HIM 320 TEST 1 QUESTIONS AND
ANSWERS ALL CORRECT
Marjorie has consented to release of her information from your clinic to a specialist.
After hearing terrible things about the way the specialist violates his patients'
confidentiality, she frantically calls your office and informs you that she wishes to revoke
her consent. It seem reasonably likely that the confidential information contained in your
record may be inappropriately disclosed by the specialist. You have already sent the
records to the specialist. Is your facility now at risk? - Answer- NO (revocation of
consent cannot be retroactive. you released the records in response to valid consent)
Dr. Anderson referred Bob to Dr. Brown for evaluation of his recent finding of anemia.
When Bob arrives for his appointment, Dr. Brown's office calls and asks Dr. Anderson's
office to fax over all of Bob's recent CBC results. Does Dr. Anderson's office need Bob's
authorization to fax his recent lab results to Dr. Brown? - Answer- NO (this falls under
TPO - it is for the purpose of providing healthcare to bob)
Mrs. Jones is scheduled for surgery on Monday. When calling to verify her insurance
benefits, you discover that the insurance company requires precertification. The
insurance company uses XYZ Case Management for precertification. You call XYZ
Case Management, who will not process the precertification until they receive detailed
information about Mrs. Jones' diagnosis. Should you obtain Mrs. Jones authorization
before releasing her PHI to XYZ company? - Answer- NO (it's not necessary - it's
protected under TPO)
Louisiana Psychiatric Associates has just hired Dr. Landry, an new Psychiatrist from an
out of state medical school. Because LPA treats a large amount of PTSD due to the
recent hurricanes, the allow Dr. Landry to review the psychotherapy notes of twenty
patients with that diagnosis in order to familiarize him with type of patient the practice
sees, as well as their usual treatment protocol. Dr. Landry has never seen these
patients personally, and will not be responsible for their care now that he is employed by
LPA. Was LPA compliant with HIPAA's authorization requirements in allowing Dr.
Landry access? - Answer- YES (review of psychotherapy notes w/o patient
authorization is allowed for CEs)
The hospital uses a courier service move paper records between the hospital and a
rural health clinic. Is the courier a BA of the hospital? - Answer- NO
, Dr. Boss has an insurance contract with Blue Cross Blue Shield to participate in their
PPO network. Is BCBS a BA of Dr. Boss? - Answer- NO
UL Lafayette hopes to contract with a hospital to allow HIM students to rotate through
their HIM department as part of the required PPE. Is the University of a BA of the
hospital? - Answer- NO
The hospital hires an attorney to serve as legal counsel for all compliance related
issues. Is the attorney a BA of the hospital? - Answer- YES
A local priest volunteers his time as hospital clergy. Is the priest a BA of the hospital? -
Answer- NO
Staff at Community Hospital, a 200-bed facility, has been busy with HIPAA Privacy Rule
issues recently. Community Hospital is regularly surveyed by the city safety department
for compliance with local codes related to issues such as fire and water safety.
Community Hospital's privacy officer has issued an unsigned business associate
agreement to the department of health, instructing the chief of its survey office to sign it
because its surveyors, who may come into contact with Community Hospital's PHI,
function as business associates. Has Community Hospital's privacy officer correctly
interpreted the Privacy Rule?
A) Yes, due to the fact that employees of the department of health will have contact with
Community Hospital's PHI
B) Yes, due to the fact that the department of health may subcontract with others who
access Community Hospital's PHI
C) No, since the department of health is not using Community Hospital's - Answer- C)
No, since the department of health is not using Community Hospital's PHI in their
determination of compliance with local codes
Recently, the hospital's emergency room staff has informed the privacy officer that
patients' family members have been bringing cameras into the emergency room to
photograph treatment as it is occurring. The privacy officer instructs emergency room
staff to log the names of individuals who are taking the pictures. He then sends letters to
the family members, notifying them that they have committed a HIPAA violation and
their names may be turned over to the Office for Civil Rights for investigation. Has
Community Hospital's privacy officer correctly interpreted the Privacy Rule?
A) Yes, family members of patients are considered members of the CE's workforce
once they photograph/video care in the ER
B) Yes, since the photographs and/or videos may present a malpractice risk for the
facility
C) No, since the hospital is considered part of an organized healthcare arrangement
D) No, since the family members of patient - Answer- D) No, since the family members
of patients are not considered covered entities or members of their workforce
ANSWERS ALL CORRECT
Marjorie has consented to release of her information from your clinic to a specialist.
After hearing terrible things about the way the specialist violates his patients'
confidentiality, she frantically calls your office and informs you that she wishes to revoke
her consent. It seem reasonably likely that the confidential information contained in your
record may be inappropriately disclosed by the specialist. You have already sent the
records to the specialist. Is your facility now at risk? - Answer- NO (revocation of
consent cannot be retroactive. you released the records in response to valid consent)
Dr. Anderson referred Bob to Dr. Brown for evaluation of his recent finding of anemia.
When Bob arrives for his appointment, Dr. Brown's office calls and asks Dr. Anderson's
office to fax over all of Bob's recent CBC results. Does Dr. Anderson's office need Bob's
authorization to fax his recent lab results to Dr. Brown? - Answer- NO (this falls under
TPO - it is for the purpose of providing healthcare to bob)
Mrs. Jones is scheduled for surgery on Monday. When calling to verify her insurance
benefits, you discover that the insurance company requires precertification. The
insurance company uses XYZ Case Management for precertification. You call XYZ
Case Management, who will not process the precertification until they receive detailed
information about Mrs. Jones' diagnosis. Should you obtain Mrs. Jones authorization
before releasing her PHI to XYZ company? - Answer- NO (it's not necessary - it's
protected under TPO)
Louisiana Psychiatric Associates has just hired Dr. Landry, an new Psychiatrist from an
out of state medical school. Because LPA treats a large amount of PTSD due to the
recent hurricanes, the allow Dr. Landry to review the psychotherapy notes of twenty
patients with that diagnosis in order to familiarize him with type of patient the practice
sees, as well as their usual treatment protocol. Dr. Landry has never seen these
patients personally, and will not be responsible for their care now that he is employed by
LPA. Was LPA compliant with HIPAA's authorization requirements in allowing Dr.
Landry access? - Answer- YES (review of psychotherapy notes w/o patient
authorization is allowed for CEs)
The hospital uses a courier service move paper records between the hospital and a
rural health clinic. Is the courier a BA of the hospital? - Answer- NO
, Dr. Boss has an insurance contract with Blue Cross Blue Shield to participate in their
PPO network. Is BCBS a BA of Dr. Boss? - Answer- NO
UL Lafayette hopes to contract with a hospital to allow HIM students to rotate through
their HIM department as part of the required PPE. Is the University of a BA of the
hospital? - Answer- NO
The hospital hires an attorney to serve as legal counsel for all compliance related
issues. Is the attorney a BA of the hospital? - Answer- YES
A local priest volunteers his time as hospital clergy. Is the priest a BA of the hospital? -
Answer- NO
Staff at Community Hospital, a 200-bed facility, has been busy with HIPAA Privacy Rule
issues recently. Community Hospital is regularly surveyed by the city safety department
for compliance with local codes related to issues such as fire and water safety.
Community Hospital's privacy officer has issued an unsigned business associate
agreement to the department of health, instructing the chief of its survey office to sign it
because its surveyors, who may come into contact with Community Hospital's PHI,
function as business associates. Has Community Hospital's privacy officer correctly
interpreted the Privacy Rule?
A) Yes, due to the fact that employees of the department of health will have contact with
Community Hospital's PHI
B) Yes, due to the fact that the department of health may subcontract with others who
access Community Hospital's PHI
C) No, since the department of health is not using Community Hospital's - Answer- C)
No, since the department of health is not using Community Hospital's PHI in their
determination of compliance with local codes
Recently, the hospital's emergency room staff has informed the privacy officer that
patients' family members have been bringing cameras into the emergency room to
photograph treatment as it is occurring. The privacy officer instructs emergency room
staff to log the names of individuals who are taking the pictures. He then sends letters to
the family members, notifying them that they have committed a HIPAA violation and
their names may be turned over to the Office for Civil Rights for investigation. Has
Community Hospital's privacy officer correctly interpreted the Privacy Rule?
A) Yes, family members of patients are considered members of the CE's workforce
once they photograph/video care in the ER
B) Yes, since the photographs and/or videos may present a malpractice risk for the
facility
C) No, since the hospital is considered part of an organized healthcare arrangement
D) No, since the family members of patient - Answer- D) No, since the family members
of patients are not considered covered entities or members of their workforce
