People/True or False/Misc
Policies
Security
Misc.
True or False
100
Contractors who receive protected health information.
What are Business Partners (Associates)?
100
Health Insurance Portability and Accountability Act.
What is HIPAA?
100
It's ok to post PHI or other confidential information to social networking sites such as Facebook, Twitter.
What is FALSE, Even if you don't think what you are posting is identifiable - it reflects poorly on you and SRH
100
Protected Health Information.
What is PHI?
100
Do not BCC on an email when sending a large e-mail distribution - particularly those that are to patients' private e-mails.
What is FALSE, always BCC never CC as this is the same as sharing patients phone numbers and addresses.
200
Restricting access to the IT department of the hospital would fall under what safeguard required by the security rule of HIPAA.
What is Physical?
200
This is how voicemails to patients should be left.
What is general information? for example "This is (name) calling from SRH to confirm (patient name) appointment on Thursday at 1pm.
200
Name, Address, Admission Dates, Social Security Numbers, birth dates, Clinical Notes, Medical Record Numbers (for example).
What are examples of PHI?
200
This law was originated to protect Electronic Data.
What is HIPAA?
200
It is ok to look at patients records when it is not relevant to performing your job.
What is False, you should never look as patients records outside of your scope of work and not relevant to your job.
300
These are the two people that would need to be notified of HIPAA violations at SRH.
Who are Manager/Supervisor and the Chief Privacy Officer?
300
PHI or other confidential information should always be ______ when sending emails outside of our intranets.
What is encrypt?
300
You might be tempted to this violation when calling a patient.
What is make sure you are speaking with someone over the phone that you do not volunteer patient information until confirming you are speaking to the patient.
300
Benefits of HIPAA.
What protects individuals from having their patient information shared with inappropriate parties?
300
It is ok to share your ID and passcodes.
What is False, you should never give out your ID or passcodes and if you are aware that someone has discovered it you need to change your password right away.
400
Never use a coversheet when sending faxes.
What is False, always use a coversheet when transmitting information via the fax
400
HIPAA's Birthdate.
What was signed into law in 1996 under the department of Health and Human Services?
400
You might be tempted to commit this violation when registering a patient.
What is volunteering patient demographic and insurance information ? It is important that the patient is giving us the information.
400
It is ok to have a patient related discussion in a public area or areas where you can be overheard by others who do not have a need to know.
What is False, always lower your voices or find a private area to have patient specific (identifiable) discussions in public areas.
400
Always lock or log off of your computer when you walk away.
What is True, Never leave your computer logged on or unlocked for others to use while you are away. Would you leave your keys in your unlocked car for others to use?
500
This person is SRH's privacy officer.
What is Gayle Torgerson.
500
This is included in on all ougoing emails.
What is the Confidentiality Statement?
500
Paper work that is stripped of identifying information.
What is de-identified information?
500
Confidentiality Statement.
What do the reviewers present to the sites on each visit that is HIPAA Compliant?
500
Documents containing PHI can be thrown in the trash can.
What is False, all documents containing PHI must be disposed of in a secure shred bin.
M
e
n
u