HIPAApotamus (What is HIPAA?)
Help, I've Fallen and Broken My HIPAA (Violations)
LA Confidential (Use and Disclosure)
Preventing HIPAAtitis (Protections)
Fee PHI Fo Fum (ePHI)
100

HIPAA is an acronym for this.

What is the Health Insurance Portability and Accountability Act?

100

Sending confidential information via ____ would be a violate HIPAA.

What is email/text/any unsecured medium?

100

TRUE or FALSE: Confidential information may be shared to public health authorities to receive reports for the purpose of preventing or controlling disease, injury, or disability. 

What is True?

100

Emails with protected information may be shared with others inside and outside of the organization if the emails are _____

What is encrypted? 

100

PHI is an acronym for this.

What is Protected Health Information?

200

HIPAA covers both clients and _____

What are employees?

200

Fines and possible prison time.

What are the penalties for HIPAA violations?

200

Examining a record for quality improvement (ie., peer review).

What is an example of "use?"

200

Physical documents containing confidential client information should be disposed of in this manner.

What is shredded?

200

There are this number of personal identifiers which must be protected.

What is 18?

300

This individual will help a client file a grievance if they claim their right to restrict information shared was denied.

Who is Ruth Llewellyn? Also acceptable - Who is the Client Rights Officer?

300

A breach is defined as "any unauthorized or _______ use or disclosure of confidential information" due to willing and/or malicious carelessness, curiosity, or concern.

What is unnecessary?

300

Name three reasons you may be able to break confidentiality.

What is a Plan to commit suicide, plan to commit homicide, and/or Child/elder/dependent adult/animal abuse?

300

To protect electronic information, passwords should be changed, at least, every _____ days.

What is 90?

300

You should not be discussing client information in this location.

What is the hallway? Other answers may be acceptable.

400

Name the two rules that comprise HIPAA.

What is the Privacy Rule and the Security Rule?

400

Breaches of HIPAA are reported to this agency.

What is the Department of Health and Human Services? Possibly acceptable - "What is the media?"

400

Calling children services as a mandated reporter and sharing information about a client.

What is a disclosure?

400

Mindy Ingram has decided to complete her client progress notes at a coffee shop. Name two things Mindy can do to protect her clients' information.

"What is: don't go to a coffee shop. Ensure nobody can see her screen. Ensure she is using agency technology with proper security features. Use a screen blocker. Ensure no paper notes are left behind?"

400

"The lady with the bright pink hair and the lion tattoo on her right arm," is an example of this.

What is a unique identifier?

500

This is the purpose of HIPAA

What is to establish appropriate safeguards to protect the confidentiality of health information?

500

Serious criminal violations of HIPAA may result in prison sentences of up to this many years.

What is 10 years?

500

Client information may be used for treatment coordination, quality improvement purposes, or for this essential feature.

What is payment/billing?

500

The HIPAA compliant way to send a fax.

What is to coordinate with the receiving party to ensure no other entity/individual has access to the protected information?

500

Personally identifiable information can be disclosed in these three ways.

What is physically (paper), electronically, verbally?

M
e
n
u