#1
Which law governs the protection of healthcare information privacy in the United States?
Health Insurance Portability and Accountability Act (HIPAA)
Americans with Disabilities Act (ADA)
Family and Medical Leave Act (FMLA)
Sarbanes-Oxley Act (SOX)
#2
What does PHI stand for in the context of healthcare information?
Personal Health Insurance
Public Health Initiative
Protected Health Information
Private Health Investigation
#3
What is the purpose of a Business Associate Agreement (BAA) in healthcare information privacy?
To establish guidelines for employee conduct
To regulate employee salaries
To outline the responsibilities of third-party entities handling PHI
To manage inventory of medical supplies
#4
Which organization is responsible for enforcing HIPAA regulations?
Centers for Disease Control and Prevention (CDC)
Department of Health and Human Services (HHS)
Food and Drug Administration (FDA)
Occupational Safety and Health Administration (OSHA)
#5
What is the purpose of the Breach Notification Rule under HIPAA?
To require covered entities to notify affected individuals and the Department of Health and Human Services (HHS) of breaches of unsecured PHI
To establish guidelines for employee conduct
To regulate employee salaries
To manage inventory of medical supplies
#6
Which of the following is NOT considered a covered entity under HIPAA?
Healthcare provider
Health plan
Pharmaceutical company
Healthcare clearinghouse
#7
What is the purpose of a Notice of Privacy Practices (NPP) in healthcare?
To provide information about a patient's medical condition
To inform patients about their privacy rights and how their information may be used
To schedule appointments for patients
To collect patient payments
#8
Which of the following is an example of a breach of healthcare information privacy?
Accessing a patient's medical records with proper authorization
Sharing a patient's diagnosis with their healthcare provider
Accidentally sending an email containing PHI to the wrong recipient
Obtaining patient consent before sharing their medical information
#9
Which of the following is NOT covered by the Privacy Rule under HIPAA?
Protected Health Information (PHI)
Individually Identifiable Health Information (IIHI)
De-identified Health Information
Patient's dietary preferences
#10
What is the purpose of the HIPAA Enforcement Rule?
To establish guidelines for employee conduct
To regulate the pricing of healthcare services
To strengthen enforcement mechanisms for HIPAA violations
To manage inventory of medical supplies
#11
Which of the following is NOT considered a breach of healthcare information privacy under HIPAA?
Unauthorized access of patient records by an employee
Accidental disclosure of PHI to the wrong recipient
A healthcare provider sharing PHI with a patient's family member without consent
Secure transmission of PHI between authorized parties
#12
What is the role of a HIPAA Privacy Officer within a healthcare organization?
To ensure compliance with HIPAA regulations
To handle billing and insurance claims
To oversee medical research projects
To manage facility maintenance
#13
What is the purpose of the Health Information Technology for Economic and Clinical Health (HITECH) Act?
To improve healthcare quality, safety, and efficiency through the use of information technology
To regulate the pricing of healthcare services
To provide free healthcare services to economically disadvantaged individuals
To establish guidelines for medical research ethics
#14
Which of the following is an example of a technical safeguard under HIPAA?
Employee training programs
Security incident procedures
Access controls
Workstation use policies
#15
Which of the following is NOT considered protected health information (PHI) under HIPAA?
Name and address
Social security number
Medical diagnosis
Email address
#16
What is the primary purpose of the Privacy Rule under HIPAA?
To ensure the security of electronic health information
To protect the privacy of individually identifiable health information
To regulate the pricing of healthcare services
To establish standards for the use of electronic transactions in healthcare
#17
What is the purpose of the Security Rule under HIPAA?
To regulate the pricing of healthcare services
To protect the privacy of individually identifiable health information
To establish standards for the use of electronic transactions in healthcare
To ensure the security of electronic protected health information (ePHI)
#18
Which of the following is NOT considered a physical safeguard under HIPAA?
Facility access controls
Workstation security
Access control and validation procedures
Employee background checks
#19
Which of the following is NOT a key component of healthcare information privacy and compliance?
Data security measures
Patient consent forms
Risk assessments
Employee background checks
#20
What is the primary purpose of the Minimum Necessary Standard under HIPAA?
To ensure that only the minimum amount of PHI necessary is used or disclosed
To regulate employee salaries
To provide free healthcare services
To establish guidelines for employee conduct
#21
Which of the following is a key principle of the General Data Protection Regulation (GDPR) concerning healthcare data?
Data minimization
Data monetization
Data centralization
Data standardization
#22
What is the term used to describe the process of converting data into a secret code to prevent unauthorized access?
Encryption
Decryption
Obfuscation
Transcription
#23
Which of the following is NOT a requirement of the Security Rule under HIPAA?
Implementing encryption of health information
Conducting regular risk assessments
Providing training on security policies and procedures
Obtaining patient consent for all disclosures of PHI
#24
What is the purpose of the Omnibus Rule under HIPAA?
To strengthen privacy and security protections for PHI
To regulate the pricing of healthcare services
To establish guidelines for employee conduct
To manage inventory of medical supplies
#25
What is the penalty for HIPAA violations?
Fines up to $50,000
Criminal charges
Revocation of medical license
Civil monetary penalties ranging from $100 to $50,000 per violation