Privacy, Security, and You: Protecting Patient Confidentiality Under HIPAA

Quiz Questions – New Volunteer Orientation/Annual In-service

*First name:

*Last name:

Email:

*1. As a healthcare worker, you may share PHI for:

a. Treatment b. Payment c. Healthcare operations d. All of the above

Minimum Necessary Standards

*2. Your cousin is a patient at this hospital. You are not involved in her treatment but would like to send her a get-well card. What is the best way to find out about her treatment?

a. Ask her physician for the information b. Ask her directly c. Access her medical record d. Do nothing at all.

*3. The privacy rule’s minimum necessary standard requires providers to?

a. Include all treatment related disclosures in accounting of disclosures b. Refrain from accessing PHI during emergencies c. Determine who needs what information and only provide the necessary amount and type d. Document all conversations that include ePHI

*4. When discussing PHI, try to

a. Lower your voice b. Use non-generic terms c. Move to a more private area d. Both a and c

Notice of Privacy Practices

*5. What should you tell an individual who asks for information about HIPAA or his or her privacy rights?

a. Explain the organization’s HIPAA privacy policies b. Give copies of the organization’s notice of privacy practices and tell the individual to direct further questions to the Privacy Officer c. Ask whether the individual is a current patient. If the person is, providers should supply a copy of the notice of privacy practices d. None of the above

Facility Directory

*6. If a patient decides to opt out of your facility’s directory, which of the following applies?

a. Registration Staff cannot give out information about the patient but other staff may b. Nobody at the organization can give out information about the patient, including the fact that the patient is at the healthcare organization in the first place c. No family members or friends can visit the patient d. None of the above

Patient Access to Medical Records

*7. A patient may inspect or copy his or her entire medical record

a. Except for psychotherapy notes b. Except notes or information compiled for use in a civil, criminal, or administrative proceeding c. If patient provides proper identification d. All of the above

Password Management

*8. The most secure passwords are:

a. Names of sports teams b. Personal names or fictional characters c. Combinations of upper and lowercase letters, and numbers that are at least six characters long d. Dates of birth

Viruses/Malicious Software

*9. How can you prevent malicious software (Malware) from harming your organization’s network?

a. Install software (e.g. music-sharing software, remote-access software, etc.) only with approval from your organization’s technical staff b. Connect other devices (e.g., laptop computers or personal digital assistants) to the network only with approval from your organization’s technical staff c. Download anti-malware tools to your computer d. Both a and b

Physical Security

*10. Physical security includes which of the following?

a. Locking doors and desks b. Keeping PHI out of view of those around you c. Storing computer equipment safely d. All of the above

Compliance

*11. Corporate Compliance is the responsibility of the Compliance Officer, Compliance Committee, and Upper Management only.

True False

*12. Ways to report a compliance concern include:

Corporate Compliance or OIG Hotline - Anonymous/Non-retaliatory Your supervisor Compliance Officer All of the above

*13. A compliance program includes seven elements.

True False

*e-signature (First and Last Name)

*Date:

Submit