HIO-201 Free Practice Test

Select the correct statement regarding the administrative requirements of the HIPAA privacy rule.

1. A. A covered entity must designate, and document, a privacy official, security officer and a HIPAAcompliance officer
2. B. A covered entity must designate, and document, the same person to be both privacyofficial and as the contact person responsible for receiving complaints and providing further information about the notice required by the regulations.
3. C. A covered entity must implement and maintain written or electronic policies and procedures with respect to PHI that are designed to comply with HIPM standards, implementation specifications and other requirements.
4. D. A covered entity must train, and document the training of, at least one member of its workforce on the policies and procedures with regard to PHI as necessary and appropriate for them to carry out their function within the covered entity no later than the privacy rule compliance date
5. E. A covered entity must retain the document required by the regulations for a period often years from the time of it's creation or the time it was last in effect, which ever is later.

Correct Answer: C

Individually identifiable health information (IIHI) includes information that is:

1. A. Transmitted to a business associate for payment purposes only.
2. B. Stored on a smart card only by the patient.
3. C. Created or received by a credit company that provided a personal loan for surgical procedures.
4. D. Created or received by a health care clearinghouse for claim processing.
5. E. Requires the use of biometrics for access to records.

Correct Answer: D

A State insurance commissioner is requesting specific, individually identifiable information from an insurer as a part of a routine review of the insurer's practices. What must the insurer do to deidentify the information?

1. A. The protected health information must be removed from the informatio
2. B. A substitute "key" may be supplied to allow re-identification, if needed.
3. C. Limit the information to coverage, dates of treatment, and payment amounts to avoid collecting any protected data.
4. D. Nothin
5. E. An oversight agency has the right to access this information without prior authorization.
6. F. Request that the insurance commissioner ask for an exception from HIPAA from the Department of Health and Human Services.
7. G. A written authorization is required from the patient.

Correct Answer: C

ANSI X12 specifies the use of a (an):

1. A. Simple flat file structure for transactions.
2. B. Envelope structure for transactions.
3. C. Employer identifier.
4. D. Health plan identifier
5. E. Provider identifier.

Correct Answer: B

Select the FALSE statement regarding violations of the HIPAA Privacy rule.

1. A. Covered entities that violate the standards or implementation specifications will be subjected to civil penalties of up to $100 per violation except that the total amount imposed on any one person in each calendar year may not exceed $25,000 for violations of one requirement
2. B. Criminal penalties for non-compliance are fines up to $65,000 and one year in prison for each requirement or prohibition violated
3. C. Criminal penalties for willful violation are fines up to $50,000 and one year in prison for each requirement or prohibition violated.
4. D. Criminal penalties for violations committed under ??false pretenses?? are fines up to $100,000 and five years in prison for each requirement or prohibition violated
5. E. Criminal penalties for violations committed with the intent to sell, transfer, or use PHI for commercial advantage, personal gain or malicious harm are fines up to $250,000 and ten years in prison for each requirement or prohibition violated

Correct Answer: B