RHIT Domain 2 EXam With Complete Solutions
Latest Update
Release of health record documentation originally created by a different provider is
known as:
a. Privileged communication
b. Subpoena
c. Jurisdiction
d. Redisclosure - ANSWER d
Redisclosure is a process of releasing health record documentation originally created
by a different provider. Federal and state regulations provide specific redisclosure
guidelines; however when in doubt, follow the same principles as the release and
disclosure guidelines for other types of health record information (Fahrenholz 2013a,
104).
What is done to remedy a lost data situation in an EHR?
a. Fire wall building
b. Data recovery
c. Audit trail review
d. Data integrity plan development - ANSWER b
Data recovery is a procedure of recuperating the lost data or reconciling conflict data
upon the failure of the system. These data may be from events that occurred while the
system was down or from backed-up data Sayles and Trawick 2014, 213.
Central City Clinic has requested that Ghent Hospital forward its hospital records
pertaining to Susan Hall's most recent admission to the clinic so that the clinic can have
Susan Hall come in for a follow up. Which of the following is true? a. The Privacy Rule
would require that Susan Hall provide a written authorization. b. The hospital may
forward only the discharge summary, history and physical, and operative report. c. The
,Privacy Rule minimum necessary requirement does not apply.
d. There does not need to be consent from the patient for this to be considered "public
interest and benefit". - ANSWER c
The minimum necessary requirement does not apply in the following conditions: to
health care providers for treatment; to the individual or his personal representative; in
response to the individual's authorization to the secretary of the HHS for investigations,
compliance review, or enforcement; as required by law; or to meet other requirements
of the Privacy Rule 164.502(2)); Rinehart-Thompson 2017c, 234).
Under the HIPAA Privacy rule, which of the following statements is true?
a. An authorization must contain an expiration date or event.
b. A consent for use and disclosure of information must be obtained from every patient.
c. An authorization must be obtained for uses and disclosures for treatment, payment,
and operations.
d. A notice of privacy practices must give 10 examples of a use or disclosure for
healthcare operations. - ANSWER a
An authorization is valid only if it contains an expiration date or event, which relates to
the individual, or to the purpose of the use or disclosure.
An acute care hospital is considering allowing coding professionals to work from home.
The hospital is evaluating methods to reduce associated security risks with this
practice. Which of the following would be most effective to ensure that data breaches
are limited in the event the home computer is left unattended?
a. User name and password
b. Automatic session terminations
c. Cable locks
d. Encryption - ANSWER b
Access control is among the technical safeguards standards in HIPAA Security Rule.
This includes automatic log-off, whereby procedures detail the termination of an
,electronic session after a predetermined time of inactivity as according to Reynolds and
Brodnik, 2017, pg. 277.
Who owns the health record?
a. Patient
b. Provider who generated the information
c. Insurance company who paid for the care recorded in the record
d. No one - ANSWER b
Ownership of the health record has traditionally been granted to the provider who
creates the record, (Brodnik 2017a, 9).
Which of the following is true with respect to the development of health record
destruction policies?
a. All relevant laws must be considered
b. The organization must find a means to not destroy any health records
c. Health records related to pending or unresolved litigation may be destroyed
d. Only state laws must be considered - ANSWER a
Not all information has to be retained indefinitely. In the same way that retention by the
HIM professional must rely on various considerations, so too must health record
destruction take a number of considerations into account. These include applicable
federal and state statutes and regulations; accreditation standards; pending or ongoing
litigation; storage capabilities; and cost (Rinehart-Thompson 2016a, 208).
What is the most significant threat to healthcare data security?
a. Natural disasters
b. Fires
c. Employees
d. Equipment failure - ANSWER c
, The most significant threat to healthcare data security are employees. Whether
disgruntled employees destroy computer hardware, snooping employees access
information for which they have no authorization to obtain or employees access
information with fraudulent intentions, employees pose a realistic and viable threat to
data security (Rinehart-Thompson 2016c, 256).
Which of the following is not true about the Notice of Privacy Practices?
a. It shall include at least two examples of how information is used for both treatment
and operations.
b. It shall contain a description of the right to request restrictions on certain uses and
disclosures.
c. It shall explain the patient's right to inspect and copy PHI.
d. It should contain the description of the patient's right to amend PHI. - ANSWER a
AHIMA enumerates the provisions under which the content of the notice of privacy
practices is to be issued. Among the requirements, for instance, is that a description,
which shall contain at least one example, is to be accorded of the uses and disclosures
that the covered entity is authorized to make for treatment, payment, and healthcare
operations will be given.
Community Hospital is debating the issue of limiting physicians' access to electronic
health records. Members of the medical record committee are divided as to how this
should be addressed. Some committee members believe that all information should be
provided while others believe access is limited according to HIPAA. The HIM director is
a member of this committee. Which of the following would you recommend the director
advise the committee?
a. All information available to the physicians is restricted by HIPAA.
b. The "minimum necessary" concept does not apply to disclosures for treatment, so
physician access should not be restricted.
c. The "minimum necessary" concept does not apply to disclosures for treatment, but
the organization must define what physicians need as part of their treatment role.
d. The "minimum necessary" concept applies only to attending physicians, and
therefore, restriction of access must be implem - ANSWER c
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Easton. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.99. You're not tied to anything after your purchase.