Self-Test on HIPAA Material

At the extreme, anyone caught selling private health care information can be fined up to:

$250,000 and 10 years in prison

Title I of HIPAA covers:

* Access * Portability * Renewability

As the first incremental step in healthcare reform, Congress passed the HIPAA act in:

1996

which of the following are types of data security safeguards?

Administrative Physical Technical

the Administrative Safeguards are largely handled by a facility's ________.

Administrators and privacy officer

in a hospital, the obligation to maintain confidentiality applies to _____.

All medical and personal information

In general, a written HIPAA privacy notice contains:

An explanation that patient information may be transmitted to third parties for routine use in treatment decisions, payment, or other healthcare processes An explanation of the patient's right to see his or her own medical and billing records and make changes to anything that seems inaccurate Notification of the patient's right to learn who has read the records

the security rule applies to which of the following forms of electronic health information:

B. any healthy status information D. any information about the provision of health care E. any information about payment for health care that can be linked to a specific person G. the patients name, birth date and social security number

from the list proceed here, identify the five rules of administrative simplification contained in the Title II of HIPAA:

C. Privacy Rule D. Transactions and Code Sets Rule F. Security Rule H. Unique Identifiers Rule I. Enforcement Rule

The coming of computers in medicine has ______.

Created new dangers for breach of confidentiality

In an open computer network such as the internet, HIPAA requires the use of _____. In a closed system such as a local area network, HIPAA allows _____ as controls.

Data encryption; Sign-on codes and passwords

HIPAA regulations override any state laws which demand stricter privacy.

False

The term "ICD-10-CM" refers to 10th Independent Categorization is disease factors.

False

the department of health and human services considers the HIPAA security standards to be a maximum standard.

False

Title I promotes renewability of coverage by prohibiting employee health plans from denying coverage to new employees based on all but which of the following?

Medical inaccuracies

the _______ is a unique ten-digit alphanumeric.

National Provider Identifier (NPI)

one of the requirements of the Security Rule is to:

Protect against all reasonably anticipated threats or hazards to the security of electronic protected health information

The Privacy rule states that protected health information can be data that is written, spoken, or in electronic form.

True

in a conversation, enough information to identify patients may be revealed, even if patient names are not used.

True

the issue of "healthcare portability" focused on protecting healthcare coverage for employees who change jobs and allowing them to carry their existing plans with them.

True

Among the permitted disclosures that do not require patient permission are reporting:

Vital statistics Communicable diseases Adverse reactions to drugs or medical devices to the FDA

in general, information about a patient can be shared _________.

When it is directly related to treatment

One good rule to prevent unauthorized access to computer data is to:

blank the screen or turn off the computer when you leave it.

of the following types of conversations about patients, the one(s) that constitute(s) a violation of patient privacy is:

conversations in public areas telephone conversations conversations at home with friends and family

The security rule deals specifically with protecting ___________ data.

electronic

technical safeguards are used to protect information through the use of:

encryption and authentication programs

one exception to confidentiality is ____.

gunshot wound

the privacy and data security portions of the Health Insurance Portability and Accountability Act (HIPAA) was passed ______.

in 1996

the _________ is responsible to see that all healthcare workers are familiar with HIPAA and its privacy rule, and familiar with all the policies and procedures used to guard protected health information in the facility.

privacy officer

The standardization of all codes has begun to make the electron it transfer of healthcare data:

smoother and more accurate

the goal of your organizations information security program is to protect the confidentiality, integrity, and availability of each patients health information.

true

the most common privacy violations were impermissible disclosures to unauthorized persons, often in casual conversation.

true