#1
What does HIPAA stand for?
Health Insurance Portability and Accountability Act
Healthcare Information Protection and Authorization Act
Health Information Privacy and Accountability Act
Hospital Insurance Policy and Authorization Act
#2
Which of the following is NOT considered protected health information (PHI) under HIPAA?
Social Security Numbers
Date of Birth
Email Address
Medical Record Numbers
#3
What is the maximum penalty for a HIPAA violation due to willful neglect and not corrected within 30 days?
$50,000 per violation
$100,000 per violation
$250,000 per violation
$1.5 million per violation
#4
Which entity enforces HIPAA regulations?
Centers for Disease Control and Prevention (CDC)
Food and Drug Administration (FDA)
Department of Health and Human Services (HHS)
Occupational Safety and Health Administration (OSHA)
#5
What is the purpose of the HIPAA Privacy Rule?
To establish national standards for electronic healthcare transactions
To protect the privacy and security of individuals' health information
To provide guidance on medical billing practices
To regulate the marketing of healthcare products
#6
Which of the following is NOT considered a covered entity under HIPAA?
Healthcare providers
Health plans
Healthcare clearinghouses
Pharmaceutical companies
#7
What is the primary goal of the HIPAA Breach Notification Rule?
To provide guidance on secure data storage practices
To standardize healthcare record formats
To ensure prompt notification of breaches of unsecured protected health information (PHI)
To establish protocols for electronic health record (EHR) access
#8
What is the purpose of the HIPAA Enforcement Rule?
To establish penalties for non-compliance with HIPAA regulations
To provide guidance on secure data transmission methods
To regulate the use of personal health records
To standardize healthcare record retention policies
#9
Under HIPAA, who is responsible for notifying affected individuals in case of a data breach?
HIPAA Privacy Officer
Healthcare provider's legal team
Health and Human Services (HHS)
Covered Entity or Business Associate
#10
What is the purpose of the HIPAA Administrative Simplification provisions?
To simplify healthcare billing processes
To enhance patient-provider communication
To standardize electronic healthcare transactions
To regulate healthcare facility construction
#11
What is the purpose of the HIPAA Minimum Necessary Rule?
To limit the use, disclosure, and request of protected health information (PHI) to the minimum necessary to accomplish the intended purpose
To ensure maximum disclosure of PHI for research purposes
To allow unrestricted access to PHI by healthcare professionals
To mandate the storage of PHI in non-encrypted formats
#12
Which of the following is NOT a core principle of HIPAA's Privacy Rule?
Individual rights
Administrative requirements
Security standards
Permitted uses and disclosures of PHI
#13
What is the purpose of the HIPAA Privacy Rule's Notice of Privacy Practices?
To inform patients about their rights regarding their protected health information (PHI)
To outline the procedures for filing HIPAA complaints
To establish guidelines for the secure disposal of PHI
To regulate the use of electronic health records (EHRs)
#14
Under HIPAA, what is the maximum time limit for covered entities to provide individuals access to their medical records?
30 days
45 days
60 days
90 days
#15
Which of the following is NOT considered a HIPAA violation?
Unauthorized disclosure of PHI to an individual's family member
Failure to provide a Notice of Privacy Practices to patients
Accidental exposure of PHI due to a software glitch
Intentional access of PHI by a healthcare provider for treatment purposes
#16
What is the Security Rule under HIPAA concerned with?
Safeguarding the confidentiality, integrity, and availability of electronic protected health information (ePHI)
Ensuring equal access to healthcare services
Regulating the sharing of health information between providers
Establishing standards for healthcare billing practices
#17
What is the minimum penalty for a HIPAA violation due to reasonable cause and not corrected within 30 days?
$100 per violation
$1,000 per violation
$10,000 per violation
$50,000 per violation
#18
Which of the following is an example of a physical safeguard under the HIPAA Security Rule?
Access controls
Encryption of data
Emergency access procedures
Workstation security
#19
What is the purpose of the HIPAA Omnibus Rule?
To provide additional protections for electronic health information
To streamline the process of filing HIPAA complaints
To expand the definition of protected health information (PHI)
To mandate healthcare providers to use specific software for data encryption
#20
Which of the following is NOT a requirement of the HIPAA Security Rule?
Implementing technical safeguards
Conducting risk analysis
Establishing disaster recovery plans
Maintaining compliance with dietary guidelines
#21
What is the purpose of the HIPAA Transaction and Code Set Rule?
To regulate the use of medical billing codes
To establish guidelines for electronic healthcare transactions
To define the scope of protected health information (PHI)
To mandate the use of specific healthcare software
#22
Which of the following is NOT a category of safeguards under the HIPAA Security Rule?
Administrative safeguards
Physical safeguards
Technical safeguards
Social safeguards
#23
What is the purpose of the HIPAA Final Omnibus Rule?
To extend HIPAA regulations to international healthcare providers
To enhance patients' rights and strengthen privacy and security protections
To reduce the penalties for HIPAA violations
To exempt small healthcare practices from HIPAA compliance
#24
Which of the following is NOT a requirement for HIPAA-compliant data encryption?
AES-256 encryption algorithm
FIPS 140-2 certified encryption module
SHA-1 hashing algorithm
Use of secure key management practices
#25
What is the purpose of the HIPAA Security Rule's Risk Analysis requirement?
To assess the likelihood of security breaches
To identify potential vulnerabilities and threats to electronic protected health information (ePHI)
To evaluate the financial impact of HIPAA violations
To determine appropriate encryption methods