HIPAA & Privacy
Fraud, Waste and Abuse
Reporting Concerns
Investigations
Regulatory Compliance
100

This law protects patient health information

What is HIPAA?

100

Intentionally billing for services not provided is an example of this

What is fraud?

100

Employees can report concerns through this hotline

What is the Compliance Hotline?

100

The primary goal of an investigation is to determine this.

What are the facts?

100

Compliance programs are designed to help organizations follow these.

What are laws and regulations?

200

This acronym stands for Protected Health Information

What is PHI?

200

Ordering services that are not medically necessary may be considered this.

What is waste?

200

Reports can be made anonymously. True or False?

What is True?

200

This is the amount of time you have to make contact with reporter.

What is 24 hrs?

200

The Office of Inspector General is commonly known by this acronym.

What is OIG?

300

Looking at a patient's chart without a business need is considered this

What is unauthorized access?

300

Deliberate misrepresentation to obtain payment is called this.

What is fraud?

300

Taking adverse action against someone for reporting a concern is called this.

What is retaliation?

300

This document explains how CCF use and share patient health information

What is Notice of Privacy Practices?

300

Regular monitoring and auditing help identify this.

What are compliance risks?

400

The HIPAA principle requiring employees to access only the information needed to perform their job

What is Minimum Necessary?

400

Waiving copays or providing free services to induce referrals may violate this law.

What is the Anti-Kickback Statute?

400

Employees should report concerns when they have a good-faith belief misconduct may have occurred.

What is True?

400

Next steps if you receive request for investigation documents

What is forward to Stephanie and Anna for review?
400

This federal agency enforces privacy and security requirements under HIPAA.

What is the Office for Civil Rights (OCR)?

500

Sending patient information to the wrong recipient may result in this.

What is a privacy breach?

500

Submitting claims with false information can expose an organization to penalties under this federal law.

What is the False Claims Act?

500

This law protects individuals who report suspected wrongdoing.

What is Whistleblower Protection?

500

The number of days from discovery to notify impacted party of Breach 

What is 60 days?

500

Name two of the seven elements of an effective Compliance program

What is 

  1. Written Policies and Procedures
  2. Compliance Leadership and Oversight
  3. Training and Education
  4. Effective Lines of Communication with the Compliance Officer and Disclosure Program
  5. Enforcing Standards: Consequences and Incentives
  6. Risk Assessment, Auditing, and Monitoring
  7. Responding to Detected Offenses and Developing Corrective Action Plans