What is HIPAA?

Match the acronyms with the correct vocabulary words

Sort elements

PHI
ePHI
CE
BA
BAA
NPP

Protected Health Information
Electronic Protected Health Information
Covered Entity
Business Associate
Business Associate Agreement
Notice of Privacy Practices

Match the term with the definition.

Sort elements

Administrative Safeguards
Physical Safeguards
Technical Safeguards

Administrative functions that should be implemented to meet security requirements and include: assigning or delegating security responsibilities to an individual, training all employees on security principles and reviewing organization policies and procuders, terminating employees' access to informational systems, and reporting and responding to security risks in a timely manner.

Key components that must be implemented to protect electronic systems, equipment, and the data they hold, from threats, environmental hazards and unauthorized intrusion.

Automated processes used to protect data and control access to data.

You can release a patient’s information under the Authorized Disclosure guidelines for which of the following:

Treatment
Payment
Healthcare Operations
Psychotherapy Notes
Marketing
Research
Fundraising

Match the term with the definition.

Sort elements

Treatment
Payment
Healthcare Operations

The provision, coordination and/or managment of a patient's condition through diagnostic testing, referral for services in another specialty, and consultations between providers.

The activities of reimbursement for services, communication with insurers or others involved in the reimbursement process.

Defines all other areas of authorized disclosure including quality assurance activities, competency activities, residency and medical school programs, and business planning and development.

Please select which of the following situations would be considered an incidental disclosure. (Please select all that apply.)

A visitor of your practice overhears a provider's confidential conversation with another provider or patient.
A visitor overhears a phone call you are having with a patient at the front desk.
You are working with a patient in optical while another optician is working with another patient.
A visitor asks you what the patient's name is who was just sitting in the waiting area with them and you answer.
You discuss a patient's health information directly with another patient in your office.

Which of the following are considered top HIPAA violations by the employee?

Removing PHI from the office
Not signing off of locking electronic devices
Release of PHI to unauthorized individual
Releasing PHI for purposes other than treatment, payment or healthcare operations
Unaware of HIPAA and the consequences of a HIPAA Violation
Failure to perform risk analysis
Failure to use encryption to safeguard portable devices
Emailing ePHI to personal email

Fill in the blank.

A violation that shows willful neglect of HIPPA rules and zero effort to correct the violation within 30 days is a fine of per violation and a maximum of million per year.

What is HIPAA?

Quiz Summary

Information

Results

Results

Categories

1. Question

Sort elements

2. Question

Sort elements

3. Question

4. Question

Sort elements

5. Question

6. Question

7. Question

Contact Us osc@thewilliamsway.com 402.488.2020