HIPAA EXAM - 4ACES

Failure for safeguarding the client PHI would lead below consequences?

• Loss of Reputation

• Loss of Business

• Loss of Customer trust

• All of the above

Does the RISK assessment needs to be performed on periodic basis and result needs documented?

• No

• Yes

Which of the following are examples of Patient Identifiers that are protected as PHI under HIPAA?

• Social Security Numbers

• Patient genetic information

• Telephone numbers

• All of the above

Which government entity handles criminal prosecutions related to HIPAA violations?

• U.S Supreme Court

• Department of Health and Human Services (HHS)

• Department of Justice (DOJ)

• Office of Civil Rights (OCR)

If a covered entity or business associate is using an HER system, the HITECH Act requires that individual patients have the right to do which of the following:

• Obtain PHI in an electronic format

• Restrict the use or Disclosure of PHI upon request

• Designate a third party to be recipient of ePHI

• All of the above

The civil and criminal penalty structure imposed for a HIPAA violation, is based on the tier bases?

• Yes

• No

The HITECH Act requires the business associates to comply with the safeguards contained in the HIPAA Security Rule?

• No

• Yes

In addition to complying with HIPAA Security Rule the HITECH Act requires business associates to report security breaches too to covered entities consistent with notification requirements?

• Yes

• No

Which of the following are HIPAA Privacy Rule requirements?

• Safeguards against unauthorized disclosures of PHI

• Training of workforce on HIPAA rules and requirements

• Mitigation of unauthorized disclosures of PHI

• All of the above

A laptop computer with patient PHI is stolen from an 4A’s office, if the laptop is later recovered and IT analysis shows PHI was accessed but was “unreadable and unusable” to the unauthorized person who accessed the PHI, would that be considered a “Breach of Unsecured PHI”?

• Yes

• No