Fundamentals of HIPPA Flashcards
Medical Savings Account (now Health Savings Account) is a means to shelter funds from taxes to pay for
medical expenses.
COBRA (Consolidated Omnibus Budget Reconciliation Act of 1985) helps workers who have coverage with a
group health plan.
Industry-wide standards for health claims bring simplification because
all transactions are the same format and any payer will accept claims.
Health care professionals have generally found that HIPAA has simplified claims submissions.
True
False
True
Choose the correct acronym for Public Law 104-91.
HIPO
HIPPA
HIPAA
HIPPO
HIPAA
Which group is the focus of Title I of HIPAA ruling?
Health plans
What type of health information does the Security Rule address?
Electronic PHI held by a covered entity
Which is the most efficient means to store PHI?
Audiotapes
Electronic storage
Which department would need to help the Security Officer most?
Information Services and Technology
Under HIPAA, providers may choose to submit claims either on paper or electronically.
It depends whether they are a small or large provider
The Department of Health and Human Services (DHHS) is responsible to notify all health care providers of changes in the HIPAA rulings.
True
False
False
The HIPAA Security Officer is responsible for
Group of answer choices
seeing that all facility doors are locked at night.
seeing that there is safe storage for paper medical records.
hiring security guards for the facility.
safeguarding all electronic patient health information.
safeguarding all electronic patient health information.
T or F with the passage of HIPAA, large health care providers would be treated with faster service since their volume of claims is larger than small rural providers
False
True or False: Privacy of PHI and security of PHI are the same thing.
False
Which group isnotone of the three covered entities?
Group of answer choices
Patients
Health care plans
Health care clearinghouses
Health care providers
Patients
The HIPAA Privacy Rule gives patients assurance that their personal health information will be treated the same no matter which state or organization receives their medical information.
Group of answer choices
True
False
True
During an investigation by the Office for Civil Rights, each provider is expected to have the following EXCEPT
Group of answer choices
business associate contracts with vendors to protect privacy of PHI.
written policy and procedures.
a designated privacy official.
a workforce trained in state law.
a workforce trained in state law.
The Privacy Rule
Group of answer choices
applies only to protected health information (PHI).
establishes policies for covered entities.
details when authorization to release PHI is needed.
No answers are correct.
applies only to protected health information (PHI) and details when authorization to release PHI is needed.
applies only to protected health information (PHI) and details when authorization to release PHI is needed.
Use and disclosure of PHI is permitted without authorization with the EXCEPTION of which of the following?
Group of answer choices
When incidental to a permitted use and disclosure
When releasing process or psychotherapy notes
For public interest and to benefit the public
When releasing to the individual whose health information it is
When releasing process or psychotherapy notes
When there is an alleged violation to HIPAA Privacy Rule
Group of answer choices
an individual may sue the offending health care provider.
an individual may join a class action lawsuit against the provider.
the individual should report the provider to the local county sheriff.
there is no option to sue a health care provider for HIPAA violations.
there is no option to sue a health care provider for HIPAA violations.
Who in the health care organization is responsible to know where the written policies are located regarding HIPAA compliance?
Group of answer choices
Only the HIPAA Officer
Office workers who send electronic PHI
All staff members, paid or not paid
All clinical staff members
All staff members, paid or not paid
A hospital or other inpatient facility may include patients in their published directory
Group of answer choices
for any advertising purpose
only when the patient or family has not chosen to “opt-out” of the published directory.
to announce on a radio station who has been admitted.
so that pharmaceutical organizations may offer the patients special offers on their drugs.
only when the patient or family has not chosen to “opt-out” of the published directory.
The Regional Offices of the Centers for Medicare and Medicaid Services (CMS) is the only way to contact the government about HIPAA questions and complaints.
Group of answer choices
True
False
False
The minimum penalty per incidence for violations that the Office for Civil Rights finds for noncompliance to the Privacy Rule is
Group of answer choices
$100.
$500.
$1,000.
$5,000.
$100
Nursing notes are not considered PHI since they are not physician’s notes and therefore are not protected by HIPAA.
Group of answer choices
True
False
false
Requesting to amend a medical record was a feature included in HIPAA because of
Group of answer choices
increase in theft of medical information for criminal purposes.
possible difference in opinion between patient and physician regarding the diagnosis and treatment.
ease of human entry error when posting patient information.
All answers are correct.
possible difference in opinion between patient and physician regarding the diagnosis and treatment.
Protected health information is an association between a(n)
Group of answer choices
diagnosis and a payer.
individual and a physician.
health care provider and a patient or two businesses.
diagnosis and an individual.
diagnosis and an individual.
According to AHIMA report, the most common problem that health care providers face in relation to PHI is
Group of answer choices
complying with BA provisions.
confusion about the NOPP provisions.
releasing information to relatives of patients.
lack of a standardized process to release PHI.
lack of a standardized process to release PHI.
