HIPAA Basics
Patient Rights
Privacy Rule
Security
Rule
Enforcement Rule
100

This law was enacted in 1996 to protect patient health information.

What is HIPAA?

100

This right allows patients to access their medical records and obtain copies.

What is right to access?

100

This term refers to the information that identifies an individual and is protected under the Privacy Rule.

What is protected health information/ (PHI)?

100

This type of information is specifically protected by the Security Rule when it is stored or transmitted electronically.

What is electronic protected health information?

100

This is the main goal of the Enforcement Rule.

What is to enforce HIPAA compliance?

200

The acronym HIPAA is a sentence composed of six words

What is Health Insurance Portability and Accountability Act?

200

Teens may have the right to make their own healthcare decisions in certain situations, often referred to as this.

What is mature minor consent?

200

Under the Privacy Rule, patients have the right to request restrictions on this type of information sharing.

What is disclosure of their health information?

200

This is a common way to protect electronic health information by using a secret code that only authorized users know.

What is a password?

200

This type of penalty can be imposed for violating HIPAA rules.

What is a monetary fine?

300

Patients can request this type of record that includes their medical history and treatment details under HIPAA.

What is a Medical Record?

300

Under HIPAA, patients have the right to request this type of communication regarding their health information, such as via phone or email.

What is confidential communication?

300

The Privacy Rule allows minors to have this right regarding their own health information, depending on state laws.

What is the right to consent to treatment?

300

Under the Security Rule, this is the required action that healthcare organizations must take to assess potential risks to ePHI, ensuring compliance with the Security Rule.

What is risk assessment?

300

This federal agency is responsible for enforcing HIPAA regulations.

What is the Department of Health and Human Services (HHS)?

400

HIPAA allows patients to request their health information be sent to this type of person, as long as they provide consent.

What is a Third Party?

400

This right allows patients to request changes to their health information if they believe it is incorrect or incomplete.

What is right to amend?

400

This is the document that healthcare providers must provide to patients, detailing how their health information will be used and shared.

What is the Notice of Privacy Practices?

400

Under the Security Rule, this is the term for unauthorized access to ePHI, which can lead to significant penalties for healthcare providers.

What is a security breach?

400

This is the maximum fine for a HIPAA violation due to willful neglect.

What is $1.5 million?

500

This is the year HIPAA was enacted into law.

What is 1996?

500

Patients have the right to receive this document, which explains how their health information will be used and shared by healthcare providers.

What is notice of privacy practices?

500

Under the Privacy Rule, this is the maximum fine that can be imposed for a violation due to willful neglect that is not corrected.

What is $1.5 Million?

500

This group of individuals must be trained on the Security Rule to ensure the protection of ePHI within a healthcare organization.

Who are the workforce members?

500

This is the way individuals can report suspected HIPAA violations.

What is filing a complaint with HHS?