Please review all the HIPAAwise™  Quiz 4 answers below:
​

Question 1 - Why is the Privacy Rule important?

• Ensures that my tax bill is not seen by anyone
• Sets procedures for how a privacy fence needs to be installed
• Answer:  Gives individuals rights to control the use and disclosure of PHI
• Gives individuals rights to march at the capital about their privacy rights

Question 2 - PHI includes all health information that is used/disclosed - except PHI in oral form.

• Answer:  False

Question 3 - If you suspect someone is violating your organization's privacy policy, you should:

• Say nothing
• Answer:  Report the activity to your supervisor for further follow-up
• Approach the person yourself and inform them of the correct way to do things
• Watch the person closely in order to determine that you are correct with your suspicions

Question 4 - It is OK to take PHI such as healthcare forms home with you.

• Answer:  No

Question 5 - It is OK to walk away from your computer without locking it or logging off.

• Answer:  No

Question 6 - You are responsible for your username/password when accessing the computer system as well as all information accessed under this login.

• Answer:  True

Question 7 - Which of the following is NOT a Covered Entity?

Healthcare provider

• Answer:  Employer
• Health plan
• Healthcare clearinghouse

Question 8 - In which of the following situations is a Business Associate contract not required?

• With persons or organizations whose functions or services do not involve the use or disclosure of PHI
• With a person or organization that acts merely as a conduit for PHI
• With a financial institution that processes payments
• Answer: All of the above

Question 9 - Minimum Necessary Disclosure means using the minimum amount of PHI necessary to accomplish the intended purpose of the use or disclosure.

• Answer:  True

Question 10 - A Business Associate Contract is required between a Covered Entity and Business Associate if PHI will be shared between the two.

• Answer:  True

Question 11 - All of the following can be considered ePHI, EXCEPT:

• Electronic health records (EHRs)
• Computer databases with treatment history
• Answer:  Paper claims records
• Electronic claims
• Digital x-rays

Question 12 - Administrative safeguards are:

• Door locks, screen savers/locks, fireproof and locked record storage
• Passwords, security logs, firewalls, data encryption
• Answer:  Policies and procedures, training, internal audits

Question 13 - Physical safeguards are:

• Answer:  Door locks, screen savers/locks, fireproof and locked record storage
• Passwords, security logs, firewalls, data encryption
• Policies and procedures, training, internal audits

Question 14 - Technical safeguards are:

• Door locks, screen savers/locks, fireproof and locked record storage
• Answer:  Passwords, security logs, firewalls, data encryption
• Policies and procedures, training, internal audits

Question 15 - Which of these statements accurately reflects the definition of PHI?

• PHI does not include protected health information in transit
• PHI does not include a physicians hand written notes about the patient's treatment
• PHI does not include data that is stored or processed
• Answer:  PHI includes protected health information stored on any form of media

Finished