# Presentation: 111820

## $100: 42 C. F. R. Part 2 is?

- A. Confidentiality of mental health treatment records
- B. Confidentiality of alcohol and drug abuse patient records

- C. Federal data sharing regulations
- D. Federal child abuse reporting and privacy regulations

## $200: Which one of these is NOT a covered entity?

- A. Health plan
- B. Health care clearinghouse

- C. Patient
- D. Health care provider

## $300: Which one of these is NOT a health plan?

- A. HMO
- B. Medicare

- C. CHAMPUS
- D. Nursing home

## $500: When a disclosure is made in compliance with HIPAA and 42 C.F.R. Part 2, how much information can be disclosed?

- A. All information unless specifically restricted by the patient
- B. Minimum necessary amount

- C . Maximum necessary amount
- D. Only what the patient allows since the patient can request an amendment to the record

## $1000: 42 C.F.R. Part 2 prohibits redisclosure of information. HIPAA does not. What should a provider do?

- A. Follow HIPAA and allow redisclosure
- B. Allow redisclosure of information if a warning is included in a consent

- C. Follow 42 C.F.R. Part 2 and prohibit redisclosure
- D. Allow BAs and QSOs only to redisclose information a provider has disclosed to them because they are not covered entities

## $2000: When does PHI become protected for someone seeking substance abuse treatment?

- A. Upon application for treatment
- B. Upon admission to the program

- C. Upon completion of the program
- D. Once the information is stored electronically

## $4000: Which one of the following is NOT an exception to the right of a patient to access their own records?

- A. The patient refuses to sign a consent
- B. Psychotherapy notes

- C. PHI maintained by a covered entity subject to CLIA
- D. Access to records may cause harm to the patient

## $8000: Which of the following could be used by a program to share communicable disease information with a public health agency?

- A. Written consent
- B. Court order and subpoena

- C. QSO
- D. All of the above

## $16,000: When a material change is made to a Notice of Privacy Practices, the provider is required to do all of the following except?

- A. Revise the notice promptly
- B. Make the revised notice available

- C. Send the revised notice to all patients in the past 6 years who received the previous notice
- D. Post the revised notice

## $32,000: Which of the following is NOT required to be included in the Notice of Privacy Practices?

- A. Fees for copying
- B. The effective date of the notice

- C. A statement of the patient’s right to amend PHI
- D. Privacy officer and/or privacy office contact information

## $64,000: Who has authority to enforce HIPAA compliance ?

- A. CSAT
- B. SAMHSA

- C. OCR
- D. HCFA

## $125,000: In order to share PHI with program staff, a provider must do all of the following except?

- A. De-identify all PHI
- B. Identify staff or classes of staff that need access

- C. Make reasonable efforts to limit access
- D. Identify the categories of PHI that will need to be accessed

## $250,000: Which one of these is NOT considered a method of transmitting health information electronically ?

- A. Via the Internet
- B. Via e-mail

- C. Via computer disk
- D. Via fax

## $500,000: Entity A is a qualified service organization. Is entity A also a business associate?

- A. Yes
- B. No

- C. Not necessarily
- D. Yes, unless they do not transmit PHI in electronic form

## $1 Million: Is a client I.D. number considered PHI?

- A. Yes
- B. No, as long as the number is random and does not include information such as a social security number

- C. No, never
- D. No, as long as the client I.D. number is kept separate from the list linking it to a patient name