HIPAA Competency Test 2018

Approved & Edited by ProProfs Editorial Team

The editorial team at ProProfs Quizzes consists of a select group of subject experts, trivia writers, and quiz masters who have authored over 10,000 quizzes taken by more than 100 million users. This team includes our in-house seasoned quiz moderators and subject matter experts. Our editorial experts, spread across the world, are rigorously trained using our comprehensive guidelines to ensure that you receive the highest quality quizzes.

Learn about Our Editorial Process

| By Dlongoria

Dlongoria

Community Contributor

Quizzes Created: 2 | Total Attempts: 1,106

Questions: 10 | Attempts: 335 | Updated: Mar 22, 2023

Questions

Settings

Create your own Quiz

Share on Facebook Share on Twitter Share on Whatsapp Share on Pinterest Share on Email Copy to Clipboard Embed on your website

Questions and Answers

1.

Forms of Sensitive Information exist in forms of:
- A.
  
  Printed Information
- B.
  
  Spoken
- C.
  
  Electronic
- D.
  
  All of the above
Correct Answer
D. All of the above

Explanation
All three forms are ways of communication that information can travel between people.

Rate this question:
2.

True or False: An employee may only access or disclose a patient's PHI when this access is part of the employee's job duties.
- A.
  
  True
- B.
  
  False
Correct Answer
A. True

Explanation
Except in very limited circumstances, if an employee access or discloses PHI without a patient's written consent or without a job related reason, the employee violates the privacy policy and HIPAA.

Rate this question:
3.

Patients have the rights to inspect and/or receive an electronic copy of their healthcare records.
- A.
  
  True
- B.
  
  False
Correct Answer
A. True

Explanation
It is part of the patient's rights that they can view and have access to their records.

Rate this question:
4.

Which one of these statements are false based on the HIPAA Security Rule
- A.
  
  HIPAA Security Rule concentrates on safeguarding PHI by focusing on the confidentiality, integrity and availability of PHI.
- B.
  
  Integrity means that data or information has not been altered or destroyed in an unauthorized manner.
- C.
  
  Availability means that data or information is not accessible and not useable upon demand only by an authorized person.
- D.
  
  Confidentiality means that data or information is not made available or disclosed to unauthorized persons or processes.
Correct Answer
C. Availability means that data or information is not accessible and not useable upon demand only by an authorized person.

Explanation
Availability means that data or information is accessible and is useable upon demand only by an authorized person.

Rate this question:
5.

Which are areas that employees need to be cautious when discussing patient information.
- A.
  
  The nurse's station
- B.
  
  The break room
- C.
  
  Hallways
- D.
  
  Restaurants
Correct Answer(s)
A. The nurse's station
B. The break room
C. Hallways
D. Restaurants

Explanation
All of them are open areas in which your conversation can be overheard and can disclose sensitive information .

Rate this question:
6.

Data should be disposed the following ways:
- A.
  
  Regular trash
- B.
  
  It should be destroyed. It should be kept indefinitely.
- C.
  
  Shredded or placed in locked drawer
- D.
  
  Magnetic media should be wiped or physically destroyed.
Correct Answer(s)
C. Shredded or placed in locked drawer
D. Magnetic media should be wiped or physically destroyed.

Explanation
These are appropriate ways to dispose of data.

Rate this question:
7.

Fill in the Blank: Individuals who violate the Practice's Policy will be subject to: _________ _________ __________.

Correct Answer(s)
appropriate disciplinary action

Explanation
Individuals who violate the Practice's Policy will be subject to appropriate disciplinary action. This means that if someone goes against the policies set by the Practice, they will face consequences that are suitable and fitting for their actions. The disciplinary action could vary depending on the severity of the violation, but it will be the appropriate measure taken to address and correct the misconduct.

Rate this question:

4
8.

A ___________ is lost, stolen, or improperly disposed of or hacked information.

Correct Answer(s)
Breach

Explanation
A breach refers to the loss, theft, improper disposal, or hacking of information. This can occur when sensitive data is accessed, disclosed, or used without authorization. A breach can result in the compromise of personal or confidential information, leading to potential harm or misuse of the data.

Rate this question:

4
9.

Which one of these is not supposed to be notified when there is breach of information?
- A.
  
  The individuals whose information was breached
- B.
  
  The Texas State Attorney General
- C.
  
  The Department of Health and Human Services
- D.
  
  Employees in the company
Correct Answer
D. Employees in the company

Explanation
Even though notifying the employees it is important so they are aware that is occured, it is not mandatory when having to notify about breaches.

Rate this question:

Quiz Review Timeline +

Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.

Current Version
Mar 22, 2023

Quiz Edited by
ProProfs Editorial Team
May 09, 2018

Quiz Created by
Dlongoria

HIPAA Competency Test 2018

Forms of Sensitive Information exist in forms of:

True or False: An employee may only access or disclose a patient's PHI when this access is part of the employee's job duties.

Patients have the rights to inspect and/or receive an electronic copy of their healthcare records.

Which one of these statements are false based on the HIPAA Security Rule

Which are areas that employees need to be cautious when discussing patient information.

Data should be disposed the following ways:

Fill in the Blank: Individuals who violate the Practice's Policy will be subject to: _________ _________ __________.

A ___________ is lost, stolen, or improperly disposed of or hacked information.

Which one of these is not supposed to be notified when there is breach of information?

Fill in the Blank: Individuals who violate the Practice's Policy will be subject to: _____ _ ______.