HIPAA Practice Test

What is HIPAA?

• A regulation to combat fraud in the healthcare setting
• An act to amend and improve the portability of health insurance coverage
• A rule to set standards concerning the rights of individuals to their health information
• A regulation to combat fraud in the healthcare setting

Who must abide by HIPAA rules and regulations?

• Business associates
• Covered Entities
• Both business associates and covered entities
• Either business associates or covered entities

What is the standard for accessing patient information?

• A need to know for the performance of your job
• If a physician asks you the diagnosis of the patient
• You are a relative of the patient
• Just because you are curious

Who is responsible for protecting patients' individually identifiable health information?

• Staff
• Physician
• Cleaning person
• All of the above

A visitor who asks for a patient by name may receive the following information EXCEPT

• Patient name
• Patient room number
• Patient diagnosis
• Patient condition in general terms

What does HIPAA consist of?

• Privacy protections for individual health information
• Standards for the security of data systems
• Standardized Electronic Data Interchange transactions
• All of the above

What is PHI?  

• Private HIPAA Information
• Personal Health Information
• Protected Health Inquiries  
• Protected Health Information

What is the best definition of Health information?

• Created or received by a healthcare professional
• The past, present or future physical/mental health or condition of an individual
• Payment provision of healthcare to an individual.
• The health information of the pet of a patient.

Which of the following is covered in Safeguarding PHI?

• Dispose of PHI when it is no longer needed
• Keep the PHI Printout with you till you want.
• When retiring electronic media used to store PHI, ensure the media is not cleansed.
• Don't dispose of PHI and keep it with you.

Which of the following is NOT a requirement for computer security?

• Computer must be secured to a desk with an anti-theft device.
• Computers must be password protected.
• PHI can't be sent in the body of an email, it has to be sent as a password-protected attachment.
• Computer monitors displaying PHI must face away from the public or have a privacy screen.

What are the 3 major safeguards in protecting PHIs?

• Physical, Administrative, and Technical Safeguards
• Information, Psycho social, and Technical Safeguards
• Physical, Emotional, and Psycho social Safeguards
• Physical, Psycho social, and Technical Safeguards

Which of the following is a Technical Security?

• Passwords
• Training
• Locked media storage cases
• Designating a security officer

Which of the following is a Physical Security?

• Passwords
• Training
• Locked media storage cases
• Designating a security officer

Which of the following is an Administrative Security?

• Passwords
• Training
• Locked media storage cases
• Designating a security officer

Penalties for non-compliance can be which of the following types:

• Civil and accidental
• Criminal and incidental
• Accidental and purposeful
• Civil and criminal

Confidential information includes all of the following except:

• Passwords
• Clinical information
• Patient financial information
• User ID

What kind of personally identifiable health information is protected by the HIPAA privacy rules?

• Electronic
• Paper
• Spoken word
• All of the above

Access to PHI is determined by:

• Your role in the organization
• The length of time you've been employed
• Your answers to a questionnaire you fill out
• Your last job evaluation

This is the non-permitted disclosure of PHI that poses a significant risk of financial, reputational or other harm to the individual.

• Audit
• Breach
• Violation
• Non Disclosure

An example of a HIPAA violation and a possible breach of unsecured PHI would be:

• Accessing the computer to get information on a neighbor.
• Releasing a copy of a record to an unauthorized recipient.
• Disclosing PHI in a conversation with someone outside of the Health Dept.
• All of the above