HIM 478 RHIA REVIEW QUESTIONS CHAPTER 11 Flashcards
The patient has requested an amendment to her heath record. The covered entity, after review with the physician, has decided to deny the request. According to HIPAA, the patient must be notified within how many days?
a. 90
b. 45
c. 30
d. 60
60
A patient was denied access to his PHI.He asked for an appeal of the decision and wasallowed the appeal.Which circumstance might explain why?
a. Patient is part of research and has agreed to a temporary suspension of his rights.
b. Patient is an inmate and release may cause safety concern.
c. The CE is exempt from CLIA.
d. Another person may be harmed by the release.
Another person may be harmed by the release.
HIPAA Privacy Rule provides patients with the ability to request an amendment to their health record, to access their health record and other
a. addressable requirements.
b. required standards.
c. preemptions.
d. patient rights.
patient rights.
The HIPAA security rule term for instructions on how to comply with security standards is known as
a. implementation specification.
b. access control.
c. safeguards.
d. validation procedures
implementation specification.
You have been asked to provide examples of technical security measures. Identify what you would include in your list of examples.
a. training
b. minimum necessary
c. encryption
d. locked doors
encryption
Which of the following can be released without consent or authorization?
a. de-identified health information.
b. personal health information.
c. summary of patient care for the latest discharge.
d. protected health information.
de-identified health information.
The physician office you go to has a data integrity issue. What does this mean?
a. There has been unauthorized alteration of patient information.
b. The user’s access has not been defined.
c. Someone in the practice has released information inappropriately.
d. A break-in attempt has been identified.
There has been unauthorized alteration of patient information.
You are writing the policy that will be used to determine a valid authorization. You are basing the policy in the HIPAA Privacy Rule. The policy will require the authorizations to have a(n)
a. expiration date.
b. statement that the PHR is subject to privacy rule.
c. Social Security number.
d. statement regarding release of psychiatric information.
expiration date.
The chief security officer has recommended a security measure that utilizes fingerprints or retina scans. He recommended…..
a. authentication.
b. audit trail.
c. encryption.
d. biometrics.
biometrics.
The facility had a security breach. The breach was identified on October 10, 20XX. The investigation was completed on October 15, 20XX. What is the deadline that the patient notification must be completed?
a. 60 days from October 10
b. 30 days from October 10
c. 60 days from October 15
d. 30 days from October 15
60 days from October 10
