Relias Learning- HIPAA and Behavioral
Health
1. Lucy is a psychotherapist who has recently begun accepting adolescent and
young adult clients. She begins to see an 18-year-old male client for major
depressive disorder, who is still living with his parents. After a few weeks, his
parents demand to see a copy of Lucy's notes taken during their psychotherapy
sessions. Under HIPAA, should Lucy provide a copy of her client's treatment
record to the parents?
No, HIPAA grants the client a right to privacy of his treatment records
2. Who should HIPAA complaints be directed to within the Covered Entity?
Privacy Officer
3. John, a pharmacist at the local drug store, is calling a customer, Beth, to ask
her allergy questions before giving her a newly prescribed medication. There is a
very long line at the pharmacy and many people are within earshot of John and
Beth. If other customers hear about Beth's allergies and medical conditions over
the course of their conversation, would John be in violation of HIPAA?
Yes, this information is protected by HIPAA.
4. A pharmaceutical company asks for a list of all individuals in your practice, so
they can send those individuals a free gift of a pill sorter. Is it permissible for you
to provide the list?
Yes, if each individual on the list signed an authorization permitting the Covered Entity
to release the PHI necessary for the marketing purposes.
5. Which of the following actions would cause a healthcare provider to become a
Covered Entity?
File a claim for payment electronically
6. Courtney's emergency room doctor would like to share Courtney's personal
health information with another physician on call to obtain a second opinion
about her diagnosis. Does the minimum necessary rule apply?
No, Courtney's emergency room doctor can share Courtney's personal health
information with the second doctor without violating HIPAA.
7. True or False: HIPAA's Privacy and Security Rules dictate exactly how covered
entities and business associates must dispose of records.
False
8. Linda's practice calls individuals to confirm appointments. Karen requests that
the practice does not make these calls to her because she is afraid her husband
will become abusive if he finds out she is seeking treatment. Karen says she will
call the practice to confirm and asks to be taken off the call list. Does HIPAA
require the practice comply with Karen's request?
Yes. This is a request for a reasonable accommodation because Karen believes she is
endangered.
9. The first step toward security rule compliance is:
To complete a risk assessment
Health
1. Lucy is a psychotherapist who has recently begun accepting adolescent and
young adult clients. She begins to see an 18-year-old male client for major
depressive disorder, who is still living with his parents. After a few weeks, his
parents demand to see a copy of Lucy's notes taken during their psychotherapy
sessions. Under HIPAA, should Lucy provide a copy of her client's treatment
record to the parents?
No, HIPAA grants the client a right to privacy of his treatment records
2. Who should HIPAA complaints be directed to within the Covered Entity?
Privacy Officer
3. John, a pharmacist at the local drug store, is calling a customer, Beth, to ask
her allergy questions before giving her a newly prescribed medication. There is a
very long line at the pharmacy and many people are within earshot of John and
Beth. If other customers hear about Beth's allergies and medical conditions over
the course of their conversation, would John be in violation of HIPAA?
Yes, this information is protected by HIPAA.
4. A pharmaceutical company asks for a list of all individuals in your practice, so
they can send those individuals a free gift of a pill sorter. Is it permissible for you
to provide the list?
Yes, if each individual on the list signed an authorization permitting the Covered Entity
to release the PHI necessary for the marketing purposes.
5. Which of the following actions would cause a healthcare provider to become a
Covered Entity?
File a claim for payment electronically
6. Courtney's emergency room doctor would like to share Courtney's personal
health information with another physician on call to obtain a second opinion
about her diagnosis. Does the minimum necessary rule apply?
No, Courtney's emergency room doctor can share Courtney's personal health
information with the second doctor without violating HIPAA.
7. True or False: HIPAA's Privacy and Security Rules dictate exactly how covered
entities and business associates must dispose of records.
False
8. Linda's practice calls individuals to confirm appointments. Karen requests that
the practice does not make these calls to her because she is afraid her husband
will become abusive if he finds out she is seeking treatment. Karen says she will
call the practice to confirm and asks to be taken off the call list. Does HIPAA
require the practice comply with Karen's request?
Yes. This is a request for a reasonable accommodation because Karen believes she is
endangered.
9. The first step toward security rule compliance is:
To complete a risk assessment
