Test your basic knowledge |

HIPAA

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. The use of uniform electronic network protocols to transfer business information between organizations.
Security
Electronic data interchange
Notice of Privacy Practices (NPP)
The body of laws made by states is their own statutory laws

2. If a states privacy laws are stricter than HIPAA privacy standards - the state laws take precedence.
the philosophical study of moral values and rules - conducts
State preemption
Standard
Treatment - payment and health care operations (TPO)

3. Good samaritan law
state law that protects healthcare professionals from liability when they provide emergency assistance/services within their scope of training
Patient Identifiable Information
may be disclosed to public health agencies - patient identifiers are removed so it's covered by HIPAA
A written set of questions requiring written answers from a plaintiff or defendant under oath

4. Titile II of HIPAA
Security
concerned with mostly with h/c providers. It addresses fraud and abuse - administrative simplification and medical liability
Prohibits discrimination preventing indiviualds with physical or mental disabilities or chronic illness - from accessing public services & accomodations. Employers requires 'reasonable accommodation' be provided so they can perform duties.
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause

5. Confidentiality

6. Verify the identification of anyone requesting patient information.
Encryption
malpractice
Verification
Notice of Privacy Practices (NPP)

7. 5P's of ethical power
purpose - pride - patience - persistence - perspective
Covered entities
Tort
judge made law from decisions of a court - interpretation of constitution and statuatory law - often known as precedents

8. Coded information that can't be read until is decoded.
Portability
The body of laws made by states is their own statutory laws
Encryption
Verification

9. Deposition
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment
malpractice
same legal standards apply to all patient records whether on paper or computer
testimony under oath

10. Disabilities act

11. Transmission of information between two parties fro financial or administrative activities.
Portability
Transaction
although medical records are confidential - there are times when they can be released w/o a patient consent.
also called biomedical ethics - the moral dilemmas and issues of advanced medicine and medical research

12. IIHI
De-Identified Information
Individually Identifiable Health Information
substance abuse treatment
parent of a minor - legal guardian - Agent (patient selected on behalf in h/c power of attorney)

13. Doctor release of patient
generally only patient can auth release of own medical record - there are a few exceptions
Transaction
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment
Patient

14. Protected Health Information (PHI)
testimony under oath
Any information that would identify a patient (name - add - tele - DOB - SSN - email - med. rec. number - etc)
law concerned with public wrongs against society
have a unique password and it should be changed frequently

15. Guidelines and standards made by government agencies and licensing boards that have the authority to enforce compliance
The body of laws made by states is their own statutory laws
comes on after a few idle seconds and the use of a privacy screen should be mandatory
Regulations
Patient Identifiable Information

16. Criminal law
Treatment - payment and health care operations (TPO)
Insurance portability - administrative simplification - privacy and security
law concerned with public wrongs against society
Type of consent in which a patient who is unable to give consent is given treatment under the legal assumption that he or she would want treatment.

17. All persons who will have access are required to...
What types of disclosures do not require patient permission?
have a unique password and it should be changed frequently
Standard
U.S. goverment

18. Medical records can be released w/o consent to...
judge made law from decisions of a court - interpretation of constitution and statuatory law - often known as precedents
Ethical
h/c workers --qualified people of organizations(perf. data processinf or transcript) -certain gov. auth. (pub health activities) -appropriate auth(protect vic. of abuse) -law enforcement officials or judicial orders
addresses portability of insurance coverage when employees change or lose their jobs

19. General exceptions for releasing patient information
parent of a minor - legal guardian - Agent (patient selected on behalf in h/c power of attorney)
a contract that comes about from the actions of the parties rather than words
Minimum necessary
Privacy

20. Releasing patient information
generally only patient can auth release of own medical record - there are a few exceptions
Standard
false and malicious writing about another
safeguards health & wealthfare of Medicare/Medicaid beneficiaries & protect program integrity

21. HI
Health Information
must be reported to authorities by law
Treatment - payment and health care operations (TPO)
although medical records are confidential - there are times when they can be released w/o a patient consent.

22. Misfeasance
Covered transactions
concerns noncriminal disputes between private parties
improper performance of an otherwise lawful act. civil
Privacy

23. interrogatory
A written set of questions requiring written answers from a plaintiff or defendant under oath
concerns noncriminal disputes between private parties
Health Information
a minor - rather than the parent - must sign the release of patient information

24. EPHI
law that permits a person w/ a legal age and sound mind to give their body to donation
purpose - pride - patience - persistence - perspective
false charges and malicious oral statements about someone
Electronic Protected Health Information

25. Bioethics
Patient rights under HIPAA
Encryption
illegal touching of another person
also called biomedical ethics - the moral dilemmas and issues of advanced medicine and medical research

26. Subpoenas
A court order requiring someone to appear in court on a certain date time and reason. A medical record could be subpoenaed.
improper performance of an otherwise lawful act. civil
Type of consent in which a patient who is unable to give consent is given treatment under the legal assumption that he or she would want treatment.
Patient Identifiable Information

27. HIPAA
Health Insurance Portability and Accountability Act of 1996 (passed by congress because of portability problems - also to protect PHI)
purpose - pride - patience - persistence - perspective
Code sets
addresses portability of insurance coverage when employees change or lose their jobs

28. Privacy Officer
addresses portability of insurance coverage when employees change or lose their jobs
Tort
Every office should have one! - responsible for making surethat thise office is HIPAA compliant - privacy officer should be.. an effective communicator with ability to answer questions about sespected HIPPA violations and complaints
regular - in a secure location

29. Patient records are _____________ so not all staff will have access.
Transaction
improper performance of an otherwise lawful act. civil
must be reported to authorities by law
need to know

30. Electronic exchanges of information between two covered-entity business partners using HIPAA mandated transaction standards.
Insurance portability - administrative simplification - privacy and security
Patient
allows patients to give directions to health care providers about treatment choices in circumstances in which the patient may no longer be able to provide that direction. There are two types: Living Will and Durable Power of Attorney
Covered transactions

31. Battery
false charges and malicious oral statements about someone
Designated record set
illegal touching of another person
h/c workers --qualified people of organizations(perf. data processinf or transcript) -certain gov. auth. (pub health activities) -appropriate auth(protect vic. of abuse) -law enforcement officials or judicial orders

32. A general HIPAA requirement
Privacy
Electronic Protected Health Information
Standard
substance abuse treatment

33. Professional Negligence
Notice of Privacy Practices (NPP)
Prohibits discrimination preventing indiviualds with physical or mental disabilities or chronic illness - from accessing public services & accomodations. Employers requires 'reasonable accommodation' be provided so they can perform duties.
malpractice
safeguards health & wealthfare of Medicare/Medicaid beneficiaries & protect program integrity

34. Slander
illegal touching of another person
although medical records are confidential - there are times when they can be released w/o a patient consent.
false charges and malicious oral statements about someone
addresses portability of insurance coverage when employees change or lose their jobs

35. NPP
Invasion of Privacy Publishing
Notice of Privacy Practices
A court order requiring someone to appear in court on a certain date time and reason. A medical record could be subpoenaed.
Regulations

36. TPO
concerns noncriminal disputes between private parties
Notice of Privacy Practices
treatment - payment - & healthcare operations
Electronic Protected Health Information

37. Under some circumstances ...
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties
a minor - rather than the parent - must sign the release of patient information
may be disclosed to public health agencies - patient identifiers are removed so it's covered by HIPAA
judge made law from decisions of a court - interpretation of constitution and statuatory law - often known as precedents

38. Medical records used for health care research

39. Libel
Examples of PHI
Medical data from which individual identifiers have been removed; also known as a redacted or blinded record.
false and malicious writing about another
Minimum necessary

40. A written document detailing a health care provider's privacy practices.
Notice of Privacy Practices (NPP)
Individually Identifiable Health Information
should never be released w/o a patient's signed consent or court order
De-Identified Information

41. The ability to control access and protect information from accidental or intentional disclosure to unauthorized persons and from altercation - destruction - or loss
Prohibits discrimination preventing indiviualds with physical or mental disabilities or chronic illness - from accessing public services & accomodations. Employers requires 'reasonable accommodation' be provided so they can perform duties.
Patient Identifiable Information
comes on after a few idle seconds and the use of a privacy screen should be mandatory
security rule

42. Emancipated minors

43. Conforming to proper professional behavior
Psychotherapy notes - information for legal proceedings - information exempted from disclosure under CLIA
may be disclosed to public health agencies - patient identifiers are removed so it's covered by HIPAA
Ethical
Covered transactions

44. The limited amount of patient information to be disclosed - depending on circumstances.
Insurance portability - administrative simplification - privacy and security
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties
Minimum necessary
illegal touching of another person

45. Gunshot wound - child abuse - infectious diseases - required by law - law enforcement purposes.
Health Information
a minor - rather than the parent - must sign the release of patient information
Standard
What types of disclosures do not require patient permission?

46. Treatment means that a health care provider can provide care; payment means that a provider can disclose PHI to be reimbursed; health care operations refers to HIPAA approved activities and transactions.
Treatment - payment and health care operations (TPO)
state laws setting time limit for bringing a lawsuit
judge made law from decisions of a court - interpretation of constitution and statuatory law - often known as precedents
Ethical

47. Fax Machines and HIPAA
false charges and malicious oral statements about someone
located in a secured and private space
in order to maintain patient confidentiality - fax machines must be kept in areas not accessible to patients.
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers

48. OIG - Office of the Inspector General
Patient Identifiable Information
also called biomedical ethics - the moral dilemmas and issues of advanced medicine and medical research
safeguards health & wealthfare of Medicare/Medicaid beneficiaries & protect program integrity
Code sets

49. Disclosure without Consent
Electronic transmission
in order to maintain patient confidentiality - fax machines must be kept in areas not accessible to patients.
although medical records are confidential - there are times when they can be released w/o a patient consent.
Insurance portability - administrative simplification - privacy and security

50. Statutory
The body of laws made by states is their own statutory laws
Regulations
comes on after a few idle seconds and the use of a privacy screen should be mandatory
in order to maintain patient confidentiality - fax machines must be kept in areas not accessible to patients.