Introduction to HIPAA Quiz

Harper is reviewing her hospital's compliance documents and notices a reference to a specific act that governs patient information privacy and data security. What does the acronym "HIPAA" stand for in this context?

• Health Insurance Portability and Accountability Act

• Health Information Privacy and Assurance Act

• Healthcare Infrastructure Protection and Adaptation Act

• Health Insurance Policy and Access Act

When was HIPAA federal law passed?

• 1992

• 1996

• 2000

• 2004

What was one of the issues before HIPAA was established?

• Health information could be freely shared without consent

• Health information could be used to restrict or terminate employment

• Health information was completely secure and private

• Health information was only available to healthcare providers

What is the main goal of HIPAA?

• To ensure all patients have health insurance

• To provide free healthcare to all citizens

• To have a balance that permits important uses of information while protecting privacy

• To centralize all patient health information

What does HIPAA set limits and conditions on?

• The use and release of records without an individual's authorization

• The number of medical records a hospital can have

• The type of medical treatment a patient can receive

• The salary of healthcare workers

Imagine Ava visited her doctor and wanted to know more about her rights regarding her medical records under HIPAA. What rights does HIPAA give to Ava over her PHI (Protected Health Information)?

• Right to demand unlimited treatment options

• Right to access the personal financial information of the healthcare provider

• Rights to examine and obtain a copy of her health records, and to request corrections

• Right to use healthcare facilities for personal events

Who is required to provide patients with Notice of Privacy Practices according to the Privacy Rule?

• Insurance companies only

• All patients themselves

• Anyone who has records of any health information

• Only external healthcare agencies

Imagine Avery is starting a new clinic. According to HIPAA, what must Avery's clinic have?

• A financial officer

• A compliance committee

• A designated HIPAA officer

• A public relations officer

When Noah's medical records are being shared with a new healthcare provider, what must the authorization form state?

• The cost of the treatment

• The diagnosis and treatment plan

• What is to be disclosed, to whom, and when the authorization expires

• The personal contact information of the healthcare provider

For which of the following is written authorization NOT required for the disclosure of PHI?

• Marketing purposes

• Treatment, Payment, Healthcare Operations (TPO)

• Selling PHI to third parties

• Research without patient consent