Latest Update
How should organizations provide ways for employees to report regulatory, policy, and
compliance violations? ✔️✔️set up a corporate compliance program
How should an organization that has had a culture of fear change to allow employees to report
regulatory, policy, and compliance violations? ✔️✔️set up an anonymous reporting system
Which option for reporting does an employee have if they report a violation and action is not
taken by their organization? ✔️✔️use whistleblowing
A care coordinator wants to arrange a physical therapy session for a client.
What must the care coordinator do to share protected health information (PHI) with the
physical therapist under the Health Information Portability and Accountability Act (HIPAA)?
✔️✔️Nothing; permission is granted under the HIPAA Privacy Rule
How does the Health Information Portability and Accountability Act (HIPAA) privacy rule guide
health and human service professionals in knowing when they do not have to obtain consent
for sharing client protected health information (PHI)? ✔️✔️The PHI is for a referral to another
professional.
What must a health and human services organization with an electronic health records system
do to remain compliant under the Health Information Portability and Accountability Act (HIPAA)
Security Rule? ✔️✔️use secure passwords
Which identified group is exempt from following the regulations of the Health Information
Portability and Accountability Act (HIPAA)? ✔️✔️An employer-administered group health plan
with fewer than 50 participants
, What form of PHI identifies a client using a series of digits? ✔️✔️medical record number
What form of PHI directly identifies a client based on their locality? ✔️✔️geographic
What type of PHI directly identifies a client based on their physician? ✔️✔️name
A person called claiming to be the family member of a transplant candidate. However, the
transplant coordinator had never spoken with this person before and did not have a signed
consent indicating this individual could be spoken with. The individual asked the transplant
coordinator to share the candidate's status on the transplant list.
Which action should the transplant coordinator take, in compliance with PHI regulations?
✔️✔️decline to give the person the clients information
A health insurance company employee called and asked a transplant coordinator to confirm
that a client was active on the transplant waiting list. The employee wanted to have a case
coordinator follow up with the client.
How should the transplant coordinator respond to the health insurance company, in
compliance with PHI regulations? ✔️✔️confirm the clients status on the phone call
An email from a physician requested a transplant coordinator to schedule a client on the
transplant list to see a surgeon.
What action should the transplant coordinator take, in compliance with PHI regulations?
✔️✔️schedule the client for the appointment with the surgeon
A kidney becomes available for a client who has been waiting for a transplant. The transplant
coordinator calls the hospital and the client to set up the details of the surgery.
What function of operations allows the transplant coordinator to share information with the
hospital, in compliance with PHI regulations ✔️✔️Coordinating care and case management
A complaint is filed against an employee for sharing a client's personal health information in an
improper way by another employee.