HIO-201 試験問題を無料オンラインアクセス

Select the correct statement regarding the "Minimum Necessary" standard in the HIPAA regulations.

• A.The privacy rule prohibits use, disclosure, or requests for an entire medical record,
• B.The minimum necessary standard requires covered entities to prohibit maintenance of medical charts at bedside and to require that X-ray light boards be totally isolated.
• C.If there is a request for more than the minimum necessary PHI, the privacy rule requires a covered entity to deny the disclosure of information after recording the event in the individual's case file.
• D.In some circumstances a covered entity is permitted, but not required, to rely on the judgment of the party requesting the disclosure as to the minimum amount of information necessary for the intended purpose. Some examples of these requesting parties are: another covered entity or a public official.
• E.Non-Covered entities need to redesign their facility to meet the requirement for minimum necessary uses.

Select the
correct statement
regarding the
administrative
requirements of the HIPAA privacy rule.

• A.A covered entity must implement and maintain written or electronic policies and procedures with respect to PHI that are designed to comply with HIPAA standards, implementation specifications and other requirements.
• B.A covered entity must designate and document1 the same person to be both privacy official and as the contact person responsible for receiving complaints and providing further information about the notice required by the regulations.
• C.A covered entity must retain the document required by the regulations for a period of ten years from the time of it's creation or the time it was last in effect, which ever is later.
• D.A covered entity must train, and document the training of, at least one member of its workforce on the policies and procedures with regard to PHI as necessary and appropriate for them to carry out their function within the covered entity no later than the privacy rule compliance date.
• E.A covered entity must designate, and document, a privacy official, security officer and a HIPAA compliance officer

Select the best
statement
regarding
the definition of the
term "use" as used by the HIPAA regulations.

• A.'Use" refers to the release, transfer, or divulging of IIHI between various covered entities.
• B."Use" refers to utilizing, examining, or analyzing IIHI within the covered entity
• C."Use" refers to the movement
  of de-identified
  information
  within an organization.
• D."Use" refers to adding, modifying and deleting the PHI by other covered entities.
• E."Use" refers to the movement of information outside the entity holding the information.

Select the correct statement regarding code sets and identifiers.

• A.Preferred Provider Organizations (PPO) are not covered by the definition of "health plan" for purposes of the National Health Plan Identifier.
• B.HIPAS requires health plans
  to
  accept
  every
  valid
  code
  contained in the approved code sets
• C.An important objective of the Transaction Rule is to reduce the risk of security breaches through identifiers.
• D.The social security number has been selected as the National Health Identifier for individuals
• E.The CDT code set is maintained by the American Medical Association

Signed authorization forms must be retained:

• A.For as long as the patient's records are kept.
• B.Ten (10) years from the date it was signed.
• C.Until it is specifically revoked by the individual.
• D.Six ) years from the time it expires.
• E.Indefinitely, because the life of a signed authorization is indefinite