HIPAA Compliance Flashcard

Front

What should you always do with your devices to prevent unauthorized access?

Back

Lock them when stepping away

Front

What type of passwords should be used to access platforms containing PHI?

Back

Strong and unique

Front

What should you do if PHI is sent through email by accident?

Back

Report it to the Project Manager

Front

Why should you use de-identified data for testing?

Back

To ensure compliance and data privacy

Front

What should you never do with PHI on personal devices?

Back

Store it without authorization

Front

What is the purpose of encrypting PHI data at rest?

Back

To protect it from unauthorized access

Front

What should be regularly assessed to ensure third-party vendors meet HIPAA compliance?

Back

Their security practices

Front

What protocols should be used for PHI data transfer? Options: HTTP, FTP, SMTP

Back

SSL/TLS, SFTP

Front

What is the goal of minimizing data collection?

Back

To minimize risk exposure

Front

What is the purpose of enabling Two-Factor Authentication (2FA) for systems containing PHI?

Back

To add an extra layer of security