#1
Which law governs the privacy of health information in the United States?
Health Insurance Portability and Accountability Act (HIPAA)
Americans with Disabilities Act (ADA)
The Health Information Technology for Economic and Clinical Health Act (HITECH)
Family Educational Rights and Privacy Act (FERPA)
#2
What does PHI stand for in the context of health information privacy?
Personal Health Identifier
Protected Health Information
Private Health Insurance
Public Health Institution
#3
Which entity is responsible for enforcing HIPAA regulations?
Department of Health and Human Services (HHS)
Federal Bureau of Investigation (FBI)
Centers for Disease Control and Prevention (CDC)
Occupational Safety and Health Administration (OSHA)
#4
What is the consequence of non-compliance with HIPAA regulations?
No consequences
Verbal warning
Fines and penalties
Community service
#5
Which of the following is NOT considered a PHI identifier under HIPAA?
Patient's name
Social Security Number
Medical record number
Date of birth
#6
Which of the following is NOT considered a safeguard for protecting health information?
Encryption
Firewalls
Open access policies
Password protection
#7
What is the primary role of a HIPAA Privacy Officer within a healthcare organization?
Ensuring patient care quality
Developing medical treatment plans
Overseeing compliance with HIPAA regulations
Managing hospital finances
#8
What is the purpose of the Security Rule under HIPAA?
To protect the privacy of health information
To establish national standards for electronic healthcare transactions
To implement security measures to protect electronic health information
To regulate health insurance coverage for individuals
#9
Which of the following is an example of a breach of protected health information (PHI) under HIPAA?
Accidental disclosure of PHI to an unauthorized individual
Accessing PHI with proper authorization
Encrypting PHI for secure storage
Using PHI for research purposes with patient consent
#10
What is the purpose of the Breach Notification Rule under HIPAA?
To establish national standards for electronic healthcare transactions
To protect the privacy of health information
To notify affected individuals and regulatory bodies in the event of a breach of protected health information (PHI)
To regulate health insurance coverage for individuals
#11
Under HIPAA, what is the maximum timeframe for reporting a breach of protected health information (PHI) to affected individuals?
60 days
30 days
45 days
90 days
#12
What does the term 'minimum necessary' mean in the context of HIPAA?
Using the smallest amount of PHI necessary to accomplish the intended purpose
Accessing all available PHI for comprehensive analysis
Sharing PHI with as many parties as possible
Collecting PHI without any restrictions
#13
What is the primary goal of the Security Risk Assessment (SRA) required under HIPAA?
To identify potential threats and vulnerabilities to electronic protected health information (ePHI)
To ensure compliance with medical billing procedures
To establish eligibility for healthcare services
To manage patient records
#14
What is the purpose of the Privacy Rule under HIPAA?
To regulate the use of electronic health records
To protect the privacy of individuals' health information
To establish standards for medical billing
To provide guidelines for healthcare facility design
#15
What does the term 'de-identification' mean in the context of health information under HIPAA?
Encrypting health information for secure storage
Removing certain identifiers from health information to prevent identification of individuals
Sharing health information with multiple parties for research purposes
Using health information for marketing purposes