#1
Which of the following is a fundamental principle of record keeping in healthcare?
Public access to all records
Accuracy and completeness
Limited use of personal data
Use of paper records only
#2
HIPAA stands for:
Health Insurance Probability and Accountability Act
Health Insurance Portability and Accountability Act
Health Information Privacy and Assurance Act
Health Information Portability and Accountability Act
#3
In the context of patient information, 'PHI' stands for:
Public Health Information
Protected Health Information
Private Healthcare Initiative
Personal Health Identification
#4
A patient's right to obtain a copy of their medical records is guaranteed under:
The Physician's Oath
HIPAA's Privacy Rule
The Affordable Care Act
The American Medical Association's Code of Ethics
#5
Which of the following is a key feature of an Electronic Health Record (EHR) system?
Ability to only view patient records
Integration with only one specific healthcare provider's system
Capability to share patient information securely across different healthcare settings
Limitation on access to patient history and treatment plans
#6
Which of the following is NOT a type of patient record?
Medical history
Financial account
Prescription records
Social media profiles
#7
Electronic Health Records (EHRs) differ from Electronic Medical Records (EMRs) in that:
EHRs contain patient information from a single healthcare provider, while EMRs contain information across multiple healthcare providers.
EMRs contain patient information from a single healthcare provider, while EHRs contain information across multiple healthcare providers.
EHRs are not shareable outside a healthcare organization, whereas EMRs are.
EMRs focus on financial data, whereas EHRs focus on medical data.
#8
The process of de-identifying protected health information to prevent patient identification is known as:
Encryption
Data minimization
Anonymization
Redaction
#9
Which of the following is NOT considered a best practice for securing electronic patient records?
Using strong, unique passwords for system access
Storing backups of patient records on unencrypted USB drives
Implementing access controls to limit who can view patient information
Conducting regular security audits and compliance checks
#10
Consent for the treatment and sharing of patient information must be:
Verbal only
Implied through patient actions
In writing, either electronic or paper form
Provided by a family member if the patient is unavailable
#11
Regarding patient information security, which of the following best describes the concept of 'Minimum Necessary Standard'?
Healthcare providers must limit patient information to the minimum necessary to accomplish the intended purpose.
Patients should only be informed about their health conditions at a minimum level necessary for understanding treatment options.
Healthcare providers should only record the minimum amount of information necessary to reduce data storage costs.
Only a minimum number of healthcare providers should have access to patient records, regardless of treatment needs.
#12
Which of the following scenarios would likely violate HIPAA regulations?
A doctor discussing patient treatment options with another doctor within the same practice without patient consent
A nurse accessing a patient's record to provide necessary treatment
A medical office sending appointment reminders to a patient's email address
A healthcare provider's administrative assistant sharing patient information with a friend who does not work at the facility
#13
When a healthcare provider disposes of old patient records, the method must ensure:
The records are kept in a locked container until picked up by a cleaning crew
The records are shredded, burned, or otherwise completely destroyed
The records are recycled to promote environmental sustainability
The records are archived in a public library for historical purposes
#14
A breach in patient information security must be reported to the affected individuals:
Within 12 months of discovering the breach
Immediately, without unreasonable delay
Within 60 days of discovering the breach
Only if the breach affects more than 500 individuals
#15
An audit trail in electronic health records is important for:
Ensuring that billing is completed accurately
Tracking the sequence of access and changes to patient records for security purposes
Making sure that patient records are shared with all healthcare providers
Preventing patients from accessing their own records