Violations
Scenarios
HIPAA
PHI
Challenge
100

What is the base cost of a HIPAA violation/penalty?

$100

100

2 doctors are having a conversation in the elevator that includes PHI, would this fall under security or privacy rules? 


Privacy

100

What does HIPAA protect?


PHI

100

Blood test results are considered PHI true or false?

True

100

Who enforces the HIPAA regulations?

Human and Health Services (HHS)


200

True or False? 

Looking up patients’ medical records who you are not taking care of is not a HIPAA violation. 

False

200

You are working at a desk at a busy clinic, you're checking a patient in on the computer when they start to feel faint. Before you get a wheelchair and take them to another room, what should you do? 


Turn off/ Lock your computer

200

Can a facility impose fees for someone who wants a printed copy or electronic copy of their records?


True

200

What does PHI stand for?

Protected healthcare information

200

How much does someone have to pay if they want a printed copy or electronic copy of their records?

$6 or $6.50


300

True or False? 

Throwing PHI in the trash isn‘t a HIPAA violation.

False

300

You’re working at a busy outpatient clinic, two of your friends Carol and Nate  are in the waiting room. You get Nate into his room, and you return to the waiting room to get Carol to her room. As you’re walking there Carol asks you why Nate is there. How should you respond?

I’m sorry but I can’t tell you that. We take privacy very seriously here.


300

Who is required to have HIPAA training?

Anyone who handles PHI in a covered entity/business associate 


300

List one thing you could do to protect PHI?

lock computer, shred files, keep papers in a folder


300

What year was HIPAA passed?

1996

400

What is the name of the regulator responsible for enforcing violations related to HIPAA?

OCR or HHS


400

Dr. Kalina asks her coworker who is working with an important person and she would like to know about the patient's medical records. Dr. Kalina is not working with the patient, how should her coworker respond? 


I’m sorry but I can’t tell you that because you're not with the team that is helping the patient and that would violate HIPPA violations. 


400

What does HIPAA stand for?

Health insurance portability and accountability act


400

A patient's name and contact information is considered PHI true or false?

False because no healthcare information is associated with it.


400

A patient wants a copy of their medical records, how long do you have to provide them to the patient?


30 days


500

List 2 common HIPAA violations


-Snooping on Healthcare Records

-Failure to perform an organization wide risk analysis

-Improper disposal of PHI

-Insufficient PHI access controls


500

Jordan Love comes into the hospital with a sprained ankle and Dr. J is taking care of his situation. After the operation, Dr. J asks Love if he can take a picture with him but won't post it on social media and Love says yes. Is this violating HIPAA?

No because Jordan Love gave him permission, Dr. J didn’t post it on social media and was the one working on his situation. 


500

What are the different types of HIPAA?

The HIPAA Security Rule, The HIPAA Privacy Rule, and The HIPAA Breach Notification Rule 


500

List at least 3 things that would be considered PHI

billing information from your doctor, blood test results, phone records, MRI scans


500

The right to make changes and view PHI is called what?

Patient access rights to PHI