HIPAA Basics
Privacy & Confidentiality
Security & Technology
Breaches & Incident Response
Who's Who of HIPAA Breaches
100

This term refers to identifiers linked to health information, such as a patient’s name, address, and social security number.

What is Protected Health Information (PHI)?

100

The Consent to Use and Disclose PHI form specifies whether a patient wants other people to discuss their medical care, as well as this option for when calling the patient.

What is leaving a detailed message?

100

All documents containing PHI should be _______ after use.

What is shredded?

100

A HIPAA breach needs to be reported to affected individuals and U.S. Department Health and Human Services within this amount of time.

What is 60 days?

100

This was a BIG deal! Former UCLA cardiothoracic surgeon Huping Zhou was convicted of accessing the records of this actor and several others' without authorization. He ended up serving 4 months in federal prison.

Who is Tom Hanks?

300

This federal law establishes national standards for protecting patients’ health information.

What is HIPAA? (Health Insurance Portability and Accountability Act)

300

Healthcare offices will provide this document to patients that is an explanation of how their PHI is used, shared, and protected.

What is Notice of Privacy Practices

300

This should generally be kept private and never shared with coworkers simply for convenience.

What is your password?

300

This type of event involves the acquisition, access, use, or disclosure of PHI in a manner not permitted by HIPAA that compromises its security or privacy.

What is a breach?

300

Oops! They did it again. This singer has been the victim of 2 separate HIPAA breaches. The second time happened during her psychiatric hospitalization at UCLA Medical Center. 13 employees were fired and 6 were suspended for viewing her records without authorization.

Who is Britney Spears?

500

HIPAA was signed into law the year President Bill Clinton was re-elected.

What is 1996?

500

This principle means staff should access, use, or disclose only the PHI needed to accomplish the intended purpose.

What is the minimum necessary standard?

500

Did you really win a trip to Bora Bora? Beware of getting "hooked" with this type of email!

What is phishing?

500

Employees at the Ronald Reagan UCLA Medical Center might have thought it was a "Thriller" to view this singer's records after his death in 2009. They ended up being fired, and the hospital was fined $95,000.

Who is Michael Jackson?

M
e
n
u