1.  Under HIPAA’s privacy rule, when is disclosure of patient information permitted without prior written authorization?
For treatment
For payment
For health care operations
All of the above

2.  Under both 42 CFR Part 2 and HIPAA’s privacy rule, when may patient information be disclosed?
With prior written authorization
When requested by the patient in person
When requested by another health care provider
After the patient has died

3.  Which element is NOT required on a Part 2 consent form?
Name of the patient
Purpose of the disclosure
Date of last service
Date on which consent was signed

4.  In which way does the Privacy Rule written authorization differ from the Part 2 consent form?
The Privacy Rule disclosure must indicate whether or not signing the form is a condition of treatment.
The Privacy Rule disclosure may be signed by a personal representative.
The Privacy Rule disclosure must be written in plain language.
All of the above

5.  The Privacy Rule imposes ______ additional steps programs must take when disclosing information pursuant to a patient’s written consent.
Two
Three
Five
Seven

6.  According to Part 2, who must sign a consent form if the patient is a minor?
Always the minor only
Always the parent or guardian only
Always the minor, in some states the parent or guardian
Always the parent or guardian, in some states the minor

7.  How can consent be revoked?
Part 2 – orally / Privacy Rule – in writing
Part 2 – in writing / Privacy Rule – orally
Both – orally
Both – in writing

8.  Under the new Privacy Rule, programs may continue to follow the Part 2 directions for disclosure in cases of:
Internal program communications
Child abuse reporting
Court-ordered disclosure
All of the above

9.  Which of the following is a qualified service organization for a treatment program under Part 2?
The program’s advertising agency
The program’s accountant
The program’s board of directors
All of the above

10.  What are qualified service providers called under the Privacy Rule?
Qualified service providers
Service providers
Business associates
Qualified business associates

11.  Substance abuse treatment programs subject to the Privacy Rule who undergo accreditation will have to sign what document with the accreditation organization?
Qualified Service Organization Agreement
Non-disclosure Agreement
HIPAA Disclosure Agreement
Business Associate Contract

12.  When a treatment program is audited or evaluated by the agency’s own employees, disclosure of patient-identifying information is permissible:
Without patient consent under both Part 2 and the Privacy Rule
Without patient consent under Part 2, but only with consent under the Privacy Rule
Only with patient consent under Part 2, but without patient consent under the Privacy Rule
Only with patient consent under both rules

13.  Part 2 and the Privacy Rule have different requirements regarding the disclosures of health information to:
Home health aides
Parents
Researchers
All of the above

14.  Under the Privacy Rule, patients must be notified of the treatment program’s privacy practices as well as:
The name of the treating physician
The patient’s rights under the Privacy Rule
The date the Privacy Rule became law
The fact that disclosure may be made without consent when any attorney asks for it

15.  Under the Privacy Rule, the disclosure notice must include:
A description of the types of uses and disclosures that the program may make without consent or authorization
A statement that other disclosures will be made only with the patient’s written consent
A statement that the program may contact the patient to provide appointment reminders
All of the above

16.  Which of the following is NOT required on a notice vis-à-vis patient rights with respect to PHI?
The right to access and amend PHI
The right to know who the treatment program’s accountant is
The right to receive an accounting of the program’s disclosures of PHI
The right to obtain a paper copy of the notice upon request

17.  Under Part 2, when must programs provide the consent disclosure notice to the patient?
On the date of first service delivery
At the time of admission
As soon after admission as the patient is capable of rational communication
Either B or C

18.  A person may see his or her own records
Without written consent under both Part 2 and the Privacy Rule
Without written consent under Part 2, but only with written consent under the Privacy Rule
With written consent under both rules
With written consent under Part 2, but without it under the Privacy Rule

19.  Under which of the following circumstances may a program NOT deny a patient access to his or her own records?
When a licensed health care professional has determined that the access is likely to endanger the safety of the patient or another person
When the information makes reference to another person who may experience substantial harm if the information is disclosed
When the information is likely to cause harm to the environment
When the request for access is made by the patient’s personal representative and a licensed health care professional has determined that disclosure is likely to cause substantial harm to the patient or another person

20.  The Privacy Rule provides individuals with the right to obtain an accounting of certain disclosures of PHI made by a program during the _____ years prior to the request.
6
8
10
12

Take Exam Now!