CHPC – 1, Top Questions and answers. VERIFIED.

CHPC – 1, Top Questions and answers. VERIFIED. 1. HIPAA Regs: What subpart in Part 164 deals with Privacy? - -"Subpart E: Hint: Privacy....Privac-E" "2. HIPAA Regs: What subpart in Part 164 deals with Breach Notifications?" - -"Subpart D: "D"arn it! We have a breach!" "3. HIPAA Regs: What subpart in Part 164 deals with Security?" - -"Subpart C: Hint: "C"-curity" "4. What are the 3 components that make up security?" - -"Confidentiality, Integrity, Availability" "5. What's wrong with this statement, "We need to identify if this breach is reportable?"" - -All breaches are reportable. 6. When is the deadline for reporting breaches to the Secretary? - -•For breaches affecting 500 or more: 60 days from discovery. •For breaches affecting less than 500: By the 60th day of the year following when the breach was discovered. "7. Covered Entities and their Business Associates must comply with the all of the Security and Privacy Rules - True or False" - -"False as Business Associates are not required to comply with all of the Privacy Rules." 8. The designated privacy official and the designated security official under HIPAA must be different individuals. - -False as the same official may be designated both roles. 9. A health care provider has how long to redistribute its Notice of Privacy Practice to established patients after making a material? - -There is no such requirement for a health care provider as making such a change does not include a requirement to redistribute the Notice of Privacy Practices. 10. Encryption is required under HIPAA - True or False - -False. It is an addressable implementation specification. 11. The difference between an addressable and a required implementation specification? - -•Required - the specification must be implemented •Addressable - Either implement the specification or an equivalent alternative measure 12. What are the four impermissibles? - -Access, Acquisition, Use, Disclosure