HCCA – CHPC Exam | Questions
and Verified Answers with
Rationale| Rated A+ | Latest Guide
2024/2025
What does HIPAA do?
A. Protects the privacy and security of a patient's health information.
B. Prevents health care fraud and abuse.
C. Provides for electronic and physical security of a patient's health
information.
D. All of the answers. - Correct Answer - D. All of the answers.
What is PHI (Protected Health Information)?
a. Information that can be used to identify a patient.
b. Covered transactions (eligibility, enrolment, health care claims,
payment, etc.) performed electronically.
c. Information about a past or present mental or physical condition of a
patient.
d. All of the answers. - Correct Answer - d. All of the answers.
A covered entity must designate a ___________________ who is
responsible for developing and implementing its security policies and
procedures.
a. physician
b. security official
c. police officer
d. custodian - Correct Answer - b. security official
,A covered entity may disclose protected health information (PHI) without
a patient's written permission for:
a. Treatment purposes
b. Payment
c. Health care operations activities
d. All of the above - Correct Answer - d. All of the above (a covered
entity may use or disclose PHI for TPO)
A covered entity must obtain the patient's written authorization for any
use or disclosure of protected health information (PHI) in which
circumstances?
a. Marketing activities
b. Research
c. PHI sales and licensing
d. Information sharing needed for treatment
e. A and C only
f. All of the above - Correct Answer - e. A and C only
Name examples for which an authorization is required, other than for
use/disclosure of Psychotherapy notes: - Correct Answer - marketing
and sales of PHI
Health information that does not identify an individual is called
_______________.
a. Cloned information
b. De-identified information
c. Re-identified information
d. Misidentified information - Correct Answer - b. De-identified
information
,Note: practice question from AAPC CPCO Ch5
What policy is written to encourage communication?
a. Attendance policy
b. Electronic protected information policy
c. Non-retaliation policy
d. Safety and security management policy - Correct Answer - c. Non-
retaliation policy
What defines and limits the circumstances in which an individual's PHI
may be used or disclosed by covered entities?
a. Constitution
b. First Amendment
c. OIG
d. Privacy Rule - Correct Answer - d. Privacy Rule
PHI may be disclosed without the patient's authorization for
___________________.
a. Death, operations, and birth certificates
b. Treatment, pictures, and operations
c. Injections, shots, and research
d. Treatment, payment, and operations - Correct Answer - d. Treatment,
payment, and operations (TPO)
PHI can be disclosed to another entity for treatment purposes; for quality
or competency assurance activities; or fraud and abuse detection and
compliance activities if both entities have or had a professional
relationship with the patient and the PHI pertains to the relationship.
Note: practice question from AAPC CPCO Ch5
, When can patients instruct their provider not to share information about
their treatment with their health plan?
a. Never, patients must disclose all information to their health plan.
b. Only if the patient tells the secretary when scheduling an appointment
that their information should not be given to their health plan.
c. If, when scheduling an appointment, the patient indicates that they are
paying cash for the visit and do not want their information to be given to
the health plan.
d. Never, because the health plan has a contract with the provider. -
Correct Answer - c. If, when scheduling an appointment, the patient
indicates that they are paying cash for the visit and do not want their
information to be given to the health plan.
Remember: Patients also have the right to request restrictions on the
use and disclosure of their PHI to carry out treatment, payment, and
healthcare operations. These requests do not have to be agreed to by
the covered entity, except when a patient pays by cash, which allows the
patient to instruct the provider not to share information about their
treatment with the health plan.
Note: practice question from AAPC CPCO Ch5
Are there certain rules for PHI disclosure in cases of an emergency?
a. No, especially if the patient is not able to provide consent.
b. No, there is not a separation of emergency treatment.
c. Yes, PHI can be released for emergency treatment.
d. No, PHI cannot ever be disclosed without patient consent. - Correct
Answer - c. Yes, PHI can be released for emergency treatment.
Note: practice question from AAPC CPCO Ch5
Voordelen van het kopen van samenvattingen bij Stuvia op een rij:
√ Verzekerd van kwaliteit door reviews
Stuvia-klanten hebben meer dan 700.000 samenvattingen beoordeeld. Zo weet je zeker dat je de beste documenten koopt!
Snel en makkelijk kopen
Je betaalt supersnel en eenmalig met iDeal, Bancontact of creditcard voor de samenvatting. Zonder lidmaatschap.
Focus op de essentie
Samenvattingen worden geschreven voor en door anderen. Daarom zijn de samenvattingen altijd betrouwbaar en actueel. Zo kom je snel tot de kern!
Veelgestelde vragen
Wat krijg ik als ik dit document koop?
Je krijgt een PDF, die direct beschikbaar is na je aankoop. Het gekochte document is altijd, overal en oneindig toegankelijk via je profiel.
Tevredenheidsgarantie: hoe werkt dat?
Onze tevredenheidsgarantie zorgt ervoor dat je altijd een studiedocument vindt dat goed bij je past. Je vult een formulier in en onze klantenservice regelt de rest.
Van wie koop ik deze samenvatting?
Stuvia is een marktplaats, je koop dit document dus niet van ons, maar van verkoper nursehailey. Stuvia faciliteert de betaling aan de verkoper.
Zit ik meteen vast aan een abonnement?
Nee, je koopt alleen deze samenvatting voor $11.99. Je zit daarna nergens aan vast.