protempersonnel.com

HIPAA Privacy
Study Guide (pdf format)
Blank Training Certification

Name:

E-mail:

Date:

1. What is an FPO?

Facility Privacy Official
Facility Police Officer

2. Confidential Information includes all of the following except:

Patient Financial Information
User ID
Passwords
Clinical Information

3. Individually identifiable health information may NOT be:

Faxed
Mailed
Sold

4. Which of the following can you disclose after your relationship with the facility ends?

Your Salary
A patient's diagnosis
The company's marketing strategy
Computer network configurations

5.Who is responsible for protecting patients� individually identifiable health information?

CEO
ECO
Physician
All of the above
None of the above

6. It would be appropriate to release patient information to:

The patient's (non-attending) physician brother
The transferring hospital's personnel checking on the patient
The respiratory therapy personnel doing an ordered procedure
A retired physician who is a friend of the family

7. If a person has the ability to access facility or Company systems or applications, they have a right to view any information contained in that system or application. True or False?

True
False

8. Patient information may be attached within a company e-mail sent via the Internet to a business associate to resolve questions related to a patient�s account. True or False?

True
False

9. A patient listing given to a member of the clergy should be restricted by religion and may have the following information except:

Patient Name
Patient Social Security Number
Patient Location
Patient condition in general terms

10. Which of the following is the appropriate person with whom to share patient information even if the patient has NOT specifically authorized the release of information to the individual:

A former physician of the patient who is concerned about the patient
A colleague who needs information about the patient to provide proper care
A friend of the patient
A pharmaceutical sales representative who is offering a fee for a list of patients to whom he could send a free sample of his product.

11. The acronym for HIPAA stands for :

Health Insurance Portability and Accountability Act
Health Information Publication and Accumulation Act
None of the above

12. Confidential information must not be shared with another unless the recipient has:

An okay from a doctor
The need to know
Permission from Human resources
All of the above

13.HIPAA privacy regulations prevent facilities from storing the medical record at the patient�s bedside. True or False?

True
False

14.It is part of our jobs to learn and practice the many ways we can help protect the confidentiality, integrity and availability of electronic information assets. True or False?

True
False

15.Patients have a right to access their health information. True or False?

True
False

16. What is the standard for accessing patient information:

A need to know for the performance of your job
If a physician asks you the diagnosis of the patient
Just because you are curious
You are a relative of the patient

17. Can you access your own medical record via the Meditech system � Yes or No?

Yes
No

18. If an employee has medical testing at a facility, the appropriate way for him or her to access the test results is:

Complete the release of information form in HIM and receive a copy of the results
Check the computer system for his or her own results
Get a fellow employee to access the results while looking over his or her shoulder
Call a friend in the department where the test was done to get the results for the employee

19. Patient or confidential information may be sent through Atlas or the Internet with guaranteed security. True or False?

True
False

20. Patient information is considered individually identifiable if which of the following elements are included:

Social Security Number
Name
Fingerprint
All of the above

21. Patients do not need to sign a form acknowledging receipt of the facility�s Notice of Privacy Practices. True of False?

True
False

22. Only clinicians may access a patient�s health information. True or False?

True
False

23. Under the privacy rule each facility must designate _________________ who is responsible for the development and implementation of privacy policies and procedures for the facility:

A privacy official
A HIPAA officer
An Ethics and Compliance Officer
A mediator

24. A visitor who asks for a patient by name may receive the following information except:

Patient name
Patient condition in general terms
Patient location
Patient diagnosis

25. Copies of patient information may be disposed of in any garbage can in the facility. True or False?

True
False

ACKNOWLEDGEMENT OF TRAINING

I have read and understand the training guidelines for HIPAA Privacy