Chapter 3
The office manager reviews the staff ____________ every 6 months to determine if any unauthorized information was accessed
audit trail
After Kevin’s HIV results are in, the doctor asks him to make an appointment to review the results together in a private office setting. This is an example of
confidentiality
The privacy rule prohibits the discussion of patient information in the following areas:
elevators, reception areas, at the cashier’s window
This is a common duty of the front office assistant?
Greeting patients, creating and maintaining the EHR and Providing patient education materials
Purging is
the practice of removing inactive and closed health records away from active records
In order to release patient information for participation in a research study, a ________ form would be completed in SimChart for the Medical Office
disclosure authorization
Name one aspect addressed by HIPAA
Portability of insurance coverage, security and privacy
The practice of enforcing penalties for staff failing to comply with security measures falls under
sanction policy
Double Jeopardy!!!
No-shows
are situations in which patients fail to show up for appointments and do not call to cancel
These types of patient correspondence can be created in SimChart for the Medical Office
Email, Phone messages, Letters
Kim has an appointment with a specialist to discuss chronic syncopal episodes. She needs a copy of her PMH to be sent to the specialist. What document is needed in this situation?
Authorization
What does protected health information pertain to?
Health information stored and transmitted electronically
Security guards are an example of a/an
physical safeguard
These are basic information needed for written phone messages
patient’s name and date of birth, date and time of the call, and initials of the person taking the message
Encryption and decryption technology are examples of
technical safeguards
Katie is going to an ENT specialist for seasonal allergies. Only those progress notes pertaining to treatment of rhinitis and copies of sinus x-rays are sent to the specialist’s office. This is an example of...
minimum necessary standard
The privacy rule requires providers to do all of this:
designate a privacy official, offer authorization forms for the release of PHI. Train staff members of the policies of HIPAA
Giving two or more patients the same appointment slot with the same provider is known as
double-booking
All of these following are ways to avoid duplicate charts
asking whether patients have been seen at the practice before, asking an established patient if he or she goes by a different name, setting up the patient record using the name listed on the insurance card
The privacy rule states that patients have a right to know who has had access to their records. The log of those disclosures must include all of the following:
the date of the disclosure, the name and address of the entity who received the information, the purpose of the disclosure
Implementation of user names, passwords, and screen savers are examples of ______________
safeguards
This is an example of a covered entity?
Provider’s office, Clearinghouse and Medical billing office
Double Jeopardy!!!!
A system that keeps data secure by converting them to an unreadable code during transmission and then unencrypting the information when it reaches the recipient is known as
encryption technology
Patient records are classified into all of the following groups
active, inactive, closed
This healthcare worker usually provides the first impression of the office