Free Practice Questions for HIPAA HIO-201 Exam

Establishing an orderly hierarchy where HIPAA applies, then other Federal law, then State law.

Defining privacy to be a national interest that is best protected by Federal law

Allowing State privacy laws to provide a cumulative effect lower than HIPAA.

Mandating that Federal laws preempt State laws regarding privacy.

Establishing a "floor" for privacy protection.

Accountants

Hospital employees

A covered entity's internal IT department

CEO of the covered entity

The covered entity's billing service department

Integrity Controls

Emergency Access Procedure

Access Control and Validation Procedures

Security Reminders

Security Policy

Access Authentication

Integrity Controls

Authorization and/or Supervision

Data Authentication

Unique User Identification

Detail specifically all activities that are considered a use or disclosure.

Describe in plain language what is meant by treatment, payment, and health care operations (TPO)

Inform the individual that protected health information (PHI) may only be used for valid medical research.

Inform the individual that this version of the Notice will always cover them, regardless of subsequent changes.

State the expiration date of the Notice.

The Secretary is required by statue to Impose penalties of at least $100 per violation on any person or entity that fails to comply with a standard except that the total amount imposed on any one person in each calendar year may not exceed $1,000.000 for violations of one requirement

Health plans are required to accept all standard transactions.

Health plans may not require providers to make changes or additions to standard transactions

Health plans may not refuse or delay payment of standard transactions.

If additional information is added to a standard transaction it must not modify the definition, condition, intent, or use of a data element

Title I.

Title II

Title III

Title IV.

Title V.

ICD-9-CM. Volumes 1 and 2.

CPT-4.

CDT.

ICD-9-CM. Volume 3.

NDC.

Covered entities must reasonably safeguard PHI, including oral communications, from any intentional or unintentional use or disclosure that is in violation of the Privacy Rule.

Covered entities must have in place appropriate administrative, technical, and physical safeguards to protect the privacy of de-Identified data.

Covered entities are prohibited from marketing through oral communications

The Privacy Rule requires covered entities to document any information, including oral communications, which is used or disclosed for TPO purposes.

The Privacy Rule will often require major structural changes, such as soundproof rooms and encryption of telephone systems, to provide the "reasonable safeguards" of oral communications required by the regulations

"Disclosure" refers lo employing IIHI within a covered entity.

"Disclosure" refers to utilizing, examining, or analyzing IIHI within a covered entity.

"Disclosure" refers to the release, transfer, or divulging of IIHI to another covered entity.

"Disclosure" refers to the movement of information within an organization.

"Disclosure" refers to the sharing of information within the covered entity.