#1
Which of the following is true about HIPAA?
It regulates the use and disclosure of individuals' health information.
ExplanationHIPAA regulates health information use and disclosure.
#2
What does PHI stand for in the context of HIPAA?
Protected Health Information
ExplanationPHI stands for Protected Health Information.
#3
Which entity enforces HIPAA regulations?
Department of Health and Human Services (HHS)
ExplanationHHS enforces HIPAA regulations.
#4
Which of the following is NOT a requirement for HIPAA compliance?
Posting PHI on social media platforms
ExplanationPosting PHI on social media is not compliant with HIPAA.
#5
Which of the following is NOT considered PHI under HIPAA?
Age
ExplanationAge is not considered PHI under HIPAA.
#6
What is the purpose of the Security Rule within HIPAA?
To ensure the confidentiality, integrity, and availability of electronic protected health information (ePHI)
ExplanationSecurity Rule safeguards ePHI confidentiality, integrity, and availability.
#7
What is the maximum penalty for a HIPAA violation due to willful neglect and not corrected within the required time frame?
$1,500,000 per violation
ExplanationPenalty for willful neglect: $1,500,000 per violation.
#8
Under HIPAA, how long must healthcare providers retain records containing PHI?
7 years
ExplanationHealthcare providers retain PHI records for 7 years.
#9
What is the purpose of the Privacy Rule within HIPAA?
To address the use and disclosure of PHI
ExplanationPrivacy Rule manages PHI use and disclosure.
#10
What does the HIPAA Breach Notification Rule require covered entities to do in the event of a breach of unsecured PHI?
Notify affected individuals, the Secretary of Health and Human Services, and, in some cases, the media within a specified time frame
ExplanationBreach Notification Rule mandates timely notification in case of PHI breach.
#11
Which of the following is an example of a HIPAA violation?
Sharing PHI with a patient's family member without permission
ExplanationSharing PHI without consent constitutes a violation.
#12
Which of the following is an example of a HIPAA Business Associate?
IT service provider
ExplanationIT service providers can be HIPAA Business Associates.
#13
Which of the following organizations is NOT typically considered a covered entity under HIPAA?
Financial institution
ExplanationFinancial institutions are not typically HIPAA-covered entities.