Feedback
Health Insurance Portability and Accountability Act (U.S. Department of Health and Human Services, Sullivan & Hartsfield, 2020)
The purpose of the HIPAA Security Rule is to protect ePHI (Sullivan & Hartsfield, 2020).
The purpose of the HIPAA Privacy Rule is to protect the privacy of individuals' health information (Sullivan & Hartsfield, 2020).
The HIPAA Privacy Rule was enforced on April 14, 2003 (Sullivan & Hartsfield, 2020).
Organizations must designate a HIPAA Privacy Officer who ensures compliance with HIPAA (Sullivan & Hartsfield, 2020).
Discussing patient information in a public area is a HIPAA violation (Sullivan & Hartsfield, 2020).
Patients are entitled to request and receive a copy of their medical records according to HIPAA (Sullivan & Hartsfield, 2020).
Individuals have the right to access their health information and to request corrections (Sullivan & Hartsfield, 2020).
A HIPAA breach is an unauthorized disclosure of PHI (Sullivan & Hartsfield, 2020).
Healthcare provider, health plans, and healthcare clearinghouse must comply with the HIPAA Privacy Rule (Sullivan & Hartsfield, 2020).
Covered Entities are responsible for ensuring they comply with the HIPAA Security Rule (Sullivan & Hartsfield, 2020).
The HIPAA Security Rule does not require the provision of free healthcare services (Sullivan & Hartsfield, 2020).
PHI stands for Protected Health Information (Sullivan & Hartsfield, 2020).
The minimum necessary standard refers to only accessing and disclosing the minimum information necessary to accomplish the intended purpose (Sullivan & Hartsfield, 2020).
The statute requires new employees to be trained upon hire on HIPAA Security and Privacy rules (Sullivan & Hartsfield, 2020).
A Business Associate is a person or entity that carries out various functions on behalf of a Provider (Sullivan & Hartsfield, 2020).
The Office for Civil Rights is enforces the HIPAA Security Rule (Sullivan & Hartsfield, 2020).
All of these are examples of a HIPAA security incident (Sullivan & Hartsfield, 2020).
Facility Access Controls are an example of a physical safeguard (Sullivan & Hartsfield, 2020).
Organizations with HIPAA violations that do not correct this issue within the required timeframe may be fined up $1.5 million/year (American Medical Association, n.d.)
Any information that can be used to identify an individual's health status is considered PHI (Sullivan & Hartsfield, 2020).
Penalties for violating the HIPAA Privacy Rule include fines and possible criminal charges (Sullivan & Hartsfield, 2020).
Report HIPAA violations and breaches to the Privacy Officer, your supervisor, or through RLDatix.
Créer jeu