IS3350 CHAPTER 6

Question 1

A written consent that allows protected health information (PHI) to be shared is called ___?
Patients sign consents. These documents are required for many purposes. This term is defined by the Health Insurance Portability and Accountability Act.

Answer 1

AUTHORIZATION

Question 2

An organization that performs a health care activity on behalf of a covered entity is called ___?
This term is defined by the Health Insurance Portability and Accountability Act.

Answer 2

BUSINESS ASSOCIATES

Question 3

Health plans, health care clearinghouses, any health care provider that transmits certain types of health information in electronic form is called ___?
These entities must follow the HIPAA Security and Privacy rules. This term is defined by HIPAA.

Answer 3

COVERED ENTITY

Question 4

Refers to how a covered entity shares PHI with other organizations that may not be affiliated with it. This term is defined by the HIPAA and is called ___?

Answer 4

DISCLOSURE

Question 5

The legal process used to gather evidence in a lawsuit is called ___?

Answer 5

DISCOVERY

Question 6

Patient health information that is computer based is called ___?
It is PHI stored electronically. This term is defined by the HIPAA.

Answer 6

ELECTRONIC PROTECTED HEALTH INFORMATION (EPHI)

Question 7

A crime that takes place when a person’s personally identifiable health information is used without permission in order to receive medical services or goods is called ___?
A specialized type of identity theft.

Answer 7

MEDICAL IDENTITY THEFT

Question 8

A rule that covered entities may only disclose the amount of PHI absolutely necessary to carry out a particular function is called ___?
This term is defined by the HIPAA.

Answer 8

MINIMUM NECESSARY RULE

Question 9

A legal concept that describes a person’s right to sue another for harm that the latter caused is called ___?

Answer 9

PRIVATE CAUSE OF ACTION

Question 10

Any individually identifiable information about the past, present, or future health of a person is called ___?
It includes mental and physical health data.
This term is defined by the HIPAA .

Answer 10

PROTECTED HEALTH INFORMATION (PHI)

Question 11

How a covered entity shares or handles PHI within its organization is called ___?
This term is defined by HIPAA.

Answer 11

USE

Question 12

1. An addressable implementation specification must be used if it is ____?

Answer 12

Reasonable and appropriate

Question 13

2. What is the maximum fine for a single violation of the HIPAA Privacy or Security Rule?
3. $100
4. $1500
5. $1 million
6. $1.5Million
7. It is unlimited

Answer 13

$1.5Million

Question 14

3. Covered entities must notify affected individuals of a breach within ___ days.

Answer 14

60

Question 15

4. HIPAA limits the pre-existing condition waiting period to ___ months.

Answer 15

12

Question 16

5. What conditions must be met to be considered a health care provider under HIPAA?
6. Provide health care services to a person
7. Conduct standard transactions electronically
8. Handle electronic transactions on a clearinghouses behalf
9. 1 & 2 only
10. None of the above

Answer 16

Provide health care services to a person

Conduct standard transactions electronically

Question 17

6. A business associate is ___.

Answer 17

An organization that performs a health care activity on behalf of a covered entity.

Question 18

7. What term refers to how a covered entity shares PHI within the organization?
8. Disclosure
9. Discuss
10. Use
11. Handle
12. None of the above

Answer 18

Use

Question 19

8. A covered entity must disclose PHI to a person’s family and friends in an emergency.
   TRUE OR FALSE

Answer 19

FALSE

Question 20

9. A covered entity must respond to a person’s request to access PHI within ___ days.

Answer 20

30

Question 21

10. Which uses and disclosures of PHI are allowed without a person’s consent?
11. Made to a person about their own PHI
12. Made for treatment, payment, and health care operations
13. Made for public safety and health activities
14. All the above
15. None of the above

Answer 21

Made to a person about their own PHI
Made for treatment, payment, and health care operations
Made for public safety and health activities

All the above

Question 22

11. What term refers to how a covered entity shares PHI with other organizations?
12. Disclosure
13. Discuss
14. Use
15. Handle
16. None of the above

Answer 22

Disclosure

Question 23

12.What is the legal process used to gather evidence in a lawsuit?

1. Disclosure
2. Discovery
3. Forensics
4. Trial
5. None of the above

Answer 23

Discovery

Question 24

13. Which entity enforces the HIPAA Privacy Rule?
14. FDIC
15. FTC
16. OCR
17. CDC
18. None of the above

Answer 24

OCR

Question 25

14. Which rule is similar to the information security concept of need to know?
15. Use rule
16. Clearinghouse rule
17. Operations rule
18. Absolute rule
19. Minimum necessary rule

Answer 25

Minimum necessary rule

Question 26

15. A HIPAA breach is a breach of ___PHI.

Answer 26

Unsecured