HIPAA Requirements for Confidentiality

What does HIPAA stand for?

• Health Information Portability and Accountability Act

• Health Insurance Portability and Accountability Association

• Health Insurance Portability and Accountability Act

• Health Information Privacy and Accountability Act

The following are examples of a covered entity:

• Pharmacies

• Physician offices

• Health Plans

• All answers are examples of a covered entity

Business Associates of covered entities must have adequate safeguards in place to protect PHI.

• True

• False

PHI is protected for 10 years after death.

• True

• False

PHI includes information that is:

• Electronic

• Spoken

• Written

• All are examples of PHI information

A common HIPAA privacy violation is:

• Not accounting for member dual coverage

• Overcharging for medication

• Dispensing medication to the wrong patient

• Not allowing member cash-pay for certain medication

• All answers are common examples of HIPAA privacy violations

Labels should be removed and shredded would be one way to protect patient PHI on prescription vials.

• True

• False

You need to make a reasonable effort to limit the PHI disclosed to the minimum required to do the job and provide it to the minimum number of entities or individuals. This is the definition for what HIPAA rule?

• Minimum necessary

• Guarding PHI

• PHI

• Hybrid entities

You CAN disclose information to another healthcare provider as long as the other healthcare provider is treating the patient.

• True

• False

Unauthorized disclosure of PHI may be allowed under certain circumstances:

• Law enforcement purposes

• Public health activities

• To avoid serious threat to health or safety

• All of the above