HIPAA HIPAA Certifications HIO-201 Questions & Answers

• Question 51:

  Select the correct statement regarding the Notice of Privacy Practices.

  A. The Notice must be signed before a State authorized notary.

  B. Direct Treatment Providers must make a good faith effort to obtain patient's written acknowledgement of Notice of Privacy Practices.

  C. Organizations may not have a "layered" Notice - a short, summary Notice preceding the more detailed Notice.

  D. Authorization forms are mandatory for the Notice to be valid.

  E. An individual must sign an authorization before a state authorized notary.

  Correct Answer: B

• Question 52:

  Select the correct statement regarding the requirements of HIPAA regulations.

  A. A covered entity must have and apply sanction against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.

  B. A covered entity does not need to train all members of its workforce whose functions are affected by a change in policy or procedure

  C. A covered entity must designate, and document, a privacy officer, and a HIPAA compliance officer,

  D. A covered entity may require individuals to waive their rights.

  E. A covered entity must require the individual to sign the Notice of Privacy Practices prior to delivering any treatment related service,

  Correct Answer: A

• Question 53:

  Which HIPAA Title is fueling initiatives within organizations to address health care priorities in the areas of transactions, privacy, and security'?

  A. Title I.

  B. Title II

  C. Title Ill.

  D. Title W.

  E. Title V.

  Correct Answer: B

• Question 54:

  IWAA establishes a civil monetary penalty foe' violation of the Administrative Simplification provisions The penalty may not be more

  A. $1,000,00 per person per violation.

  B. $1,0 per person per violation.

  C. $10.000 per person per violation.

  D. $100 per person per violation.

  E. $1000 per person per violation.

  Correct Answer: D

• Question 55:

  Select the best statement regarding the definition of the term "use" as used by the HIPAA regulations.

  A. `Use" refers to the release, transfer, or divulging of IIHI between various covered entities.

  B. "Use" refers to adding, modifying and deleting the PHI by other covered entities.

  C. "Use" refers to utilizing, examining, or analyzing IIHI within the covered entity

  D. "Use" refers to the movement of de-identified information within an organization.

  E. "Use" refers to the movement of information outside the entity holding the information.

  Correct Answer: C

• Question 56:

  Select the best statement regarding the definition of a business associate of a covered entity. A business associate is:

  A. A person who acts on behalf of a non-covered entity.

  B. A person who's function may involve claims processing, administration, data analysis or practice management with access to PHI.

  C. A person who is a member of the covered entity's workforce.

  D. A clearinghouse.

  E. A person that performs or assists in the performance of a function or activity that involves the use or disclosure of de-identified health information

  Correct Answer: B

• Question 57:

  Which of the following is NOT a correct statement regarding HIPAA requirements?

  A. A covered entity must change its policies and procedures to comply with HIPAA regulations, standards, and implementation specifications.

  B. A covered entity must reasonably safeguard PHI from any intentional or unintentional use or disclosure that is in violation of the regulations.

  C. A covered entity must provide a process for individuals to make complaints concerning privacy issues.

  D. A covered entity must document all complaints received regarding privacy issues.

  E. The Privacy Rule requires that the covered entity has a documented security policy.

  Correct Answer: E

• Question 58:

  The transaction number assigned to the Payment Order/Remittance Advice transaction is:

  A. 270

  B. 836

  C. 278

  D. 820

  E. 834

  Correct Answer: D

• Question 59:

  One mandatory requirement for the Notice of Privacy Practices set by HIPAA regulations is:

  A. If the notice must state that the covered entity reserves the right to disclose PHI without obtaining the individuals authorization.

  B. The notice must prominently include an expiration date.

  C. The notice must describe every potential use of PHI.

  D. The notice must describe an individual's rights under the rule such as to inspect, copy and amend PHI and to obtain an accounting of disclosures of PHI.

  E. The notice must clearly identify that the covered entity is in compliance with HIPAA regulations as of April 16, 2003.

  Correct Answer: D

• Question 60:

  Select the FALSE statement regarding violations of the HIPAA Privacy rule.

  A. Covered entities that violate the standards or implementation specifications will be subjected to civil penalties of up to $100 per violation except that the total amount imposed on any one person in each calendar year may not exceed $25,000 for violations of one requirement.

  B. Criminal penalties for non-compliance are fines up to $65,000 and one year in prison for each requirement or prohibition violated.

  C. Criminal penalties for willful violation are fines up to $60,000 and one year in prison for each requirement or prohibition violated.

  D. Criminal penalties for violations committed under "false pretenses are fines up to $100,000 and five years in prison for each requirement or prohibition violated.

  E. Criminal penalties for violations committed with the intent to sell, transfer, or use PHI for commercial advantage, personal gain or malicious harm are fines up to $250,000 and ten years in prison for each requirement or prohibition violated.

  Correct Answer: B