Test your basic knowledge |

HIPAA

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Professional Negligence
Patient rights under HIPAA
illegal touching of another person
malpractice
generally only patient can auth release of own medical record - there are a few exceptions

2. 5P's of ethical power
law that permits a person w/ a legal age and sound mind to give their body to donation
allows patients to give directions to health care providers about treatment choices in circumstances in which the patient may no longer be able to provide that direction. There are two types: Living Will and Durable Power of Attorney
purpose - pride - patience - persistence - perspective
Notice of Privacy Practices

3. HIPAA states...
only those who meed to know should have access to patient information
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor
must be reported to authorities by law
Covered entities

4. Unlawful act done without permission.
Individually Identifiable Health Information
Permission
the philosophical study of moral values and rules - conducts
Malfeasance

5. Conforming to proper professional behavior
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause
Ethical
false charges and malicious oral statements about someone
Covered transactions

6. Battery
illegal touching of another person
Rule
Notice of Privacy Practices (NPP)
comes on after a few idle seconds and the use of a privacy screen should be mandatory

7. The person recieving treatment
Transaction
Tort
located in a secured and private space
Patient

8. In order for a fax document to be HIPAA compliant...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

9. Under some circumstances ...
a minor - rather than the parent - must sign the release of patient information
false charges and malicious oral statements about someone
Type of consent in which a patient who is unable to give consent is given treatment under the legal assumption that he or she would want treatment.
Examples of PHI

10. HIPAA compliance mandates that computer systems must be...
Tort
addresses portability of insurance coverage when employees change or lose their jobs
located in a secured and private space
Electronic data interchange

11. Verify the identification of anyone requesting patient information.
Limited data set
state laws setting time limit for bringing a lawsuit
Rule
Verification

12. Advanced directives
Electronic data interchange
Patient rights under HIPAA
allows patients to give directions to health care providers about treatment choices in circumstances in which the patient may no longer be able to provide that direction. There are two types: Living Will and Durable Power of Attorney
illegal touching of another person

13. Statue of limitations
may be disclosed to public health agencies - patient identifiers are removed so it's covered by HIPAA
state laws setting time limit for bringing a lawsuit
The body of laws made by states is their own statutory laws
Transaction

14. Implied contract
Limited data set
a contract that comes about from the actions of the parties rather than words
Code sets
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment

15. TPO
failure to act with the standard of care that a reasonable person would exercise under the same circumstances
Encryption
security rule
treatment - payment - & healthcare operations

16. Fax Machines and HIPAA
in order to maintain patient confidentiality - fax machines must be kept in areas not accessible to patients.
Psychotherapy notes - information for legal proceedings - information exempted from disclosure under CLIA
Patient Identifiable Information
U.S. goverment

17. Privacy Officer
Transaction
failure to act with the standard of care that a reasonable person would exercise under the same circumstances
Every office should have one! - responsible for making surethat thise office is HIPAA compliant - privacy officer should be.. an effective communicator with ability to answer questions about sespected HIPPA violations and complaints
Electronic transmission

18. Any set of codes use to encode health care data elements.
Encryption
Standard
Code sets
h/c workers --qualified people of organizations(perf. data processinf or transcript) -certain gov. auth. (pub health activities) -appropriate auth(protect vic. of abuse) -law enforcement officials or judicial orders

19. Disclosure without Consent
Encryption
need to know
although medical records are confidential - there are times when they can be released w/o a patient consent.
generally only patient can auth release of own medical record - there are a few exceptions

20. Statutory
Malfeasance
Encryption
parent of a minor - legal guardian - Agent (patient selected on behalf in h/c power of attorney)
The body of laws made by states is their own statutory laws

21. making known - or using information relating to the private life or affairs of a person without their approval or permission
Invasion of Privacy Publishing
Electronic transmission
false and malicious writing about another
also called biomedical ethics - the moral dilemmas and issues of advanced medicine and medical research

22. Uniform anotomical gift act
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers
law that permits a person w/ a legal age and sound mind to give their body to donation
regular - in a secure location
Code sets

23. See & Copy their health records - update health records - obtain a list of the institution's disclosures - other than for payment & healthcare operations - request a restriction on a certain uses or disclosures - choose how to receive their health in
What types of disclosures do not require patient permission?
Patient rights under HIPAA
malpractice
should only be used when no other - more secure mode of transmission is available

24. Patient records are _____________ so not all staff will have access.
failure to act with the standard of care that a reasonable person would exercise under the same circumstances
Security
The body of laws made by states is their own statutory laws
need to know

25. Some state laws specifically protect __________. A patient would need to sign a specific request.
state laws setting time limit for bringing a lawsuit
Electronic data interchange
A court order requiring someone to appear in court on a certain date time and reason. A medical record could be subpoenaed.
human immunodeficiency virus/acquired immune deficiency syndrome (HIV/AIDS)

26. Name - address - date of birth - phone/fax numbers - social security number - medical record number - and photographs - nursing and physician notes - billing and other treatment records used during a patient's visit in a hospital or office.
Examples of PHI
Patient rights under HIPAA
testimony under oath
substance abuse treatment

27. Libel
false and malicious writing about another
Every office should have one! - responsible for making surethat thise office is HIPAA compliant - privacy officer should be.. an effective communicator with ability to answer questions about sespected HIPPA violations and complaints
Covered transactions
Limited data set

28. A general HIPAA requirement
Examples of PHI
Standard
in order to maintain patient confidentiality - fax machines must be kept in areas not accessible to patients.
Psychotherapy notes - information for legal proceedings - information exempted from disclosure under CLIA

29. Bioethics
should never be released w/o a patient's signed consent or court order
concerns noncriminal disputes between private parties
also called biomedical ethics - the moral dilemmas and issues of advanced medicine and medical research
human immunodeficiency virus/acquired immune deficiency syndrome (HIV/AIDS)

30. Freedom from unauthorized intrusion
Privacy
Prohibits discrimination preventing indiviualds with physical or mental disabilities or chronic illness - from accessing public services & accomodations. Employers requires 'reasonable accommodation' be provided so they can perform duties.
false charges and malicious oral statements about someone
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers

31. Any wrongdoing for which an action for damages may be brought
only those who meed to know should have access to patient information
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause
Encryption
Tort

32. OIG - Office of the Inspector General
law that permits a person w/ a legal age and sound mind to give their body to donation
also called biomedical ethics - the moral dilemmas and issues of advanced medicine and medical research
illegal touching of another person
safeguards health & wealthfare of Medicare/Medicaid beneficiaries & protect program integrity

33. All persons who will have access are required to...
Treatment - payment and health care operations (TPO)
have a unique password and it should be changed frequently
a minor - rather than the parent - must sign the release of patient information
Prohibits discrimination preventing indiviualds with physical or mental disabilities or chronic illness - from accessing public services & accomodations. Employers requires 'reasonable accommodation' be provided so they can perform duties.

34. DII
Covered transactions
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers
Notice of Privacy Practices (NPP)
De-Identified Information

35. De-Identified Information
testimony under oath
Medical data from which individual identifiers have been removed; also known as a redacted or blinded record.
The body of laws made by states is their own statutory laws
Encryption

36. PII
concerned with mostly with h/c providers. It addresses fraud and abuse - administrative simplification and medical liability
illegal touching of another person
Patient Identifiable Information
the philosophical study of moral values and rules - conducts

37. Transmission of information between two parties fro financial or administrative activities.
Electronic transmission
illegal touching of another person
The body of laws made by states is their own statutory laws
Transaction

38. Key entities
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause
have a unique password and it should be changed frequently
must be reported to authorities by law
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor

39. Business Associate Agreements applies to...
Permission
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties
Electronic data interchange

40. Civil law
Rule
concerns noncriminal disputes between private parties
Covered transactions
in order to maintain patient confidentiality - fax machines must be kept in areas not accessible to patients.

41. Deposition
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor
Tort
testimony under oath
substance abuse treatment

42. Medical records used for health care research

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

43. Misfeasance
improper performance of an otherwise lawful act. civil
only those who meed to know should have access to patient information
Rule
Individually Identifiable Health Information

44. Coded information that can't be read until is decoded.
Encryption
State preemption
Psychotherapy notes - information for legal proceedings - information exempted from disclosure under CLIA
Transaction

45. Treatment means that a health care provider can provide care; payment means that a provider can disclose PHI to be reimbursed; health care operations refers to HIPAA approved activities and transactions.
Treatment - payment and health care operations (TPO)
Standard
although medical records are confidential - there are times when they can be released w/o a patient consent.
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers

46. What information do patients NOT have access to?
Psychotherapy notes - information for legal proceedings - information exempted from disclosure under CLIA
false charges and malicious oral statements about someone
in order to maintain patient confidentiality - fax machines must be kept in areas not accessible to patients.
Individually Identifiable Health Information

47. Doctor release of patient
state law that protects healthcare professionals from liability when they provide emergency assistance/services within their scope of training
Standard
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment
Any information that would identify a patient (name - add - tele - DOB - SSN - email - med. rec. number - etc)

48. EPHI
must be reported to authorities by law
Electronic Protected Health Information
substance abuse treatment
Electronic transmission

49. 4d's of negligence
purpose - pride - patience - persistence - perspective
substance abuse treatment
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause
Invasion of Privacy Publishing

50. Federal law protects patient records dealing with...
The body of laws made by states is their own statutory laws
Health Information
substance abuse treatment
testimony under oath