Heartland Health Centers Annual HIPAA Quiz

1.

Protected Health Information (PHI) only refers to a patient’s medical record in which name, address and date of birth are indicated.

A.

True
B.

False

Correct Answer
B. False

Explanation
PHI refers to individually identifiable health information, whether electronic, paper or verbal. PHI encompasses information that relates to an individual’s past, present or future physical or mental condition, the provision of health care to the individual or future payment for the provision of health care to an individual. PHI includes many common identifiers, such as name, address, birth date, zip code, photograph, medical record number Social Security Number, etc.

Rate this question:

2.

Which of the following would be a HIPAA violation?
A medical student copying portions of several patients’ medical records so she can present the information in a classroom discussion
Telling your husband that his basketball team member came to the clinic today and had an AIDS blood test.
Writing the names of patients who are in the waiting room on a chalk board so that all of the patients will know who is next to be seen.
Having copies of test results that a patient requested in the top tray of a basket on your desk, such that anyone coming to the front desk can see the results.

A.

1, 3, 4
B.

2, 3, 4
C.

All of the activities listed above
D.

None of the activities listed above

Correct Answer
C. All of the activities listed above

Explanation
1. PHI can only be accessed for the purpose of Treatment, Payment or Healthcare Operations (TPO). The medical student’s presentation in a classroom discussion does not meet the criteria of TPO.
2. PHI can only be accessed for the purpose of Treatment, Payment or Healthcare Operations (TPO), so it would be a serious HIPAA violation for an employee to share PHI with her husband.
3. Since patients’ names are PHI, that information cannot be displayed in a manner that would be visible to anyone who does not meet the TPO criteria.
4. Test results are PHI and cannot be displayed in a manner that anyone who does not meet the TPO criteria could see

Rate this question:

3.

When are you free to repeat a patient’s private health information that you hear on the job?

A.

A. After you no longer work at the organization
B.

B. After a patient dies
C.

C. If you know the patient would not mind
D.

D. When your job requires it

Correct Answer
D. D. When your job requires it

Explanation
The only acceptable reason to share PHI is if sharing this information is necessary for the purpose of Treatment, Payment or Healthcare Operations.

Rate this question:

4.

Which of the following is protected health information under HIPAA?

A.

A. The patient’s address
B.

B. The patient’s allergies
C.

C. The patient’s medical record number
D.

D. All of the above

Correct Answer
D. D. All of the above

Explanation
Each of the above are individually identifiable health information and therefore are considered to be PHI under HIPAA.

Rate this question:

5.

What question should you ask yourself before looking at health information?

A.

A. Would the patient mind if I looked at this?
B.

B. Do I need to know this to do my job?
C.

C. Can anyone see what I’m doing?
D.

D. Am I curious?

Correct Answer
B. B. Do I need to know this to do my job?

Explanation
The only acceptable reason to share PHI is if sharing this information is necessary for the purpose of Treatment, Payment or Healthcare Operations.

Rate this question:

6.

When is the patient’s authorization to release information required?

A.

A. In most cases in which information is going to be shared with anyone for reasons other than treatment, payment, or health care operations
B.

B. When the patient’s condition is discussed with a consulting physician.
C.

C. When information is to be shared among two or more clinicians
D.

D. When information is used for billing a private insurer

Correct Answer
A. A. In most cases in which information is going to be shared with anyone for reasons other than treatment, payment, or health care operations

Explanation
Answers b, c and d all relate to Treatment, Payment or Health Care Operations and therefore would not require a release of information

Rate this question: