HCCA - CHPC Study Questions

HCCA - CHPC Study Questions (MASTER FLASHCARDS) Updated Actual Exam

Question 1: What are the required core elements of a VALID

Authorization. Ref. 45 CFR 164.508(b)

CORRECT ANSWER: 1. Description 2. Purpose

use/disclosure 3. Recipient 4. Authorized person making the disclosure 5. Expiration date 6. Signature/dates

Question 2: 38 U.S.C. 7332 deals with confidentially of

patient medical record information related to:

• drug abuse, sexually transmitted diseases, and tuberculosis
• HIV/AIDS status
• drug abuse, alcoholism, infection with the HIV virus, and

sickle cell anemia

• mental illness, HIV status, drug and alcohol abuse

CORRECT ANSWER: c. drug abuse, alcoholism, infection

with the HIV virus, and sickle cell anemia

Question 3: 45 CFR 164 - Subpart C outlines the three

safeguards to ensure the _____, ____, ____ of ePHI that both, CE and BA must implement to ensure compliance and protect against anticipated threats, and/or reasonably anticipated uses/disclosures (incidental/inadvertent/unintentional)

CORRECT ANSWER: Confidentiality, integrity, availability

Question 4: An agency investigating a complaint of a HIPAA

privacy violation contacts the facility for patient information.

The facility's policy should be to disclose all information:

• If a search warrant is presented
• That is required by state law
• If the patients have been informed
• Requested except for PHI

CORRECT ANSWER: b. That is required by state law

Question 5: Also known as the "Stimulus Act" or the

"Recovery Act", enacted in 2009; its main purpose was to create jobs and stimulate economic growth; it also included provisions to promote health information technology

CORRECT ANSWER: American Recovery and

Reinvestment Act (ARRA)

Question 6: Are Nursing Records considered part of the

Educational Records:

• Yes, nurses don't diagnose or treat individuals, and by

licensure, they can't practice medicine. For instance records created/maintained by a public health or school nurse providing immunizations to students

• No, student health or nurse records are not part of the

Educational Records, even if they receive funding from the Department of Education

CORRECT ANSWER: a. Yes, nurses don't diagnose or treat

individuals, and by licensure, they can't practice medicine.For instance records created/maintained by a public health or school nurse providing immunizations to students.

Question 7: Are there certain rules for PHI disclosure in cases

of an emergency?

• No, especially if the patient is not able to provide consent.
• No, there is not a separation of emergency treatment.

• Yes, PHI can be released for emergency treatment.
• No, PHI cannot ever be disclosed without patient consent.

CORRECT ANSWER: c. Yes, PHI can be released for

emergency treatment.

Question 8: Breach is assumed unless covered entity can

demonstrate _____

CORRECT ANSWER: LoProCo (Low Probability of data

Compromised)

Question 9: Breach Notification Content:

CORRECT ANSWER: 1. Brief Description and Date of

Event 2. Date of Discovery 3. Description of the types of unsecured PII and PHI 4. Steps the effected individual may take to protect themselves 5. Brief description of steps taken to investigate, mitigate and protect against any further Breaches 6. Contact procedures to ask questions, including a toll-free number, email address, website, and/or postal address 7. May include discretionary content such as a description of Workforce Member sanctions.