Test your basic knowledge |

HIPAA

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Patient records are _____________ so not all staff will have access.
Verification
Covered entities
Rule
need to know

2. Good samaritan law
generally only patient can auth release of own medical record - there are a few exceptions
state law that protects healthcare professionals from liability when they provide emergency assistance/services within their scope of training
Health Information
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties

3. 4d's of negligence
the philosophical study of moral values and rules - conducts
regular - in a secure location
addresses portability of insurance coverage when employees change or lose their jobs
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause

4. DII
Notice of Privacy Practices
De-Identified Information
What types of disclosures do not require patient permission?
state laws setting time limit for bringing a lawsuit

5. Protecting healthcare coverage for employees who change jobs - allowing them to continue existing plans with a new employer.
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment
concerns noncriminal disputes between private parties
regular - in a secure location
Portability

6. Battery
Notice of Privacy Practices
illegal touching of another person
Security
A written set of questions requiring written answers from a plaintiff or defendant under oath

7. Fax machines
Malfeasance
law concerned with public wrongs against society
should only be used when no other - more secure mode of transmission is available
Electronic Protected Health Information

8. Professional Negligence
Rule
concerned with mostly with h/c providers. It addresses fraud and abuse - administrative simplification and medical liability
only those who meed to know should have access to patient information
malpractice

9. If a states privacy laws are stricter than HIPAA privacy standards - the state laws take precedence.
Electronic Protected Health Information
comes on after a few idle seconds and the use of a privacy screen should be mandatory
Medical data from which individual identifiers have been removed; also known as a redacted or blinded record.
State preemption

10. Deposition
testimony under oath
Insurance portability - administrative simplification - privacy and security
judge made law from decisions of a court - interpretation of constitution and statuatory law - often known as precedents
treatment - payment - & healthcare operations

11. Medical records used for health care research

12. TPO
although medical records are confidential - there are times when they can be released w/o a patient consent.
it must have an accompanying disclaimer stating the fax information cannot be shared with any other party w/o patient's written consent
treatment - payment - & healthcare operations
failure to act with the standard of care that a reasonable person would exercise under the same circumstances

13. Advanced directives
located in a secured and private space
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause
allows patients to give directions to health care providers about treatment choices in circumstances in which the patient may no longer be able to provide that direction. There are two types: Living Will and Durable Power of Attorney
security rule

14. Unlawful act done without permission.
malpractice
Malfeasance
h/c workers --qualified people of organizations(perf. data processinf or transcript) -certain gov. auth. (pub health activities) -appropriate auth(protect vic. of abuse) -law enforcement officials or judicial orders
Treatment - payment and health care operations (TPO)

15. Fax Machines and HIPAA
State preemption
Health Information
in order to maintain patient confidentiality - fax machines must be kept in areas not accessible to patients.
individuals in their mid- to late teens who legally live outside of parents' or guardians' control

16. Slander
same legal standards apply to all patient records whether on paper or computer
Designated record set
false charges and malicious oral statements about someone
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor

17. Coded information that can't be read until is decoded.
Prohibits discrimination preventing indiviualds with physical or mental disabilities or chronic illness - from accessing public services & accomodations. Employers requires 'reasonable accommodation' be provided so they can perform duties.
Encryption
it must have an accompanying disclaimer stating the fax information cannot be shared with any other party w/o patient's written consent
Regulations

18. Any set of codes use to encode health care data elements.
Code sets
treatment - payment - & healthcare operations
safeguards health & wealthfare of Medicare/Medicaid beneficiaries & protect program integrity
Malfeasance

19. All persons who will have access are required to...
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment
law that permits a person w/ a legal age and sound mind to give their body to donation
have a unique password and it should be changed frequently
should never be released w/o a patient's signed consent or court order

20. A written document detailing a health care provider's privacy practices.
Limited data set
testimony under oath
Notice of Privacy Practices (NPP)
A written set of questions requiring written answers from a plaintiff or defendant under oath

21. Hardware or software designed to prevent unauthorized access to electronic information.
a contract that comes about from the actions of the parties rather than words
Transaction
state laws setting time limit for bringing a lawsuit
Firewalls

22. Confidentiality

23. Any wrongdoing for which an action for damages may be brought
Tort
need to know
individuals in their mid- to late teens who legally live outside of parents' or guardians' control
law that permits a person w/ a legal age and sound mind to give their body to donation

24. Policies and procedures use to protect electronic information from unauthorized access
testimony under oath
Security
illegal touching of another person
Firewalls

25. Computes and HIPAA
Code sets
Privacy
Individually Identifiable Health Information
same legal standards apply to all patient records whether on paper or computer

26. Includes records maintained by or for a covered entity.
Covered transactions
Designated record set
have a unique password and it should be changed frequently
Type of consent in which a patient who is unable to give consent is given treatment under the legal assumption that he or she would want treatment.

27. interrogatory
A written set of questions requiring written answers from a plaintiff or defendant under oath
should never be released w/o a patient's signed consent or court order
Privacy
Ethical

28. Titile II of HIPAA
only those who meed to know should have access to patient information
have a unique password and it should be changed frequently
The body of laws made by states is their own statutory laws
concerned with mostly with h/c providers. It addresses fraud and abuse - administrative simplification and medical liability

29. OIG - Office of the Inspector General
illegal touching of another person
substance abuse treatment
Covered transactions
safeguards health & wealthfare of Medicare/Medicaid beneficiaries & protect program integrity

30. HIPAA compliance mandates that computer systems must be...
located in a secured and private space
Patient rights under HIPAA
malpractice
A written set of questions requiring written answers from a plaintiff or defendant under oath

31. Statutory
must be reported to authorities by law
The body of laws made by states is their own statutory laws
a contract that comes about from the actions of the parties rather than words
Health Insurance Portability and Accountability Act of 1996 (passed by congress because of portability problems - also to protect PHI)

32. The limited amount of patient information to be disclosed - depending on circumstances.
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor
Minimum necessary
Electronic Protected Health Information
Patient Identifiable Information

33. HIPAA
Health Insurance Portability and Accountability Act of 1996 (passed by congress because of portability problems - also to protect PHI)
comes on after a few idle seconds and the use of a privacy screen should be mandatory
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers
it must have an accompanying disclaimer stating the fax information cannot be shared with any other party w/o patient's written consent

34. Criminal law
law concerned with public wrongs against society
State preemption
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause
purpose - pride - patience - persistence - perspective

35. Business Associate Agreements applies to...
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties
Electronic Protected Health Information
purpose - pride - patience - persistence - perspective

36. The person recieving treatment
Security
Patient
Permission
have a unique password and it should be changed frequently

37. Emancipated minors

38. Freedom from unauthorized intrusion
Privacy
Health Information
Covered transactions
concerned with mostly with h/c providers. It addresses fraud and abuse - administrative simplification and medical liability

39. HIPAA states...
illegal touching of another person
only those who meed to know should have access to patient information
parent of a minor - legal guardian - Agent (patient selected on behalf in h/c power of attorney)
Insurance portability - administrative simplification - privacy and security

40. Clearinghouse
Rule
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers
Covered entities
Standard

41. Common law
Covered transactions
although medical records are confidential - there are times when they can be released w/o a patient consent.
Tort
judge made law from decisions of a court - interpretation of constitution and statuatory law - often known as precedents

42. PII
Patient Identifiable Information
Psychotherapy notes - information for legal proceedings - information exempted from disclosure under CLIA
state law that protects healthcare professionals from liability when they provide emergency assistance/services within their scope of training
Notice of Privacy Practices (NPP)

43. In HIPAA language health plans - Health care clearinghouses - and all health care providers that transmit HIPAA standard transactions electronically are called covered entities. Hospitals - nursing homes - hospices - pharmacies - physician practices
Covered entities
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment
substance abuse treatment
Portability

44. IIHI
state laws setting time limit for bringing a lawsuit
Individually Identifiable Health Information
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers

45. De-Identified Information
located in a secured and private space
Medical data from which individual identifiers have been removed; also known as a redacted or blinded record.
addresses portability of insurance coverage when employees change or lose their jobs
State preemption

46. Ethics
although medical records are confidential - there are times when they can be released w/o a patient consent.
the philosophical study of moral values and rules - conducts
safeguards health & wealthfare of Medicare/Medicaid beneficiaries & protect program integrity
allows patients to give directions to health care providers about treatment choices in circumstances in which the patient may no longer be able to provide that direction. There are two types: Living Will and Durable Power of Attorney

47. Disabilities act

48. Conforming to proper professional behavior
Electronic transmission
Ethical
Transaction
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment

49. Implied contract
a contract that comes about from the actions of the parties rather than words
judge made law from decisions of a court - interpretation of constitution and statuatory law - often known as precedents
failure to act with the standard of care that a reasonable person would exercise under the same circumstances
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor

50. Verify the identification of anyone requesting patient information.
Ethical
Verification
Tort
Psychotherapy notes - information for legal proceedings - information exempted from disclosure under CLIA