Which regulation sets national standards for the protection of individually identifiable health information?
HIPAA
FERPA
GDPR
COPPA
#2
What does HIPAA stand for?
Healthcare Information Privacy and Protection Act
Healthcare Information Portability and Accountability Act
Healthcare Insurance Portability and Accountability Act
Healthcare Information Protection and Assurance Act
#3
Which of the following is NOT considered protected health information (PHI) under HIPAA?
Name
Email address
Social Security Number
Medical record number
#4
What is the primary purpose of the GDPR in relation to healthcare?
To ensure data subjects have more control over their personal data
To impose strict penalties on healthcare providers
To mandate the use of specific encryption algorithms
To restrict healthcare data sharing between countries
#5
What is the minimum necessary standard under HIPAA?
Healthcare providers must share all patient information with any requesting entity
Healthcare providers must limit the use, disclosure, and request of protected health information to the minimum necessary to accomplish the intended purpose
Healthcare providers are not required to consider the necessity of sharing patient information
Healthcare providers must obtain patient consent before sharing any information
#6
What is the purpose of a business associate agreement (BAA) in the context of HIPAA?
To exempt business associates from HIPAA regulations
To transfer all liability to the business associate
To establish the permitted uses and disclosures of protected health information by the business associate
To allow business associates to access patient information without restrictions
#7
What is the purpose of the Health Information Technology for Economic and Clinical Health (HITECH) Act?
To provide economic incentives for healthcare providers to adopt electronic health records
To promote the use of telemedicine services
To establish national standards for healthcare insurance coverage
To strengthen privacy and security protections for health information
#8
Which of the following is NOT considered a covered entity under HIPAA?
Healthcare provider
Health insurance company
Pharmaceutical company
Healthcare clearinghouse
#9
Which entity enforces HIPAA regulations?
Department of Health and Human Services (HHS)
Federal Bureau of Investigation (FBI)
Food and Drug Administration (FDA)
Centers for Medicare & Medicaid Services (CMS)
#10
Which of the following is NOT a requirement of the HIPAA Security Rule?
Implementing physical safeguards
Conducting regular risk assessments
Encrypting all electronic protected health information (ePHI)
Providing training on security policies and procedures to all employees
#11
What is the purpose of the HITECH Act?
To enhance the privacy and security protections of health information
To repeal HIPAA regulations
To decrease penalties for HIPAA violations
To eliminate the need for business associate agreements
#12
Under the GDPR, who is primarily responsible for ensuring compliance within an organization?
Data subjects
Data Protection Officer (DPO)
Third-party vendors
Regulatory agencies
#13
What is the purpose of the Security Rule under HIPAA?
To ensure the confidentiality, integrity, and availability of electronic protected health information (ePHI)
To regulate the sharing of health information among healthcare providers
To mandate the use of specific encryption algorithms
To establish guidelines for patient consent
#14
Which of the following rights do data subjects have under the GDPR?