Cmt Exam Study Guide Chapter 29 Hipaa

Front 1

HIPAA stands for:
A. Health Insurance Portability and Accident Act.
B. Health Information Portability and Accountability Act.
C. Health Insurance Portability and Accountability Act.
D. Health Information Portability and Insurance Act.

Back 1

C. Health Insurance Portability and Accountability Act.

Front 2

A breach in confidentiality of patient information can occur:
A. When a report is being transcribed on a digital system.
B. When a doctor dictates a patient's health information into the transcriptionist's answering machine.
C. When a transcriptionist uses a headset to play back information.
D. When a doctor sees a patient.

Back 2

B. When a doctor dictates a patient's health information into the transcriptionist's answering machine.

Front 3

Organizations that have the primary responsibility for protecting individually identifiable patient health information are called covered entities. Which below would constitute an example of a covered entity?
A. Business associate.
B. Hospital administrator.
C. Personal friend.
D. Health plan.

Back 3

D. Health plan.

Front 4

Medical transcriptionists who are employees of a covered entity must follow:
A. The HIPAA regulations.
B. The people involved in billing for healthcare.
C. Business associate agreement with the healthcare provider.
D. The policies and procedures established by the organization with respect to the handling of protected health information.

Back 4

D. The policies and procedures established by the organization with respect to the handling of protected health information.

Front 5

Failure of a covered entity to comply with HIPAA standards can result in:
A. Civil monetary penalties of up to $200 for each accidental violation.
B. Civil monetary penalties of up to $100 for each accidental violation.
C. Imprisonment for 20 years for selling PHI.
D. Civil monetary penalties of up to $250,000 per year.

Back 5

B. Civil monetary penalties of up to $100 for each accidental violation.

Front 6

A medical transcriptionist working as an independent contractor should have which of the below:
A. A list of all social security numbers for patients.
B. Direct access to the U.S. Government HIPAA clearinghouse.
C. A Business Associate agreement with accounts, policies, and procedures on maintaining confidential information and access to information necessary to do the job.
D. A list of all business associates for healthcare providers.

Back 6

C. A Business Associate agreement with accounts, policies, and procedures on maintaining confidential information and access to information necessary to do the job.

Front 7

HIPAA requires an MT business, as a business associate, to have these components in an emergency contingency plan. One of these is:
A. Ability to electronically transmit transcribed data.
B. Disaster recovery plan.
C. Exit strategy.
D. Notice of confidentiality.

Back 7

B. Disaster recovery plan.

Front 8

AAMT recommends that MT businesses retain protected health information only as long as it is necessary to do business; that is, no longer that it is necessary to:
A. Verify records and authenticate by originator.
B. Verify information, distribute, and bill for services provided.
C. Provide information to patients.
D. Complete billing and transmission back to healthcare provider.

Back 8

B. Verify information, distribute, and bill for services provided.

Front 9

When physically transporting protected health information, an MT business would be violating confidentiality by:
A. Using a bonded commercial courier for transport and having them sign a confidentiality agreement.
B. Leaving PHI in an unprotected location for pick up, such as in a mailbox or front door.
C. Delivering documents personally in a sealed, tamper proof container.
D. Covering patient identifiable information that is visible on the outside of the envelope.

Back 9

B. Leaving PHI in an unprotected location for pick up, such as in a mailbox or front door.

Front 10

Ways to protect identifiable patient information when faxing include all of the following except:
A. Having a cover sheet informing recipient of confidentiality of information being faxed and providing a warning to any recipient not authorized to have access to have such information.
B. Maintaining the fax machine in an easily visible and accessible location.
C. Preprogramming frequently used fax numbers to avoid mistakes.
D. Keeping the fax machine in a secure area of the business to prevent access by unauthorized individuals.

Back 10

B. Maintaining the fax machine in an easily visible and accessible location.

Front 11

In the HIPAA privacy rule, PHI generally refers to:
A. Individually identifiable health information.
B. A patient's social history.
C. How many times a patient has been to the hospital.
D. A business associate.

Back 11

A. Individually identifiable health information.

Front 12

Protected health information is information that is transmitted or maintained in any form--by electronic means, on paper, or through oral communications. Which group is subject to the rule?
A. Relates to information that has been de-identified in accordance with the rule's stringent de-identification criteria.
B. Relates to hospital risk management policies.
C. Relates to the past, present, or future payment for the provision of healthcare to an individual.
D. Relates to information release policies and procedures.

Back 12

C. Relates to the past, present, or future payment for the provision of healthcare to an individual.

Front 13

For the home-based MT, the computer used for work needs to be secure. The computer is not secure if:
A. The computer is password protected.
B. The computer is kept in in a locked secure room to prohibit access.
C. The computer is used by all family members.
D. The password is changed every 30 days.

Back 13

C. The computer is used by all family members.

Front 14

According to HIPAA regulations, which one of the following is incorrect?
A. All inpatients must be listed in the patient directory.
B. Psychotherapy notes that document or analyze the contents of conversation during a counseling session are kept separate from the rest of the patient's medical record.
C. Information such as address, age, social security number, and phone number is protected health information.
D. Passwords should include both letters and numbers or other special characters.

Back 14

A. All inpatients must be listed in the patient directory.

Front 15

One of the patient's rights under HIPAA is:
A. Right to change their PHI.
B. Right to access their PHI.
C. Right to eliminate their PHI.
D. Right to change physicians.

Back 15

B. Right to access their PHI.