HIPAA Security and Privacy Training

As a student, you can protect your patient's PHI by

• Speaking quietly to others about your patient in the elevator

• Using only patient initials on care plans and pre-clinical conference notes

• Keeping pre-clinical conference notes on a clipboard at the station

• Discussing patient care with your peers on the bus

What is required by the HIPAA Security Rule for all covered entities?

• Implementation of physical, administrative, and technical safeguards

• Use of paper records only

• Annual public disclosure of all PHI

• Encryption of all verbal communications

Which of the following is a key component of the HIPAA Security Rule?

• Encryption of electronic PHI

• Mandatory use of paper records

• Public disclosure of patient information

• Annual patient consent forms

What is the primary purpose of HIPAA Privacy Rule?

• To ensure the confidentiality of patient information

• To allow unrestricted access to patient records

• To mandate the use of electronic health records

• To provide public access to health data

Which of the following is an example of a technical safeguard under HIPAA?

• Firewalls and encryption

• Locked filing cabinets

• Employee training programs

• Visitor sign-in sheets

What does PHI stand for in the context of HIPAA?

• Protected Health Information

• Personal Health Identifier

• Private Health Insurance

• Public Health Initiative

Which of the following actions would be a violation of HIPAA Privacy Rule?

• Discussing patient information in a public area

• Using encrypted emails to share patient data

• Storing patient files in a locked cabinet

• Limiting access to patient records to authorized personnel

What is required for a healthcare provider to disclose PHI under HIPAA?

• Patient's written consent

• Verbal agreement from the patient

• Approval from a healthcare administrator

• No consent is needed

Which of the following is considered a physical safeguard under HIPAA?

• Locked doors and security systems

• Password-protected software

• Data encryption

• Employee access controls

How often must HIPAA training be provided to employees?

• Annually

• Every two years

• Only once at hiring

• Every six months