Download HIPAA Test 2 and more Exams Nursing in PDF only on Docsity!
HIPAA Test 2
The Notice of Privacy Practices presented to every patient: - Answer -a. Tells patients how their information is used and disclosed b. Advises patients of their privacy rights c. Is offered at registration. d. All of the above Who should have access to Patient Data? - Answer -a. Administration. b. Employees who have been trained on the clinical system. c. Those with a need to know to do their job. d. Information Technology employees. You must always provide law enforcement officers the patient information they request. - Answer -a. True b. False Trash that contains PHI should be placed: - Answer -a.In trash receptacles near staff elevators. b. In offsite dumpsters. c. In a trash receptacle in a secure area. d. In trash located in the patient's room.
You can take PHI home to do work. - Answer -a. True, work always is the most important consideration b. False, PHI should never be taken off campus, unless you have permission. Patient Protected Health Information (PHI) learned at work from staff discussions or the chart may be disclosed: - Answer -a. On your Facebook page. b. In a text or email message to people who know the patient. c. With friends and relatives who have the patient's permission. d. To staff who have a job-related need to know. e. C & D How should an email containing confidential information be transmitted over the Internet to a destination that is external? - Answer -a.Encrypt it first by putting the word [encrypt] in the subject line, using square brackets. Or use secure: with a colon b. Encrypt it first by putting the word {encrypt} in the subject line, using curly brackets. Or use (secure) c. Place the words "private or confidential" in the subject line. How should an employee report a suspected privacy or security breach? - Answer -a. Tell your supervisor or privacy officer immediately b. Fill out an incident report. c. Keep it to yourself so as not to make waves. d. Take it upon yourself to tell the patient that his/her privacy was breached. e. A & D f. A & B If you suspect PHI has been faxed from your machine in error you should: - Answer -a. Alert the recipient b. Request the confidentiality statement on the cover sheet be completed and returned
c. A joint commission standard The following are ways to protect PHI that is printed: - Answer -a. Avoid leaving PHI on your desk, unattended b. Double check when handing PHI to patients c. Check faxes, printers, and copiers to make sure PHI is not left unattended d. Use the approved organization fax sheet, that has a confidentiality statement when faxing PHI e. All the above It is ok to share my password with my staff, so they can access information when I'm away - Answer -a. True, access is important b. False, HIPAA requires each of us to password protect access to PHI, and never share passwords I do not work with patients or have access to medical records. But I do work in patient areas that allow me to see and hear information about patients. Can I talk about these patients with my coworkers, family and friends? - Answer -a. Yes b. No Physical safeguards to protect PHI at Huntsville Hospital include: - Answer -a. Using privacy screens on monitors where appropriate. b. Using access badge readers as appropriate. c. Locking doors and cabinets. d. All of the above If a patient refuses to be listed in the Facility Directory, during the registration process, we should: - Answer -a. Only share their location and general condition if a visitor asks for them by name b. Not acknowledge they are in the facility if asked.
You are walking by a trashcan and notice a pile of photocopied records containing PHI has been laid on top of the trash. How should you handle this? - Answer -a. Do nothing b. Report it to your supervisor or the Privacy Officer for proper disposal c. Read the report and try to figure out who disposed of it improperly d. None of the above The Minimum Necessary rule: - Answer -a. Requires you to use or disclose information only to accomplish the intended purpose. b. Does not apply to treatment information between providers. c. Requires you to request only the PHI that is necessary to accomplish your task. d. All of the above. A young patient in your care went into cardiac arrest and was not able to be resuscitated. You feel upset, stressed, and overwhelmed with this loss of precious life. You want to share this experience and your thoughts and feelings with your family and friends on Facebook. What must you consider before doing this? - Answer -a. Posting this on Facebook is OK as long as you do not identify the patient by name, or identify the hospital, and you are limiting the recipients to your friends and family b. You cannot post anything on Facebook. As part of my job, I use a HH issued laptop for my work at various Health System sites. I have patient emails, addresses, and medical information on the laptop. What is the best way to protect this device? - Answer -a. The information on my portable device is encrypted, I use a complex password, and I physically secure the device when leaving it unattended b. I only need a complex password to secure the laptop c. It is secured as I use a complex password and when unattended, I always lock it up in the trunk of my car d. None of the above
