HIPAA and Privacy Act Training (1.5 hrs)
(DHA-US001)
Select all that apply: In which of the following circumstances must an
individual be given the opportunity to agree or object to the use and disclosure
of their PHI? - correct answer ✔Both A and C
-Before PHI directly relevant to a person's involvement with the individual's
care or payment of health care is shared with that person
- Before their information is included in a facility directory
Which of the following statements about the HIPAA Security Rule are true? -
correct answer ✔All of the above
A covered entity (CE) must have an established complaint process. - correct
answer ✔True
The e-Government Act promotes the use of electronic government services by
the public and improves the use of information technology in the government.
- correct answer ✔True
When must a breach be reported to the U.S. Computer Emergency Readiness
Team? - correct answer ✔Within 1 hour of discovery
Which of the following statements about the Privacy Act are true? - correct
answer ✔All of the above
, What of the following are categories for punishing violations of federal health
care laws? - correct answer ✔All of the above
Which of the following are common causes of breaches? - correct answer
✔All of the above
Which of the following are fundamental objectives of information security? -
correct answer ✔All of the above
If an individual believes that a DoD covered entity (CE) is not complying with
HIPAA, he or she may file a complaint with the: - correct answer ✔All of the
above
Technical safeguards are: - correct answer ✔Information technology and the
associated policies and procedures that are used to protect and control
access to ePHI
A Privacy Impact Assessment (PIA) is an analysis of how information is
handled: - correct answer ✔All of the above
A breach as defined by the DoD is broader than a HIPAA breach (or breach
defined by HHS). - correct answer ✔True
Which of the following are breach prevention best practices? - correct answer
✔All of the above
An incidental use or disclosure is not a violation of the HIPAA Privacy Rule if
the covered entity (CE) has: - correct answer ✔All of the above
(DHA-US001)
Select all that apply: In which of the following circumstances must an
individual be given the opportunity to agree or object to the use and disclosure
of their PHI? - correct answer ✔Both A and C
-Before PHI directly relevant to a person's involvement with the individual's
care or payment of health care is shared with that person
- Before their information is included in a facility directory
Which of the following statements about the HIPAA Security Rule are true? -
correct answer ✔All of the above
A covered entity (CE) must have an established complaint process. - correct
answer ✔True
The e-Government Act promotes the use of electronic government services by
the public and improves the use of information technology in the government.
- correct answer ✔True
When must a breach be reported to the U.S. Computer Emergency Readiness
Team? - correct answer ✔Within 1 hour of discovery
Which of the following statements about the Privacy Act are true? - correct
answer ✔All of the above
, What of the following are categories for punishing violations of federal health
care laws? - correct answer ✔All of the above
Which of the following are common causes of breaches? - correct answer
✔All of the above
Which of the following are fundamental objectives of information security? -
correct answer ✔All of the above
If an individual believes that a DoD covered entity (CE) is not complying with
HIPAA, he or she may file a complaint with the: - correct answer ✔All of the
above
Technical safeguards are: - correct answer ✔Information technology and the
associated policies and procedures that are used to protect and control
access to ePHI
A Privacy Impact Assessment (PIA) is an analysis of how information is
handled: - correct answer ✔All of the above
A breach as defined by the DoD is broader than a HIPAA breach (or breach
defined by HHS). - correct answer ✔True
Which of the following are breach prevention best practices? - correct answer
✔All of the above
An incidental use or disclosure is not a violation of the HIPAA Privacy Rule if
the covered entity (CE) has: - correct answer ✔All of the above
