Test your basic knowledge |

HIPAA

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Fax Machines and HIPAA
in order to maintain patient confidentiality - fax machines must be kept in areas not accessible to patients.
it must have an accompanying disclaimer stating the fax information cannot be shared with any other party w/o patient's written consent
Transaction
Every office should have one! - responsible for making surethat thise office is HIPAA compliant - privacy officer should be.. an effective communicator with ability to answer questions about sespected HIPPA violations and complaints

2. Bioethics
it must have an accompanying disclaimer stating the fax information cannot be shared with any other party w/o patient's written consent
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment
also called biomedical ethics - the moral dilemmas and issues of advanced medicine and medical research
Malfeasance

3. Implied contract
failure to act with the standard of care that a reasonable person would exercise under the same circumstances
a contract that comes about from the actions of the parties rather than words
A written set of questions requiring written answers from a plaintiff or defendant under oath
Psychotherapy notes - information for legal proceedings - information exempted from disclosure under CLIA

4. Statue of limitations
Portability
located in a secured and private space
state laws setting time limit for bringing a lawsuit
Standard

5. Verify the identification of anyone requesting patient information.
purpose - pride - patience - persistence - perspective
state law that protects healthcare professionals from liability when they provide emergency assistance/services within their scope of training
Limited data set
Verification

6. Clearinghouse
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers
security rule
generally only patient can auth release of own medical record - there are a few exceptions
Privacy

7. Common law
Tort
judge made law from decisions of a court - interpretation of constitution and statuatory law - often known as precedents
A court order requiring someone to appear in court on a certain date time and reason. A medical record could be subpoenaed.
treatment - payment - & healthcare operations

8. Title I of HIPAA
addresses portability of insurance coverage when employees change or lose their jobs
Notice of Privacy Practices (NPP)
malpractice
Treatment - payment and health care operations (TPO)

9. Disclosure without Consent
Examples of PHI
generally only patient can auth release of own medical record - there are a few exceptions
Individually Identifiable Health Information
although medical records are confidential - there are times when they can be released w/o a patient consent.

10. IIHI
h/c workers --qualified people of organizations(perf. data processinf or transcript) -certain gov. auth. (pub health activities) -appropriate auth(protect vic. of abuse) -law enforcement officials or judicial orders
Individually Identifiable Health Information
parent of a minor - legal guardian - Agent (patient selected on behalf in h/c power of attorney)
treatment - payment - & healthcare operations

11. A reason for each use and disclosure of patient information.
concerned with mostly with h/c providers. It addresses fraud and abuse - administrative simplification and medical liability
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor
Permission
security rule

12. HI
The body of laws made by states is their own statutory laws
Health Information
Health Insurance Portability and Accountability Act of 1996 (passed by congress because of portability problems - also to protect PHI)
only those who meed to know should have access to patient information

13. Hardware or software designed to prevent unauthorized access to electronic information.
state laws setting time limit for bringing a lawsuit
Firewalls
Every office should have one! - responsible for making surethat thise office is HIPAA compliant - privacy officer should be.. an effective communicator with ability to answer questions about sespected HIPPA violations and complaints
although medical records are confidential - there are times when they can be released w/o a patient consent.

14. Federal law protects patient records dealing with...
substance abuse treatment
regular - in a secure location
Electronic data interchange
treatment - payment - & healthcare operations

15. Ethics
the philosophical study of moral values and rules - conducts
Every office should have one! - responsible for making surethat thise office is HIPAA compliant - privacy officer should be.. an effective communicator with ability to answer questions about sespected HIPPA violations and complaints
testimony under oath
Designated record set

16. Data must be backed up at ___________ and those back-up files should be stored ________.
may be disclosed to public health agencies - patient identifiers are removed so it's covered by HIPAA
Insurance portability - administrative simplification - privacy and security
improper performance of an otherwise lawful act. civil
regular - in a secure location

17. Protected health information from which certain patient identifiers have been removed
Electronic transmission
Limited data set
Designated record set
Tort

18. Libel
false and malicious writing about another
malpractice
testimony under oath
human immunodeficiency virus/acquired immune deficiency syndrome (HIV/AIDS)

19. Good samaritan law
state law that protects healthcare professionals from liability when they provide emergency assistance/services within their scope of training
regular - in a secure location
Rule
human immunodeficiency virus/acquired immune deficiency syndrome (HIV/AIDS)

20. In order for a fax document to be HIPAA compliant...

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

21. 5P's of ethical power
Type of consent in which a patient who is unable to give consent is given treatment under the legal assumption that he or she would want treatment.
purpose - pride - patience - persistence - perspective
comes on after a few idle seconds and the use of a privacy screen should be mandatory
Electronic data interchange

22. In HIPAA language health plans - Health care clearinghouses - and all health care providers that transmit HIPAA standard transactions electronically are called covered entities. Hospitals - nursing homes - hospices - pharmacies - physician practices
Notice of Privacy Practices
law that permits a person w/ a legal age and sound mind to give their body to donation
Covered entities
Security

23. Conforming to proper professional behavior
Code sets
Limited data set
Ethical
Encryption

24. Name - address - date of birth - phone/fax numbers - social security number - medical record number - and photographs - nursing and physician notes - billing and other treatment records used during a patient's visit in a hospital or office.
illegal touching of another person
Minimum necessary
state laws setting time limit for bringing a lawsuit
Examples of PHI

25. Key entities
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor
Notice of Privacy Practices (NPP)
Ethical
need to know

26. Slander
false charges and malicious oral statements about someone
concerns noncriminal disputes between private parties
should only be used when no other - more secure mode of transmission is available
Rule

27. Disabilities act

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

28. Sending information over electronic networks.
law that permits a person w/ a legal age and sound mind to give their body to donation
Transaction
a contract that comes about from the actions of the parties rather than words
Electronic transmission

29. Medical records used for health care research

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

30. Civil law
concerns noncriminal disputes between private parties
the philosophical study of moral values and rules - conducts
Minimum necessary
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor

31. Protecting healthcare coverage for employees who change jobs - allowing them to continue existing plans with a new employer.
Portability
Notice of Privacy Practices
Regulations
state laws setting time limit for bringing a lawsuit

32. PII
Malfeasance
What types of disclosures do not require patient permission?
Patient Identifiable Information
regular - in a secure location

33. Implied consent
Regulations
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties
false and malicious writing about another
Type of consent in which a patient who is unable to give consent is given treatment under the legal assumption that he or she would want treatment.

34. The limited amount of patient information to be disclosed - depending on circumstances.
need to know
Verification
Permission
Minimum necessary

35. HIPAA compliance mandates that computer systems must be...
generally only patient can auth release of own medical record - there are a few exceptions
Patient
located in a secured and private space
individuals in their mid- to late teens who legally live outside of parents' or guardians' control

36. Patient records are _____________ so not all staff will have access.
must be reported to authorities by law
need to know
Electronic transmission
Standard

37. Freedom from unauthorized intrusion
treatment - payment - & healthcare operations
Insurance portability - administrative simplification - privacy and security
should never be released w/o a patient's signed consent or court order
Privacy

38. The person recieving treatment
De-Identified Information
illegal touching of another person
Patient
Every office should have one! - responsible for making surethat thise office is HIPAA compliant - privacy officer should be.. an effective communicator with ability to answer questions about sespected HIPPA violations and complaints

39. TPO
failure to act with the standard of care that a reasonable person would exercise under the same circumstances
treatment - payment - & healthcare operations
Designated record set
Every office should have one! - responsible for making surethat thise office is HIPAA compliant - privacy officer should be.. an effective communicator with ability to answer questions about sespected HIPPA violations and complaints

40. Confidentiality

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183

41. Includes records maintained by or for a covered entity.
Designated record set
Regulations
U.S. Department of Health and Human Services (HHS; established national standards for HIPAA) - Centers for Medicare and Medicaid Services (CMS; enforce insurance portability and transaction/code set requirements) - Office for Civil Rights (OCR; enfor
Covered transactions

42. Any wrongdoing for which an action for damages may be brought
only those who meed to know should have access to patient information
regular - in a secure location
same legal standards apply to all patient records whether on paper or computer
Tort

43. Deposition
testimony under oath
individuals such as cleaning staff and consultants who work in the office. These individuals do not need access to patient info but may come in contact while completing their duties
individuals in their mid- to late teens who legally live outside of parents' or guardians' control
Verification

44. What are the 3 purposes of HIPAA?
improper performance of an otherwise lawful act. civil
Insurance portability - administrative simplification - privacy and security
a service company that recieves electronic or paper claims from the provider - checks and prepares them for processing - and transmits them in HIPAA-complaint format to the correct carriers
Standard

45. making known - or using information relating to the private life or affairs of a person without their approval or permission
addresses portability of insurance coverage when employees change or lose their jobs
Verification
Invasion of Privacy Publishing
Examples of PHI

46. NPP
Tort
addresses portability of insurance coverage when employees change or lose their jobs
Limited data set
Notice of Privacy Practices

47. Doctor release of patient
patient discharges doctor with letter - doctor formally withdraws from patient with a certified letter or patient no longer needs treatment
A written set of questions requiring written answers from a plaintiff or defendant under oath
Limited data set
allows patients to give directions to health care providers about treatment choices in circumstances in which the patient may no longer be able to provide that direction. There are two types: Living Will and Durable Power of Attorney

48. Protected Health Information (PHI)
Any information that would identify a patient (name - add - tele - DOB - SSN - email - med. rec. number - etc)
security rule
located in a secured and private space
Health Information

49. Who regulates HIPAA?
a contract that comes about from the actions of the parties rather than words
U.S. goverment
regular - in a secure location
human immunodeficiency virus/acquired immune deficiency syndrome (HIV/AIDS)

50. The use of uniform electronic network protocols to transfer business information between organizations.
in order to maintain patient confidentiality - fax machines must be kept in areas not accessible to patients.
Electronic data interchange
Limited data set
Patient rights under HIPAA