HIPAA Final Exam 2022 Questions and Answers

Dr. A referred Mrs. B to Mercy Hospital for treatment of her melanoma. Dr. A has requested Mrs. B's medical records from Mercy Hospital, and the clerk gives them to him. This action would be in compliance with HIPAA regu ...

Dr. A referred Mrs. B to Mercy Hospital for treatment of her melanoma. Dr. A has requested Mrs. B's medical records from Mercy Hospital, and the clerk gives them to him. This action would be in compliance with HIPAA regulations. - ANSWER true The HIPAA Security Rule........ - ANSWER Applies to health plans, health care clearinghouses, and to any health care provider who transmits health information in electronic form. It would be appropriate to release patient information to....... - ANSWER The physician who referred the patient to the facility. The marketing department of a hospital contacts the cancer registry for a list of every person treated for breast cancer at the facility in order to do outreach for a breast cancer fundraising event. This action would be in compliance with HIPAA regulations. - ANSWER false Non-Sensitive Personally Identifiable Information....... - ANSWER For quality of data, the NAACCR Standards state that Certified Tumor Registrars (CTRs) or those who are CTR-eligible SHOULD be used for performing data collection activities. - ANSWER true A cancer registrar should access patient information......... - ANSWER not If an administrator requests the diagnosis of a patient. State collection of follow-up cancer data can be collected ........ - ANSWER not With permission from the patient's primary physician. The entity responsible for the enforcement of HIPAA is.... - ANSWER not IRB HHS The Common Rule offers protection for.... - ANSWER Human research subjects. Patient information is considered individually identifiable if which of the follow elements are included? - ANSWER All of the above Who is responsible for protecting patients' individually identifiable health information? - ANSWER all of the above The Cancer Conference (Tumor Board) qualifies as a ............................. and therefore can share some PHI with other physicians. - ANSWER not covered entity HITECH includes - ANSWER all of the above Under the operating rules portion of HIPAA, health care facilities may share..... - ANSWER First course treatment and follow-up of shared patients. A central registry is a public health authority ....... - ANSWER not And is considered a Covered Health Entity. Examples of confidential information under HIPAA include the following except: - ANSWER The patient's de-identified clinical information. Under the Privacy Rule, a facility must designate a person responsible for the development and implementation of privacy policies and procedures for the facility. This person would be a........ - ANSWER A Privacy Officer A Community Health Center is a covered entity. - ANSWER false State collection of follow-up cancer data can be collected regardless of patient consent. - ANSWER true HIPAA was passed in 1994. - ANSWER false The American Recovery and Reinvestment Act and the Health Information Technology for Economic and Clinical Health were passed in 2010. - ANSWER false Federal penalties can be imposed against__________________________ for PHI breaches. - ANSWER all of the above A reasonable expectation for cancer registries would be for staff to safeguard computers with password protection and timeout on computer screens. - ANSWER true HITECH was enacted to ..... - ANSWER not Establish national standards to protect individuals' medical records and other PHI. The acronym for HIPAA stands for ...... - ANSWER Health Insurance Portability and Accountability Act. A pharmacy can disclose PHI without patient authorization for which of the following reasons: - ANSWER all of the above An example of a Business Associate (BA) would be a company that.... - ANSWER not is a health care cleaninghouse not Is a health care plan that transmits any health information electronically.