WorksheetsHIPAA Compliance
Total questions: 18
Worksheet time: 10mins
What kind of personally identifiable health information is protected by HIPAA privacy rule?
Paper
Electronic
The Spoken Word
All of the Above
If you suspect someone is violating the medical office's privacy policy, you should:
Say nothing. It's none of your business.
Report your suspicions to your clinical supervisor for further follow-up.
Watch the individual until you have gathered solid evidence against them.
Report to the Health Compliance Officer for further follow-up.
Both B & D
HIPAA security and privacy regulations apply to:
Attending physician, nurses, and other healthcare professionals.
Health information managers, information systems staff, and other ancillary personnel only.
Anyone working in the medical office.
Only staff that have direct patient contact.
If a person has the ability to access the medical office's system or applications, they have a right to view any information contained in that system or application.
True
False
A visitor who asks for a patient by name may receive the following information EXCEPT:
Patient Name
Patient conditon in general terms
Patient room number
Patient diagnosis
Copies of patient information may be disposed of in any garbage can in the medical office.
True
False
The criminal penalties for improperly disclosing patient health information can be as high as fines of $250,000 and prison sentences of up to 10 years.
True
False
Protected health information is anything that connects a patient to his or her health information.
True
False
Confidentiality protections cover not just a patient's health-related information, such as his or her diagnosis, but also other identifying information such as social security number and telephone numbers.
True
False
Which of the following are some common features designed to protect confidentiality of health information contained in patient medical records?
Locks on medical records rooms
Passswords to access computerizedd records
Records that prohibit employees from looking at records unless they have a need to know
All of the above
Confidential information must not be shared with another unless the recipient has:
An OK from a doctor
The need to know
Permission from appropriate authority on the medical office
All of the above
Which of the following is the appropriate person with whom to share patient information even if the patient has NOT specifically authorized the release of information to the individual?
A former physician of the patient who is concerned about the patient.
A colleague who needs information about the patient to provide proper care.
A friend of the patient.
A pharmaceutical salesman who is offering a fee for a list of patients to whom he could send a free sample of his product.
What is the standard for accessing patient information?
A need to know for the performance of your job.
If a physician asks you the diagnosis of a patient.
Just because you are curious.
You are a relative of a patient.
Can you access your own medical record via the computer system?
True
False
Patients have a right to access their health information.
True
False
Confidentiality and privacy are important concepts in healthcare because:
They help protect healthcare medical offices from lawsuits.
They allow patients to feel comfortable sharing information with their doctors.
They avoid the confusion of having people other than a physician disturbing information about a patient.
Both A & B
You are approached by an individual who tells you that he is here to work on the computers and wants you to open a door for him or point the way to a workstation. How do you respond to this request?
Provide him with the information or access he needs.
Ask him who at the medical office has hired him and refer him to that person for assistance.
Call the police
When is the patient's written authorization to release information required?
In most cases, when patient information is going to be shared with anyone for reasons other than treatment, payment or healthcare operations.
Upon admission to a facility.
When patient information is to be shared among two or more clinicians.
When patient information is used for billing to a private insurer.
