#1
Which law governs patient privacy rights in the United States?
Health Insurance Portability and Accountability Act (HIPAA)
Americans with Disabilities Act (ADA)
Food and Drug Administration Modernization Act (FDAMA)
Patient Protection and Affordable Care Act (ACA)
#2
What does HIPAA stand for?
Healthcare Information Privacy and Protection Act
Healthcare Insurance Privacy and Accountability Act
Health Insurance Portability and Accountability Act
Health Information Privacy and Protection Act
#3
Which entity enforces penalties for HIPAA violations?
Centers for Disease Control and Prevention (CDC)
Food and Drug Administration (FDA)
Office for Civil Rights (OCR)
National Institutes of Health (NIH)
#4
What is the purpose of the Privacy Rule under HIPAA?
To regulate the confidentiality of medical records and personal health information
To mandate universal access to all patient health information
To encourage the sale of patient health information to third-party companies
To require patients to share their health information on social media platforms
#5
Which of the following is NOT a requirement of the Notice of Privacy Practices (NPP) under HIPAA?
Informing patients of their rights regarding their protected health information (PHI)
Detailing how patient information will be used and disclosed
Providing patients with a list of all healthcare providers in the country
Explaining how patients can file complaints about privacy violations
#6
What is the purpose of the HIPAA Privacy Rule's 'minimum necessary' standard?
To ensure that healthcare providers access and use the maximum amount of patient information possible
To limit the use and disclosure of protected health information (PHI) to the minimum necessary to accomplish the intended purpose
To mandate the sale of patient information to third-party companies
To require patients to disclose their health information to anyone upon request
#7
Which of the following is NOT considered protected health information (PHI) under HIPAA?
Name
Email address
Medical record number
Social Security number
#8
What is the purpose of a Notice of Privacy Practices (NPP)?
To inform patients about their rights regarding their protected health information
To schedule appointments for patients
To administer medications to patients
To bill insurance companies for medical services
#9
What rights do patients have regarding their protected health information (PHI) under HIPAA?
Right to request access to their PHI
Right to sell their PHI to third parties
Right to demand deletion of their PHI
Right to disclose PHI to anyone without restrictions
#10
Who is responsible for ensuring compliance with HIPAA regulations within a healthcare organization?
Patients
Healthcare providers
Health insurance companies
HIPAA privacy officers
#11
Which of the following entities is NOT considered a covered entity under HIPAA?
Hospitals
Healthcare clearinghouses
Health insurance companies
Social media platforms
#12
What is the purpose of the Security Rule under HIPAA?
To ensure the security and integrity of electronic protected health information (ePHI)
To require healthcare providers to disclose patient information to the public
To mandate physical security measures in healthcare facilities
To allow unrestricted access to patient information for research purposes
#13
What is the penalty for a HIPAA violation in cases of willful neglect?
Up to $10,000 per violation
Up to $50,000 per violation
Up to $100,000 per violation
Up to $250,000 per violation
#14
Which of the following statements about HIPAA's Security Rule is TRUE?
It only applies to electronic health records (EHRs) stored on computers.
It mandates the use of paper-based medical records for increased security.
It requires covered entities to implement safeguards to protect electronic protected health information (ePHI).
It does not address the security of patient information.
#15
What is the purpose of HIPAA's Breach Notification Rule?
To mandate that covered entities provide notification of breaches involving protected health information (PHI)
To allow covered entities to keep breaches of PHI confidential
To penalize individuals for reporting breaches of patient information
To encourage the sale of breached patient information to interested parties
#16
Which of the following is NOT considered a covered entity under HIPAA?
Healthcare provider
Health insurance company
Bank
Healthcare clearinghouse
#17
Under HIPAA, healthcare providers must obtain patient consent for which of the following actions?
Sharing protected health information (PHI) for treatment purposes
Disclosing PHI for billing and administrative purposes
Releasing PHI to law enforcement without a warrant
Using PHI for internal research studies
#18
Which of the following statements about HIPAA's minimum necessary standard is TRUE?
It requires covered entities to disclose all available patient information to third parties.
It mandates that healthcare providers access and use the maximum amount of patient information possible.
It limits the use and disclosure of PHI to the minimum necessary to accomplish the intended purpose.
It only applies to large healthcare organizations with more than 500 employees.
#19
What actions can patients take if they believe their privacy rights under HIPAA have been violated?
File a lawsuit against the healthcare provider
Report the violation to the U.S. Department of Health and Human Services (HHS)
Seek compensation for damages caused by the violation
All of the above
#20
Which of the following is an example of a HIPAA violation?
Sharing a patient's medical information with their consent
Encrypting electronic health records (EHRs) to protect patient privacy
Posting a patient's medical condition on social media without authorization
Providing access to patient records only to authorized personnel
#21
What is the primary purpose of the Breach Notification Rule under HIPAA?
To require covered entities to notify affected individuals and the U.S. Department of Health and Human Services (HHS) of breaches of unsecured protected health information (PHI)
To encourage healthcare providers to withhold information about data breaches
To penalize individuals for reporting breaches of patient information
To mandate the sale of breached patient information to interested parties
#22
What is the difference between a HIPAA breach and a HIPAA violation?
A breach involves unauthorized access, use, or disclosure of protected health information (PHI), while a violation refers to failure to comply with HIPAA regulations.
A breach occurs when patient information is shared with other healthcare providers, while a violation occurs when patients refuse to share their information.
A breach refers to sharing patient information with insurance companies, while a violation refers to sharing information with law enforcement agencies.
A breach and a violation are the same thing and can be used interchangeably.
#23
Under HIPAA, when can a covered entity use or disclose protected health information (PHI) without patient authorization?
When it benefits the healthcare provider financially
When required by law
Only when the patient explicitly agrees
Never
#24
Under HIPAA, what is the time limit for covered entities to notify affected individuals of a breach?
Within 30 days of discovery
Within 60 days of discovery
Within 90 days of discovery
Within 120 days of discovery