HIM 320 Latest Questions with Verified Answers
Graded A+ | Assured Success
creates significant rights for patients to help them understand and control how their health
information is used and disclosed
HIPAA's Privacy Rule
when it comes to rights for patients, do states provide these additional rights (meaning does
it add onto HIPAA's privacy rule that gives these patient rights)
NO, most states do not provide these additional rights
when must CEs give individuals their Notice of Privacy Practices (NPP)? what manner
should they give it in?
upon first contact (whether that be electronic, physical, telehealth services, or electornic
prescribing) with the patient to allow individuals to decide whether to enter into the relationship
in terms of manner, if electronic, it should be done so electronically (can even be done through
email if the individual agrees) but if the provider has a physical delivery site, they must have
paper/physical copies of the notice available for individuals seeking services from them
ex. Of what wouldn't be first contact: call before appointment for insurance information or
surgery center calls patient to ask some questions about the procedure the next day, this would
not be considered first contact so you wouldn't need to give a NPP...would still be in compliance
with the HIPAA privacy rule
,in the notice of privacy act, covered entities must inform individuals of (4)
•How it will use and disclose PHI
•The covered entities' duties concerning the PHI
•The policies and procedures it has adopted to protect the privacy of PHI
•Rights with respect to their PHI
who must recieve the NPP and give acknowledgement?
a patient OR the patient's authorized representitive who has a direct treatment relationship with a
covered entity...must be provided to individuals who request a copy
ex. of what would NOT be direct contact: pathology department/pathologist
what is required of a CE who has a direct treatment relationship with a patient/patient
representative upon first ccontact? what is an exception to this requirement?
they must provide that patient/patient representative with the NPP and make a GOOD FAITH
EFFORT to obtain a patient's WRITTEN acknowledgement that he or she has recieved the
notice...if they don't give acknowledgement, then they must document good faith efforts (i.e.
document why the acknowledgement was not obtained)
NOTE: this acknowledgement is not an authorization or consent!
, EXCEPTION: in an emergency!
what is required in terms of NPP, if a provider maintains a physical delivery site?
the provider must have copies of the notice available for individuals seeking services to take with
them, and must post the notice in a clear and prominent location for such individuals
note: posting is NOT a substitue for providing the notice to each patient
what is required in terms of NPP, if a provider maintains a website provoidng information
on its services?
they must prominently post on its website its notice
the following phrase must be displayed as a prominent header of what document?
"THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY
BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS
INFORMATION. PLEASE REVIEW IT CAREFULLY."
notice of privacy practices
what is the content of the notice of privacy practice? (15)
-plain language (easy to read...no jargon)
-required header (at the top)
Graded A+ | Assured Success
creates significant rights for patients to help them understand and control how their health
information is used and disclosed
HIPAA's Privacy Rule
when it comes to rights for patients, do states provide these additional rights (meaning does
it add onto HIPAA's privacy rule that gives these patient rights)
NO, most states do not provide these additional rights
when must CEs give individuals their Notice of Privacy Practices (NPP)? what manner
should they give it in?
upon first contact (whether that be electronic, physical, telehealth services, or electornic
prescribing) with the patient to allow individuals to decide whether to enter into the relationship
in terms of manner, if electronic, it should be done so electronically (can even be done through
email if the individual agrees) but if the provider has a physical delivery site, they must have
paper/physical copies of the notice available for individuals seeking services from them
ex. Of what wouldn't be first contact: call before appointment for insurance information or
surgery center calls patient to ask some questions about the procedure the next day, this would
not be considered first contact so you wouldn't need to give a NPP...would still be in compliance
with the HIPAA privacy rule
,in the notice of privacy act, covered entities must inform individuals of (4)
•How it will use and disclose PHI
•The covered entities' duties concerning the PHI
•The policies and procedures it has adopted to protect the privacy of PHI
•Rights with respect to their PHI
who must recieve the NPP and give acknowledgement?
a patient OR the patient's authorized representitive who has a direct treatment relationship with a
covered entity...must be provided to individuals who request a copy
ex. of what would NOT be direct contact: pathology department/pathologist
what is required of a CE who has a direct treatment relationship with a patient/patient
representative upon first ccontact? what is an exception to this requirement?
they must provide that patient/patient representative with the NPP and make a GOOD FAITH
EFFORT to obtain a patient's WRITTEN acknowledgement that he or she has recieved the
notice...if they don't give acknowledgement, then they must document good faith efforts (i.e.
document why the acknowledgement was not obtained)
NOTE: this acknowledgement is not an authorization or consent!
, EXCEPTION: in an emergency!
what is required in terms of NPP, if a provider maintains a physical delivery site?
the provider must have copies of the notice available for individuals seeking services to take with
them, and must post the notice in a clear and prominent location for such individuals
note: posting is NOT a substitue for providing the notice to each patient
what is required in terms of NPP, if a provider maintains a website provoidng information
on its services?
they must prominently post on its website its notice
the following phrase must be displayed as a prominent header of what document?
"THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY
BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS
INFORMATION. PLEASE REVIEW IT CAREFULLY."
notice of privacy practices
what is the content of the notice of privacy practice? (15)
-plain language (easy to read...no jargon)
-required header (at the top)
