It requires appropriate safeguards to protect the privacy of protected health information and sets limits and conditions on the uses and disclosures that may be made of such information without patient authorization.

Please select the correct answer from the list below.

True or False: Patients may release their own PHI but this doesn’t allow a Covered Entity to do so.

A person in charge of making all policies and procedures for the Covered Entity is called?

The Privacy Rule does not allow for special situations such as for minor with parents or guardians, law enforcement, marketing, research studies and fund-raisers.

What does the Privacy Rule cover? (Select TWO)

A patient’s full name that is also tied to a specific practice becomes PHI.

Choose the incorrect item: Which of the following is NOT mandated to be included in the Notices of Privacy Practices (NPP)?

The duties of a Privacy Officer must be in his/her job description, not an as a duty that was added on.

Which is NOT true about HIPAA Privacy Rule?

In marketing a practice, patient’s data may be used with minimal limitations.

What does NPP stands for?

In extreme situations of negligence and failed to perform his/her duty, the Privacy Officer can be held accountable for HIPAA violations.

What are the patient’s rights about their own personal information?

Stanley is the newly hired Privacy Officer of Bethel Pediatrics and he is in charge of all policies for the Covered Entity, not just those related to HIPAA.

In a Mental Health situation where the patient wants complete access to their chart, the law allows for occasions where this will not be granted to the patient. Is this statement valid?

A Business Associate Agreement is an agreement between the Privacy Officer and the Covered Entity.

What type of agreement does the Privacy Rule require all vendors that have access to PHI of the Covered Entity to have in place?

HIPAA Privacy Rule establishes national standards to protect individuals’ medical records and other personal health information. It applies to health plans and healthcare providers that conduct certain healthcare transactions electronically.

Patients must sign a document at the Covered Entity’s office. What type of Document is this?

NPP must be kept somewhere in the practice that is less accessible to patients.