HIPAA 101
DID I VIOLATE YOU
COMMON EXPOSURES
WHAT'S THE PURPOSE
KEEP IT SAFE
100

What is Protected Health Information (PHI)

Health information that can directly or indirectly identify a patient.

100

Oh, no! Everyone in the clinic knows that I just had open heart surgery because you forgot to do this with my chart.

Secure/ Out of Public View

100

Discussion of patient information in these types of places...like the cafeteria or waiting room...are prohibited.

Public 

100

HIPAA was first introduced in this year

 1996

100

When working on the computer you should keep your screen ___.

Out of Public View 

200

__________ should be shared on a need-to-know basis.

PHI

200

I'm going viral because you placed a picture of my records on this

Social Media 

200

"Man, I just messed up on this note. I guess I'll ball it up and just throw it away...No, I better do this instead."

Shred it 

200

It is mandatory to follow HIPAA; it's the _____

Law

200

You must obtain this prior to sharing or releasing information to others who don't "need to know."

Consent/Authorization

300

To protect information on computer screens you should always do this before leaving

Lock or Log off 

300

HIPAA violations are punishable by fines and or this

Imprisonment

300

"Don't Tweet about me bro! You are putting my PHI on ___"

Social Media

300

HIPAA is enforced and regulated by the _______ government.

Federal 

300

I'm leaving the room my computer screen must be locked or I need to ___.

Log off

400

_____establishes privacy and security protections for health information

HIPAA

400

HIPAA violations are punishable whether they are ______ or _________.

Intentional or Unintentional

400

"Hey Jill, let me fax you a copy of this patient's license, his picture is so funny!"

- "You better not, that is a _______ violation."

HIPAA

400

HIPAA helps to reduce fraud and __.

Abuse 

400

You should store patient charts in this type of area.

Secure 

500

Mr. Fox's wife wants to know how he is doing, you must first ensure Mr. Fox has given this

Consent/Authorization

500

Name the Rule: "Use, disclose, or request only the minimum PHI needed to complete the intended purpose."

Minimum Necessary Rule 

500

You wanted to see if your friend was admitted to the hospital. By looking this up you accessed the information although you had no need to _______.

Know

500

HIPAA stands for

Health Insurance Portability and Accountability Act

500

If faxing information, use a fax coversheet with this type of statement.

Confidential

M
e
n
u