Prevention
When to Speak Up
Training
Know Your Role
Vocabulary
100

Is it true that turning off computer screens when not active will help cut down on privacy breaches? 

What is Yes?


Hipaa Awareness Training - NIACC. (n.d.). Retrieved March 31, 2022, from https://www.niacc.edu/wp-content/uploads/PDFFiles/Career_Connections/HIPPA_Awareness_Training.pdf

100

People required to report HIPAA/Security violations.

What is all healthcare workers?


(OCR), O. for C. R. (2021, December 7). The HIPAA Privacy Rule. HHS.gov. Retrieved March 28, 2022, from https://www.hhs.gov/hipaa/for-professionals/privacy/index.html

100

Does the Privacy Rule require you to obtain a signed consent form before sharing information for treatment purposes? 

What is No?


(OCR), O. for C. R. (2021, June 28). Fast facts for covered entities. HHS.gov. Retrieved March 31, 2022, from https://www.hhs.gov/hipaa/for-professionals/covered-entities/fast-facts/index.html

100

HIPAA privacy and security regulations only apply to doctors and nurses.

What is false?


Who does HIPAA apply to? HIPAA Journal. (2022, January 7). Retrieved March 28, 2022, from https://www.hipaajournal.com/who-does-hipaa-apply-to/

100

Behind closed doors, safe and sound; my information won't be found. What is it?

What is privacy?

200

This is how often HIPAA training is required.

What is Annually?

FYI also any time there's a change in practices and technology 

HIPAA training requirements. HIPAA Journal. (2022, March 18). Retrieved March 31, 2022, from https://www.hipaajournal.com/hipaa-training-requirements/

200

The responsibility to inform the individual of a security breach that might affect them belongs to ___________________.

What is covered entities, hospitals, and organizations.


(OCR), O. for C. R. (2021, June 28). Breach notification rule. HHS.gov. Retrieved March 31, 2022, from https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html

200

The number of days you have to file a report or complaint from the date of violation.

What is 180 days?


(OCR), O. for C. R. (2021, June 28). What to expect. HHS.gov. Retrieved March 31, 2022, from https://www.hhs.gov/hipaa/filing-a-complaint/what-to-expect/index.html

200

When are Employees responsible for protecting patient privacy?

What is at all times?


Kelly S. Riggs Portland (OR) Author. (2019, January 24). What all employers need to know about protecting employee health information. Ogletree Deakins. Retrieved March 28, 2022, from https://ogletree.com/insights/what-all-employers-need-to-know-about-protecting-employee-health-information/

200

Speak up for me, by my voice, ensure my care is the best choice. What is this action?

What is patient advocacy? 

300

Can a nurse lose their nursing license as a result of HIPAA violation?

What is Yes?


HIPAA training requirements. HIPAA Journal. (2022, March 18). Retrieved March 31, 2022, from https://www.hipaajournal.com/hipaa-training-requirements/

300

This is where you can file a report on HIPAA/Security violation.

DHS/DHHS OCR

State Agency

HIPAA Compliance Officer

(OCR), O. for C. R. (2021, July 27). Filing a complaint. HHS.gov. Retrieved March 28, 2022, from https://www.hhs.gov/hipaa/filing-a-complaint/index.html

300

Is HIPAA training required for all staff that work in a healthcare organization? 

What is Yes?


(OCR), O. for C. R. (2021, June 28). What to expect. HHS.gov. Retrieved March 31, 2022, from https://www.hhs.gov/hipaa/filing-a-complaint/what-to-expect/index.html

300

You can report a breach anonymously.

What is true?


(OCR), O. for C. R. (2021, June 28). Breach notification rule. HHS.gov. Retrieved March 31, 2022, from https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html

300

A duty missed, a lack of care; I suffer now, it's unfair. What is this fault?

What is negligence?

The failure to exercise the level of care that a reasonable person would exercise under the same circumstances, resulting in harm or injury to another.

400

This is required to be obtained from the patient before health information is used.

What is written permission?


Official 2022 HIPAA Compliance Checklist. HIPAA Journal. (2021, December 15). Retrieved March 31, 2022, from https://www.hipaajournal.com/hipaa-compliance-checklist/

400

The civil penalty for knowingly violating HIPAA.

What is $50,000 per violation up to a max of $1.5 million?


What is the civil penalty for knowingly violating HIPAA? HIPAA Journal. (2022, January 7). Retrieved March 31, 2022, from https://www.hipaajournal.com/civil-penalty-for-knowingly-violating-hipaa/

400

Can a HIPAA violation result in criminal prosecution?

What is yes?


HIPAA violations & enforcement. American Medical Association. (n.d.). Retrieved March 28, 2022, from https://www.ama-assn.org/practice-management/hipaa/hipaa-violations-enforcement

400

You should do this if you notice/witness a breach?

What is notify the HIPAA compliance policy officer?

What happens if you break HIPAA rules? HIPAA Journal. (2022, March 8). Retrieved March 31, 2022, from https://www.hipaajournal.com/what-happens-if-you-break-hipaa-rules/

400

Personal gain can cloud your sight; it's time to do what's just and right. What is this?

What is conflict of interest?

500

Name 2 things HIPAA laws prevent.

Unauthorized access to PHI 

Unauthorized use of PHI 

Unauthorized disclosure of PHI

Loss or theft of ePHI 

Identity theft

Violation of individual rights 

Marketing without authorization 

Selling patient information without consent 

Certain public health disclosures without authorization

500

How a HIPAA compliance breach can be found.

What is through a HIPAA audit, investigations by OCR and or complaints, a digital footprint?


What happens if you break HIPAA rules? HIPAA Journal. (2022, March 8). Retrieved March 31, 2022, from https://www.hipaajournal.com/what-happens-if-you-break-hipaa-rules/

500

The 3 forms or ways protected health information can transmitted.

What is electronic, verbal, and written?


(OCR), O. for C. R. (2021, June 28). The security rule. HHS.gov. Retrieved March 28, 2022, from https://www.hhs.gov/hipaa/for-professionals/security/index.html

500

Under the Minimum Necessary Standard, covered entities must identify who needs access to protected health information to do what?

What is to carry out their job duties?

Hipaa Privacy Rule. HIPAA Journal. (2022, March 7). Retrieved March 31, 2022, from https://www.hipaajournal.com/hipaa-privacy-rule/

500

Know your limits, know your role; stick to tasks that make you whole. What defines this?

What scope of practice?