any protected health information (PHI) outside the guidelines of information sharing established by HIPAA (the Health Insurance Portability and Accountability Act) is indeed a violation of the law. HIPAA sets strict standards for how PHI should be protected and shared, and violations can result in serious penalties.

A fellow student's brother is one of your patients. Can you look up the brother's record and share that information with your fellow student? True or False (Please select an appropriate answer) A True B False

B False

Your child is a patient in the facility where you are completing a clinical rotation, but is not your patient. You can check your child's medical records or electronic files of any kind. True or False (Please select an appropriate answer) A True B False

B False

Which of the following are true regarding sharing PHI with individuals directly involved in the care of an assigned patient? Multiple Choice Multi-Answer (Please select all appropriate answers from the below list) A You can share PHI with any authority over you. B You can share PHI if they have a "need to know." C You can only share the "minimum necessary" to accomplish the business task. D You are responsible for PHI that you possess or share.

B You can share PHI if they have a "need to know." C You can only share the "minimum necessary" to accomplish the business task. D You are responsible for PHI that you possess or share.

Which of the following should students remember regarding access to PHI? Multiple Choice Single-Answer (Please select an appropriate answer from the below list) A You may share PHI with individuals from outside the hospital if they show you their ID. B De-identified data should be used to document patient care activities/presentation for school officials. C You may share PHI with any healthcare professional who asks for it. D You may take copies of patient records outside the hospital to help complete school assignments.

B. De-identified data should be used to document patient care activities/presentation for school officials. When using patient data for educational purposes, it's important to de-identify the information to protect patient privacy. De-identified data is information that has been stripped of all identifiers that could be used to identify the patient, and it's considered safe to use for educational purposes without violating patient privacy rights.

You are a Respiratory Care student. The patient of a family you are caring for asks for results from morning lab tests. You can share that information without checking with the patient. True or False (Please select an appropriate answer) A True B False

B. False As a student, it's generally not appropriate for you to share test results or other medical information with patients or their families without checking with the patient's healthcare team first. There may be specific protocols in place for communicating test results, and it's important to respect those protocols. Additionally, it's important to ensure that the patient has given permission for their information to be shared with family members.

PHI information is only found in a patient's medical record. True or False (Please select an appropriate answer) A True B False

B. False Protected Health Information (PHI) is not solely confined to a patient's medical record. It can be found in various forms and in various places, including medical records, billing records, electronic systems, verbal communication, and any other form of information that relates to a patient's health, the provision of healthcare, or payment for healthcare that can be linked to a specific individual. This includes any part of a patient's medical record or payment history.

All of the following is true about sharing PHI with other healthcare professionals EXCEPT: Multiple Choice Single-Answer (Please select an appropriate answer from the below list) A You can share PHI if they have a "need to know." B You can allow any healthcare provider to view patient files to find the information they are interested in. C You can only share the "minimum necessary" to accomplish the business task. D You are responsible for PHI that you possess or share.

B. You can allow any healthcare provider to view patient files to find the information they are interested in. This statement is not true. Only healthcare providers involved in the care of a specific patient, and who have a legitimate "need to know," should access the patient's files. Furthermore, they should only access the "minimum necessary" information needed to accomplish the task at hand. Access to a patient's PHI should always be in compliance with HIPAA regulations.

Which law requires that patients' healthcare information be protected and gives patients more access and control over how their health information is used? Multiple Choice Single-Answer (Please select an appropriate answer from the below list) A PHI B EMTALA C HIPAA D Federal False Claims Act

C. HIPAA HIPAA stands for the Health Insurance Portability and Accountability Act. It is a federal law that requires the protection of patients' healthcare information and gives patients more control over how their health information is used and disclosed.

All of the following are your responsibilities with regard to HIPAA, EXCEPT: Multiple Choice Single-Answer (Please select an appropriate answer from the below list) A Understand privacy standards. B Understand and abide by policies of clinical facilities. C Share any patient information with any supervisor above you in the chain of command. D Report suspected violations using an approved chain of command.

C. Share any patient information with any supervisor above you in the chain of command. HIPAA requires that patient information be kept confidential and only shared with those who have a legitimate need to know. This does not mean that you can share patient information with any supervisor above you in the chain of command. Instead, you should only share patient information with those who need it for treatment, payment, or healthcare operations, and even then, only the minimum necessary information should be shared.

Which of the following are examples of protected health information (PHI)? Multiple Choice Single-Answer (Please select an appropriate answer from the below list) A Telephone number and email address B Full face photos C Tests ordered and test results D Name, address and account number E All of the above

E. All of the above All of the listed items (telephone number and email address, full face photos, tests ordered and test results, name, address, and account number) are considered examples of protected health information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). PHI is any information that can be used to identify an individual and that was created, used, or disclosed in the course of providing a healthcare service, such as diagnosis or treatment.