HIPAA Challenge Exam
Study online at https://quizlet.com/_hxea1y
1. Which of the following are common causes of breaches?: All of the above
Breaches are commonly associated with human error at the hands of a workforce member. Improper disposal of
electronic media devices containing PHI or PII is also a common cause of breaches. Theft and intentional unauthorized
access to PHI and PII are also among the most common causes of privacy and security breaches. Another common
cause of a breach includes lost or stolen electronic media devices containing PHI and PII such as laptop computers,
smartphones and USB storage drives. Lost or stolen paper records containing PHI or PII also are a common cause of
breaches.
2. A Privacy Impact Assessment (PIA) is an analysis of how information is han-
dled:: All of the above
-To ensure handling conforms to applicable legal, regulatory, and policy requirements regarding privacy
-To determine the risks and effects of collecting, maintaining and disseminating information in identifiable form in an
electronic information system
-To examine and evaluate protections and alternative processes
3. Under the Privacy Act, individuals have the right to request amendments of
their records contained in a system of records.: True
4. Under HIPAA, a covered entity (CE) is defined as:: All of the above
Under HIPAA, a CE is a health plan, a health care clearinghouse, or a health care provider engaged in standard electronic
transactions covered by HIPAA.
5. The e-Government Act promotes the use of electronic government services
by the public and improves the use of information technology in the govern-
ment.: True
6. What of the following are categories for punishing violations of federal health
care laws?: All of the above
The three main categories of punishment for violating federal health care laws include: criminal penalties, civil money
penalties, and sanctions.
7. Technical safeguards are:: Information technology and the associated policies and procedures that are
used to protect and control access to ePHI
1/3
Study online at https://quizlet.com/_hxea1y
1. Which of the following are common causes of breaches?: All of the above
Breaches are commonly associated with human error at the hands of a workforce member. Improper disposal of
electronic media devices containing PHI or PII is also a common cause of breaches. Theft and intentional unauthorized
access to PHI and PII are also among the most common causes of privacy and security breaches. Another common
cause of a breach includes lost or stolen electronic media devices containing PHI and PII such as laptop computers,
smartphones and USB storage drives. Lost or stolen paper records containing PHI or PII also are a common cause of
breaches.
2. A Privacy Impact Assessment (PIA) is an analysis of how information is han-
dled:: All of the above
-To ensure handling conforms to applicable legal, regulatory, and policy requirements regarding privacy
-To determine the risks and effects of collecting, maintaining and disseminating information in identifiable form in an
electronic information system
-To examine and evaluate protections and alternative processes
3. Under the Privacy Act, individuals have the right to request amendments of
their records contained in a system of records.: True
4. Under HIPAA, a covered entity (CE) is defined as:: All of the above
Under HIPAA, a CE is a health plan, a health care clearinghouse, or a health care provider engaged in standard electronic
transactions covered by HIPAA.
5. The e-Government Act promotes the use of electronic government services
by the public and improves the use of information technology in the govern-
ment.: True
6. What of the following are categories for punishing violations of federal health
care laws?: All of the above
The three main categories of punishment for violating federal health care laws include: criminal penalties, civil money
penalties, and sanctions.
7. Technical safeguards are:: Information technology and the associated policies and procedures that are
used to protect and control access to ePHI
1/3
