Understanding HIPAA for the Healthcare Provider Final Examination

________ defined as the attempted or successful unauthorized access, use, disclosure, modification or destruction of information.

______ deals with gaining entry to areas where e-phi is stored as well as access to where the computer hardware is located.

The important issues addressed by HIPAA include all of the following EXCEPT:

The Security Officer must prepare a/an ______ that includes a Data Back -up plan, a disaster recover plan and Emergency mode Operations Plan.

A business that submits Healthcare Claims on behalf of a Medical provider is known as a/an:

The Level I of the healthcare procedural  coding system is the _______

There are 3 Types of Covered Entities. They include all the following EXCEPT

The Healthcare Provider Identifier is a HIPAA mandated identification for all Providers that is called the _______

One person in each Covered Entity must be designated as a HIPAA Officer.

HIPAA mandates do not allow providers to send out reminder cards to the the patients by mail.

The __ wrote The Privacy Rule to mandate nationwide standards to protect private health information.

HIPAA mandates allow a provider to treat a patient even if they refuse to sign the receipt for the notice of Privacy Practices.

Under The Privacy Rule the healthcare provider needs the patient’s authorization signature to bill the patient’s insurance carrier.

According to HIPAA mandates, under no circumstances should a Healthcare provider disclose healthcare information to a patients’ employer without the patients written authorization.

Which of the following scenarios DOES NOT require the patient’s authorized signature in order to disclose?

According to HIPAA mandate, a Fax Machine may be used as long as the Fax includes all of the following EXCEPT:

The Security Officer’s duties may be performed by the ____ in a smaller covered entity.

A/an___ is a report on the difference between where an entity stands and where they need to be as far as HIPAA compliance.

The Privacy Rule protects all __ from which there is a reasonable basis to believe can be used to identify an individual.

__ is considered to be the exposure necessary to read, write, modify, or communicate data and information.

There are 3 types of safeguards when it comes to The Security Rule.  They include all of the following EXCEPT:

HIPAA has very strict requirements as to the types and levels of technology a Covered Entity uses.  The Rule of Thumb is to always use the highest level of technology available.

The ____ is responsible to maintain a record of access authorization of employees.

HIPAA passed both houses of congress and became public in the year…

A business or organization that transmits electronic protected information (EPHI) and is required to follow the HIPAA mandates is known as a/an: