HIPAA Compliance

What kind of personally identifiable health information is protected by HIPAA privacy rule?

• Paper

• Electronic

• The Spoken Word

• All of the Above

If you suspect someone is violating the medical office's privacy policy, you should:

• Say nothing. It's none of your business.

• Report your suspicions to your clinical supervisor for further follow-up.

• Watch the individual until you have gathered solid evidence against them.

• Report to the Health Compliance Officer for further follow-up.

• Both B & D

HIPAA security and privacy regulations apply to:

• Attending physician, nurses, and other healthcare professionals.

• Health information managers, information systems staff, and other ancillary personnel only.

• Anyone working in the medical office.

• Only staff that have direct patient contact.

If a person has the ability to access the medical office's system or applications, they have a right to view any information contained in that system or application.

• True

• False

A visitor who asks for a patient by name may receive the following information EXCEPT:

• Patient Name

• Patient conditon in general terms

• Patient room number

• Patient diagnosis

Copies of patient information may be disposed of in any garbage can in the medical office.

• True

• False

The criminal penalties for improperly disclosing patient health information can be as high as fines of $250,000 and prison sentences of up to 10 years.

• True

• False

Protected health information is anything that connects a patient to his or her health information.

• True

• False

Confidentiality protections cover not just a patient's health-related information, such as his or her diagnosis, but also other identifying information such as social security number and telephone numbers.

• True

• False

Which of the following are some common features designed to protect confidentiality of health information contained in patient medical records?

• Locks on medical records rooms

• Passswords to access computerizedd records

• Records that prohibit employees from looking at records unless they have a need to know

• All of the above