Understanding HIPAA Compliance and Violations

You are a nurse at the Cleveland Clinic. You discuss your patient's medical condition using their PHI with a colleague in the hospital cafeteria during your break in an attempt to update them on the case before going back on shift. Which of the following actions is a HIPAA violation?

• Discussing the patient's condition with someone not on the case

• Discussing the patient's condition in the cafeteria using PHI

• Discussing the patient's condition without the patient's consent

• Discussing the patient's condition during one's break

• Discussing the patient's condition using identifiable information

Tags

DOK Level 2: Skill/Concept

A healthcare provider needs to send a patient's medical records to another doctor. What is the correct procedure to ensure HIPAA compliance?

• Sending the records via unsecured email

• Sending the records via a secure, encrypted email

• Handing the records to the patient to deliver

• Posting the records on a public website

• Discussing the records over the phone without verifying the recipient's identity

Tags

DOK Level 2: Skill/Concept

A receptionist at a clinic leaves a patient's file open on the front desk where anyone can see it. What should have been done to comply with HIPAA?

• Leave the file open for easy access

• Store the file in a locked cabinet when not in use

• Place the file in a public area for convenience

• Allow patients to access their own files without supervision

• Share the file with other patients

Tags

DOK Level 2: Skill/Concept

A doctor discusses a patient's treatment plan with the patient's spouse without the patient's consent. What is the HIPAA-compliant action in this scenario?

• Discussing the treatment plan with the spouse without consent

• Discussing the treatment plan only with the patient

• Discussing the treatment plan with the spouse if the patient is present

• Discussing the treatment plan with the spouse if the patient has given written consent

• Discussing the treatment plan with the spouse if the patient is unconscious

Tags

DOK Level 2: Skill/Concept

A healthcare worker accesses a patient's medical record out of curiosity. What should have been done to comply with HIPAA?

• Access the record only if it is necessary for treatment

• Access the record for personal interest

• Share the record with friends

• Post the record on social media

• Leave the record open on a public computer

Tags

DOK Level 2: Skill/Concept

A hospital employee sends a patient's medical information to the wrong email address. What is the correct action to take after this HIPAA violation?

• Ignore the mistake

• Notify the patient and the HIPAA Privacy Officer immediately

• Delete the email and hope no one notices

• Send the information to the correct email address without addressing the mistake

• Post the information on a secure website

Tags

DOK Level 2: Skill/Concept

A nurse needs to discuss a patient's condition with another healthcare provider. What is the HIPAA-compliant way to do this?

• Discuss the condition in a public hallway

• Discuss the condition in a private, secure location

• Discuss the condition with anyone who asks

• Discuss the condition in a crowded elevator

• Discuss the condition over an unsecured phone line

Tags

DOK Level 2: Skill/Concept

A healthcare provider accidentally leaves a patient's medical record on a shared computer. What should have been done to comply with HIPAA?

• Leave the record on the shared computer

• Log out of the computer and secure the record

• Share the record with other users of the computer

• Print the record and leave it on the desk

• Email the record to a personal account

Tags

DOK Level 2: Skill/Concept

A patient requests a copy of their medical records. What is the correct HIPAA-compliant response?

• Refuse to provide the records

• Provide the records within 30 days

• Charge an exorbitant fee for the records

• Provide the records only if the patient is a family member

• Provide the records only if the patient is a healthcare provider

Tags

DOK Level 2: Skill/Concept

A healthcare worker discusses a patient's condition with a colleague in an elevator. What should have been done to comply with HIPAA?

• Discuss the condition in the elevator

• Discuss the condition in a private, secure location

• Discuss the condition with anyone who asks

• Discuss the condition in a public park

• Discuss the condition over social media

Tags

DOK Level 2: Skill/Concept