Generally HIPAA
To do or not to do that is the question?
What does that mean?
Practice Makes Perfect
HIPAAand the Rich and Famous
100

Why do we want to protect our patients information?

To protect residents from identity fraud, among other cybersecurity concerns

100

Can you give out PHI to anyone who asks for the information? 

NO! 

100

State what the HIPAA acronym stands for?

Health Insurance Portability and Accountability Act

100

True or False 

Healthcare workers can go to jail for selling resident information.

TRUE! Penalties can be up to $250,000 or 10 years in jail 

100

You notice that Taylor Swift has checked into the North Nebraska clinic. You are working at Fletcher. Your worried about T-swift.  It is ALWAYS ok to access her chart because you are a TFHC employee. 

False

200

What is considered PHI? 

Name, Address, Dates, phone number, fax address, email address, social security number, medical records, many more! 

200

If I don’t know if I can give out information to someone who is asking what should I do or who should I ask for guidance? 

If you don’t know ASK!

Ask your supervisor and they will confirm. In any case, a best response would be "I'll ask my supervisor, and we can get back to you." 


200

When would you have a patient or guardian sign a release of medical information ? 

If Medical information needs to be released to another healthcare agency or party

200

What question should you first ask yourself before you look at any patient information?

Do I need to know this to do my job? 

200

Salma Hayek falls in front of the clinic she comes in for care for her knee. She is discharged. Later on a delivary person shows up with food as a thank you to the clinic. Before giving you the food they want to verify that this was the clinic Salma was seen at. Do you answer yes she was a patient and take the food?

No, Say that you cannot disclose the information and turn the food away respectfully.

300

True or False 

Protecting HIPAA is only the providers responsibility ?

False 

300

True or false 

You notice an outside healthcare vendor was looking over your shoulder while you were charting you don’t need to report them looking over your shoulder as a HIPAA violation since their are a vendor who is contracted with TFHC

False. The same rules apply they only have access to what they need to do their job . When in doubt report is as a violation so it can be investigated further . 

300

true or false 

Malware does not put healthcare information at risk?

False, Malware can introduce viruses or Trojan horses that can gain access to a healthcare systems data. This can be through compromised passwords, sharing passwords or clicking on unauthorized links . 

Healthcare organizations are a prime target for cyberattacks because they store large amounts of sensitive patient data that is valuable to attackers. There have been held hostage unthinkable their ransom was paid . 





300

True or False 

It’s ok to throw a Patient's information into a garbage can if it tear it up?

False. Healthcare facilities employ shredding companies to ensure the information is destroyed of properly . 

300

J.Lo checks in her child for care. Your co-worker is a huge fan and takes a selfie with her. what is your response. 

Ask them to kindly delete it , remind them that taking photos of a patient is a HIPPA violation and notify your supervisor. 

400

True or False?

Doctors are permitted to see all information about every patient.

False - Doctors are only permitted to see PHI of their own patients. 

400

Is it ok to give a physician that comes to a facility with their credentials and a patient name , dob and information requesting a copy of the patient chart too care for them. 

No. A medical release is necessary when in doubt ask your supervisor

400

What does PHI stand for?

Protected Health Information 

400

Can a patient access their PHI whenever they request? 

YES! In any case a patient  themselves requests access to their PHI they can do so.  They can access the information from my chart. 

You can also direct them to medical records or educate them on my chart 

400

Prince comes into north Nebraska. he sadly passes away after his visit .It has been 2 years since this happened. TMZ asks you for a interview. Since its been two years its ok and he's dead. 

No, HIPPA remains in place.

500

What is the most common HIPPA breach in health care facilities ?

hint: this was covered in a presentation today 

Leaving a computer unlocked. If you get up lock the computer .

500

If a surveyor from HRSA shows up alone at the front desk they request you take them for a tour and to see your facility and medication logs . It is ok since they are a surveyor.

No. If a surveyor from HRSA or anyone from state/federal agencies shows up alone asking to come into the clinical areas kindly ask them to wait in a non-clinical area , inform them you are getting your supervisor and get your supervisor immediately.  

500

True or false 

Technical safeguards are the technology, and the policy and procedures for its use that protect electronic protected health information and control access to it.

True

500

A patient passed away in 2018, today you're being requested for their name, date of birth, and where they used to live. Should you give the requested party the information? 

No. HIPAA still applies to deceased individuals. 

500

Tom cruise is seen in our clinics for a eye exam. He signs a consent, but it was dated wrong, and you make a new one. You are allowed to keep the old one as a memento since it's invalid. 

No