ACEMAPP - HIPAA Assessment

Which of the following entities has the ability to approve who may use or disclose PHI according to HIPAA regulations?

Patients

Your log-in attempts are monitored by your facility.

true

As a healthcare professional it is your responsibility to make sure that you respect the patients' right to confidentiality and privacy.

true

Which of the following are ways that PHI may be inadvertently disclosed?

all answers correct

A breach of a person's health privacy can have significant implications for them, such as:

all answers correct

Removing patient records from the facility in any form (photocopying, emailing, texting, flash drives, screen capturing, etc.) is a serious breach of HIPAA safeguards and a federal offense subject to criminal prosecution.

true

Which of the following are potential consequences of failing to adhere to HIPAA regulations:

all answers correct

Each patient has the right to request a copy of their Protected Health Information.

true

The "Need to Know" rule states that access to patient information can be allowed if it is:

Required to perform your job.

HIPAA rules allow you to work on a patient's records after your shift by printing the records or saving them to a flash drive and bringing them home with you.

false

Protected Health Information is any information that is linked to any personal identifying information.

true

You are working on a health information document that doesn't include your patient's name but does include your patient's home address and birth date, is this considered PHI?

Yes, as their address and birth date could be used to identify them.

Logging in with your password allows the facility to track what information you are accessing.

true

If a colleague asks to borrow your network login id and password, you can give it to him or her if they are temporarily locked out of their own account.

false

Notice of Privacy Practices are given to patients but written in technical language that is often difficult to understand.

false

Please select the answer that is NOT true.

If a patient has drawn intense media scrutiny, the Minimum Necessary Standard does not apply.

A patient is being referred to another doctor for assistance with an issue unrelated to the care you have just given them. Do you disclose the information from today's treatment?

No, you should only disclose the minimum amount of information needed by the doctor to treat the patient.

HIPAA Regulations are in place to benefit the patients, healthcare facility, and healthcare industry.

true

Everyone should have their own login ID and password.

true

Which of the following is not subject to documentation requirements under HIPAA?

Passwords of all associates