Relias Learning- HIPAA and Behavioral Health
13. Which of the following is most likely to be a business associate of a healthcare provider that is a Covered Entity?
Answering service
15. When must the provider distribute a HIPAA Notice of Privacy Practices (NPP)?
At the first encounter the provider has with the individual, unless the first encounter is an emergency
11. A provider keeps copies of their patient records on an external hard drive, just in case something happens to his primary office computer. Under HIPAA, what is the best way for the provider to store the external hard drive?
At the provider's office using physical security protections
14. The Security Rule protects the following:
Electronic PHI
5. Which of the following actions would cause a healthcare provider to become a Covered Entity?
File a claim for payment electronically
6. Courtney's emergency room doctor would like to share Courtney's personal health information with another physician on call to obtain a second opinion about her diagnosis. Does the minimum necessary rule apply?
No, Courtney's emergency room doctor can share Courtney's personal health information with the second doctor without violating HIPAA.
12. Mary had good reason to believe that a teenaged client of hers was abused by her uncle and Mary reported the suspected abuse to Child Protective Services. She made the report in good faith and consistent with state law; however, it seriously upset her client's uncle. Did Mary violate HIPAA?
No. Since Mary made the report in good faith and consistent with state law, she did not violate HIPAA.
2. Who should HIPAA complaints be directed to within the Covered Entity?
Privacy Officer
16. Which of the following is considered PHI under HIPAA?
Psychotherapy notes
9. The first step toward security rule compliance is:
To complete a risk assessment
10. Which of the following is an exception to the definition of a "breach"?
A physician accidentally overhears a nurse discussing the condition of an individual that he does not treat
7. True or False: HIPAA's Privacy and Security Rules dictate exactly how covered entities and business associates must dispose of records.
False
1. Lucy is a psychotherapist who has recently begun accepting adolescent and young adult clients. She begins to see an 18-year-old male client for major depressive disorder, who is still living with his parents. After a few weeks, his parents demand to see a copy of Lucy's notes taken during their psychotherapy sessions. Under HIPAA, should Lucy provide a copy of her client's treatment record to the parents?
No, HIPAA grants the client a right to privacy of his treatment records
4. A pharmaceutical company asks for a list of all individuals in your practice, so they can send those individuals a free gift of a pill sorter. Is it permissible for you to provide the list?
Yes, if each individual on the list signed an authorization permitting the Covered Entity to release the PHI necessary for the marketing purposes.
3. John, a pharmacist at the local drug store, is calling a customer, Beth, to ask her allergy questions before giving her a newly prescribed medication. There is a very long line at the pharmacy and many people are within earshot of John and Beth. If other customers hear about Beth's allergies and medical conditions over the course of their conversation, would John be in violation of HIPAA?
Yes, this information is protected by HIPAA.
8. Linda's practice calls individuals to confirm appointments. Karen requests that the practice does not make these calls to her because she is afraid her husband will become abusive if he finds out she is seeking treatment. Karen says she will call the practice to confirm and asks to be taken off the call list. Does HIPAA require the practice comply with Karen's request?
Yes. This is a request for a reasonable accommodation because Karen believes she is endangered.
