What does HIPAA stand for?

• Health Insurance Portability and Accountability Act

• Health Information Privacy and Accountability Act

• Health Insurance Privacy and Accountability Act

• Health Information Portability and Accountability Act

Which of the following is considered Protected Health Information (PHI)?

• A patient's name

• A patient's medical record number

• A patient's address

• All of the above

Under HIPAA, which of the following is NOT a permissible use of PHI?

• Treatment

• Payment

• Marketing without consent

• Healthcare operations

What is the primary purpose of HIPAA?

• To increase healthcare costs

• To protect patient privacy

• To regulate insurance companies

• To standardize medical records

Which of the following entities is required to comply with HIPAA regulations?

• Only healthcare providers

• Only health insurance companies

• Healthcare providers, health plans, and healthcare clearinghouses

• Only pharmacies

What is the minimum necessary standard under HIPAA?

• Disclosing all patient information

• Disclosing only the information necessary to accomplish the intended purpose

• Disclosing information to anyone who asks

• Disclosing information only to family members

Which of the following is a patient's right under HIPAA?

• The right to access their medical records

• The right to request a correction to their medical records

• The right to receive a notice of privacy practices

• All of the above

What is a Business Associate under HIPAA?

• A healthcare provider

• A person or entity that performs services on behalf of a covered entity that involves the use of PHI

• A patient

• A health insurance company

Which of the following is a violation of HIPAA?

• Sharing patient information with a family member without consent

• Discussing patient information in a private setting

• Storing patient records securely

• Providing patient information for treatment purposes

What must a covered entity do if a breach of PHI occurs?

• Nothing, as breaches are not reportable

• Notify affected individuals and the Department of Health and Human Services

• Only notify the media

• Only notify law enforcement