Test your basic knowledge |

HIPAA

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Transmission of information between two parties fro financial or administrative activities.
illegal touching of another person
Transaction
Type of consent in which a patient who is unable to give consent is given treatment under the legal assumption that he or she would want treatment.
addresses portability of insurance coverage when employees change or lose their jobs

2. Subpoenas
A court order requiring someone to appear in court on a certain date time and reason. A medical record could be subpoenaed.
Rule
false charges and malicious oral statements about someone
purpose - pride - patience - persistence - perspective

3. Any wrongdoing for which an action for damages may be brought
Tort
state laws setting time limit for bringing a lawsuit
although medical records are confidential - there are times when they can be released w/o a patient consent.
same legal standards apply to all patient records whether on paper or computer

4. General exceptions for releasing patient information
illegal touching of another person
improper performance of an otherwise lawful act. civil
parent of a minor - legal guardian - Agent (patient selected on behalf in h/c power of attorney)
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties

5. Criminal law
law concerned with public wrongs against society
Covered entities
improper performance of an otherwise lawful act. civil
A written set of questions requiring written answers from a plaintiff or defendant under oath

6. Implied contract
concerned with mostly with h/c providers. It addresses fraud and abuse - administrative simplification and medical liability
De-Identified Information
state laws setting time limit for bringing a lawsuit
a contract that comes about from the actions of the parties rather than words

7. Computes and HIPAA
although medical records are confidential - there are times when they can be released w/o a patient consent.
individuals in their mid- to late teens who legally live outside of parents' or guardians' control
same legal standards apply to all patient records whether on paper or computer
Medical data from which individual identifiers have been removed; also known as a redacted or blinded record.

8. The use of uniform electronic network protocols to transfer business information between organizations.
Electronic transmission
parent of a minor - legal guardian - Agent (patient selected on behalf in h/c power of attorney)
it must have an accompanying disclaimer stating the fax information cannot be shared with any other party w/o patient's written consent
Electronic data interchange

9. Ethics
illegal touching of another person
Code sets
the philosophical study of moral values and rules - conducts
parent of a minor - legal guardian - Agent (patient selected on behalf in h/c power of attorney)

10. Statue of limitations
state laws setting time limit for bringing a lawsuit
Privacy
purpose - pride - patience - persistence - perspective
malpractice

11. HIPAA
Health Insurance Portability and Accountability Act of 1996 (passed by congress because of portability problems - also to protect PHI)
Electronic transmission
Privacy
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers

12. Statutory
The body of laws made by states is their own statutory laws
Minimum necessary
Electronic data interchange
state laws setting time limit for bringing a lawsuit

13. Electronic exchanges of information between two covered-entity business partners using HIPAA mandated transaction standards.
should only be used when no other - more secure mode of transmission is available
regular - in a secure location
Insurance portability - administrative simplification - privacy and security
Covered transactions

14. Uniform anotomical gift act
Rule
Electronic Protected Health Information
law that permits a person w/ a legal age and sound mind to give their body to donation
a minor - rather than the parent - must sign the release of patient information

15. Under some circumstances ...
although medical records are confidential - there are times when they can be released w/o a patient consent.
Verification
a minor - rather than the parent - must sign the release of patient information
individuals in their mid- to late teens who legally live outside of parents' or guardians' control

16. A general HIPAA requirement
testimony under oath
Standard
Health Insurance Portability and Accountability Act of 1996 (passed by congress because of portability problems - also to protect PHI)
U.S. goverment

17. Civil law
have a unique password and it should be changed frequently
Malfeasance
concerns noncriminal disputes between private parties
Rule

18. Confidentiality

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

19. Medical records used for health care research

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

20. HIPAA states...
only those who meed to know should have access to patient information
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers
Portability
human immunodeficiency virus/acquired immune deficiency syndrome (HIV/AIDS)

21. Gunshot wound - child abuse - infectious diseases - required by law - law enforcement purposes.
De-Identified Information
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties
Treatment - payment and health care operations (TPO)
What types of disclosures do not require patient permission?

22. De-Identified Information
improper performance of an otherwise lawful act. civil
U.S. goverment
Minimum necessary
Medical data from which individual identifiers have been removed; also known as a redacted or blinded record.

23. Good samaritan law
Covered entities
Electronic Protected Health Information
state law that protects healthcare professionals from liability when they provide emergency assistance/services within their scope of training
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers

24. Freedom from unauthorized intrusion
The body of laws made by states is their own statutory laws
malpractice
Privacy
state laws setting time limit for bringing a lawsuit

25. Patient records are _____________ so not all staff will have access.
need to know
Covered transactions
Regulations
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties

26. Any set of codes use to encode health care data elements.
U.S. goverment
same legal standards apply to all patient records whether on paper or computer
Electronic Protected Health Information
Code sets

27. Protected Health Information (PHI)
State preemption
Minimum necessary
Any information that would identify a patient (name - add - tele - DOB - SSN - email - med. rec. number - etc)
Portability

28. Emancipated minors

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

29. Professional Negligence
malpractice
judge made law from decisions of a court - interpretation of constitution and statuatory law - often known as precedents
Privacy
Electronic data interchange

30. Sending information over electronic networks.
Electronic transmission
concerned with mostly with h/c providers. It addresses fraud and abuse - administrative simplification and medical liability
A written set of questions requiring written answers from a plaintiff or defendant under oath
Portability

31. Slander
U.S. goverment
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause
false charges and malicious oral statements about someone
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties

32. What are the 3 purposes of HIPAA?
security rule
Individually Identifiable Health Information
Insurance portability - administrative simplification - privacy and security
Designated record set

33. making known - or using information relating to the private life or affairs of a person without their approval or permission
security rule
treatment - payment - & healthcare operations
false charges and malicious oral statements about someone
Invasion of Privacy Publishing

34. The ability to control access and protect information from accidental or intentional disclosure to unauthorized persons and from altercation - destruction - or loss
false and malicious writing about another
Patient
only those who meed to know should have access to patient information
security rule

35. Battery
illegal touching of another person
law that permits a person w/ a legal age and sound mind to give their body to donation
Insurance portability - administrative simplification - privacy and security
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment

36. DII
De-Identified Information
State preemption
Insurance portability - administrative simplification - privacy and security
malpractice

37. Name - address - date of birth - phone/fax numbers - social security number - medical record number - and photographs - nursing and physician notes - billing and other treatment records used during a patient's visit in a hospital or office.
Examples of PHI
Notice of Privacy Practices
Portability
Patient rights under HIPAA

38. Verify the identification of anyone requesting patient information.
Patient Identifiable Information
Verification
failure to act with the standard of care that a reasonable person would exercise under the same circumstances
Medical data from which individual identifiers have been removed; also known as a redacted or blinded record.

39. Treatment means that a health care provider can provide care; payment means that a provider can disclose PHI to be reimbursed; health care operations refers to HIPAA approved activities and transactions.
Insurance portability - administrative simplification - privacy and security
Invasion of Privacy Publishing
Treatment - payment and health care operations (TPO)
addresses portability of insurance coverage when employees change or lose their jobs

40. Federal law protects patient records dealing with...
Notice of Privacy Practices (NPP)
Verification
also called biomedical ethics - the moral dilemmas and issues of advanced medicine and medical research
substance abuse treatment

41. If a states privacy laws are stricter than HIPAA privacy standards - the state laws take precedence.
Covered entities
Standard
Insurance portability - administrative simplification - privacy and security
State preemption

42. A written document detailing a health care provider's privacy practices.
only those who meed to know should have access to patient information
Electronic Protected Health Information
improper performance of an otherwise lawful act. civil
Notice of Privacy Practices (NPP)

43. NPP
addresses portability of insurance coverage when employees change or lose their jobs
it must have an accompanying disclaimer stating the fax information cannot be shared with any other party w/o patient's written consent
Notice of Privacy Practices
Firewalls

44. EPHI
Electronic Protected Health Information
regular - in a secure location
generally only patient can auth release of own medical record - there are a few exceptions
Verification

45. Unlawful act done without permission.
failure to act with the standard of care that a reasonable person would exercise under the same circumstances
Limited data set
De-Identified Information
Malfeasance

46. Title I of HIPAA
individuals in their mid- to late teens who legally live outside of parents' or guardians' control
safeguards health & wealthfare of Medicare/Medicaid beneficiaries & protect program integrity
addresses portability of insurance coverage when employees change or lose their jobs
Firewalls

47. Business Associate Agreements applies to...
Patient rights under HIPAA
failure to act with the standard of care that a reasonable person would exercise under the same circumstances
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties
De-Identified Information

48. The person recieving treatment
Patient
judge made law from decisions of a court - interpretation of constitution and statuatory law - often known as precedents
human immunodeficiency virus/acquired immune deficiency syndrome (HIV/AIDS)
Insurance portability - administrative simplification - privacy and security

49. HI
Electronic data interchange
Health Information
need to know
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers

50. Implied consent
Duty; duty of care - Derelict; breach of the duty of care - Direct cause; legally recognizable injury occurs as a result of breach of care - Damage; wrongful activity must have been the cause
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties
Type of consent in which a patient who is unable to give consent is given treatment under the legal assumption that he or she would want treatment.
h/c workers --qualified people of organizations(perf. data processinf or transcript) -certain gov. auth. (pub health activities) -appropriate auth(protect vic. of abuse) -law enforcement officials or judicial orders