#1
Which regulation establishes the standards for the privacy of individually identifiable health information?
#2
What does PHI stand for in the context of healthcare privacy?
Personal Health Identification
Protected Health Information
Private Health Insurance
Public Health Initiative
#3
Which of the following is an example of a security measure to protect healthcare information?
Regularly updating antivirus software
Sharing login credentials among staff
Storing patient records in an unlocked cabinet
Accessing patient records from personal devices
#4
Which of the following is NOT considered a covered entity under HIPAA?
Healthcare provider
Health plan
Healthcare clearinghouse
Pharmaceutical company
#5
Which of the following entities is NOT considered a business associate under HIPAA?
Health information exchange organizations
Healthcare billing companies
Pharmaceutical manufacturers
Third-party administrators
#6
Who is primarily responsible for ensuring compliance with healthcare confidentiality regulations within a healthcare organization?
IT department
Legal department
Security department
Healthcare providers and staff
#7
Under HIPAA, what is considered a covered entity?
Any entity that processes credit card payments
Any entity that collects personal information online
Healthcare providers, health plans, and healthcare clearinghouses
Any entity that provides internet services
#8
Which of the following is NOT considered a breach of healthcare confidentiality?
Accidental disclosure of patient information to an unauthorized individual
Unauthorized access of patient records by a healthcare provider
Intentional sharing of patient information for treatment purposes
Loss of a laptop containing unencrypted patient data
#9
What is the role of the Office for Civil Rights (OCR) in enforcing healthcare privacy regulations?
Developing healthcare policies and procedures
Providing training to healthcare staff
Investigating complaints and enforcing HIPAA rules
Managing healthcare facility accreditation
#10
What action should be taken in the event of a healthcare data breach?
Notify affected individuals, the Secretary of Health and Human Services, and, in some cases, the media
Ignore the breach unless it involves financial information
Notify only the affected healthcare providers
Report the breach to local law enforcement
#11
What is the purpose of the Health Information Technology for Economic and Clinical Health (HITECH) Act?
To regulate the sale of medical devices
To promote the adoption and meaningful use of health information technology
To establish standards for clinical trials
To enforce healthcare billing regulations
#12
What is the purpose of a Business Associate Agreement (BAA) in healthcare?
To establish a partnership between healthcare providers
To outline responsibilities and obligations regarding protected health information
To advertise healthcare services to the public
To provide insurance coverage for healthcare facilities
#13
What is the purpose of a Notice of Privacy Practices (NPP) in healthcare?
To inform patients about their rights regarding their protected health information
To provide patients with medical treatment recommendations
To request consent from patients for every healthcare procedure
To advertise healthcare services to potential patients
#14
Which federal agency is responsible for enforcing the privacy and security provisions of the Health Information Technology for Economic and Clinical Health (HITECH) Act?
Office for Civil Rights (OCR)
Centers for Medicare & Medicaid Services (CMS)
Food and Drug Administration (FDA)
Department of Homeland Security (DHS)
#15
What is the purpose of a Data Use Agreement (DUA) in healthcare?
To outline the terms for the exchange of protected health information
To provide insurance coverage for healthcare facilities
To establish a partnership between healthcare providers
To regulate the sale of medical devices