Chapter 11 Quiz Answers Flashcards
Sally Mitchell was treated for kidney stones at Graham Hospital last year. She now wishes to review her medical record in person. She has requested to review them by herself in a closed room. Which of the following is true?
A. Failure to accommodate her wishes will be a violation of the HIPAA Privacy Rule.
B. Sally owns the information in her record, so she must be granted her request.
C. Sally’s request does not have to be granted because the hospital is responsible for the integrity of the medical record.
D. Patients should never be given access to their actual medical records.
Sally’s request does not have to be granted because the hospital is responsible for the integrity of the medical record.
Barbara requested a copy of her PHI from her physician office on August 31. It is now October 10 and she has not heard anything from the physician office. Which of the following statements is correct?
a. This is not a HIPAA violation because the physician’s office has 60 days to respond.
b. This is not a HIPAA violation because Barbara does not have a right to her information.
c. This is a HIPAA violation because the physician’s office did not respond within 30 days.
d. This is a HIPAA violation because the physician’s office should have responded within 15 days.
This is a HIPAA violation because the physician’s office did not respond within 30 days.
A waived authorization in a research study _______.
a. Can be deemed appropriate by the research team
b. Is never permitted per HIPAA research regulations
c. Is only permitted when the research subject verbally agrees to the waiver
d. Can be approved by an Institutional Review Board or Privacy Board
Can be approved by an Institutional Review Board or Privacy Board
Kyle likes to request frequent accounting of disclosure reports from all of his providers so he knows where his PHI is being disseminated.
a. Each covered entity must provide the first accounting within a 12-month period at no cost
b. Each covered entity must provide the first accounting within a 12-month period for no greater than $10
c. Only one provider must provide the first accounting within a 12-month period at no cost; the others may charge a cost-based fee
d. Every covered entity must provide all accounting of disclosure reports at no cost
Each covered entity must provide the first accounting within a 12-month period at no cost
Terry has requested that all written communications from his cardiologist’s office be sent to his work address instead of his home address. The cardiology practice __________.
a. Must honor this confidential communication request if it is deemed reasonable
b. Is not required to honor any confidential communication requests of this nature
c. Is not required to honor this restriction request
d. Must honor this restriction request as long as it is submitted in writing
Must honor this confidential communication request if it is deemed reasonable
Restriction requests __________.
a. Must always be honored
b. Can always be refused
c. Must be followed if disclosure would be to a health plan for payment and the PHI pertains to a service or item paid for in full by someone other than the health plan
d. Must be followed if an individual wants only certain persons to be given information about the individual that is contained in the facility directory
Must be followed if disclosure would be to a health plan for payment and the PHI pertains to a service or item paid for in full by someone other than the health plan
HealthPartners has been the target of a network server hacking incident. 300 patients were affected. HealthPartners __________.
a. Is not required to report this to the affected patients because there were fewer than 500
b. Must inform the patients of what occurred; the type of PHI involved; and what steps HealthPartners is taking to prevent future hacking incidents
c. Is required to publish a list of the 300 patients who were affected
d. Must inform the patients of what occurred; the type of PHI involved; what steps HealthPartners is taking to prevent future hacking incidents; and the names of the other affected patients
Must inform the patients of what occurred; the type of PHI involved; and what steps HealthPartners is taking to prevent future hacking incidents
If federal and state law conflict, federal law will generally supersede state law under the legal doctrine of __________.
a. Negligence
b. Restrictions
c. Preemption
d. Stare decisis
Preemption
In the event of a HIPPA breach, how long does the facility have to notify each individual of the breach? A. 30 days B. 60 days C. 90 days D. 120 days
60 days
The notice of privacy practices must inform individuals of their right to complain to whom?
A. The covered entity
B. The department of health and human services
C. Any employee of the facility
D. All of the above
All of the above
