Column A
Column B
True or False
Riddle me This
Column C
100

I come from courts or attorneys' hands,

To access records across the lands.

With legal weight, I make my plea,

What type of request could I be?" 

What is a Subpoena

100

Any entity that is a health care provider that conducts certain transactions in electronic form, a health care clearing house, or a health plan. 

What is the Covered Entity

100

H.I.M department focuses on the management of PHI and records ensuring accuracy, accessibility and security.

TRUE

100

"A note I write to share my say, On who can see my health today. Signed and dated, clear and true, What document am I to you?" 

What is the Patient Directive

100

In the absence of a designated personal representative, who is generally authorized to request a deceased patient's records?

What is Next of Kin

200

What elements are essential for a valid patient directive to release information?

What is the Patient's Signature and Date of the Directive


200

A key protection of the HIPAA Privacy Rule is derived from confidentiality codes and practices in common use today. It is based on sound current practice that protected health information (PHI) should not be used or disclosed when it is not necessary to satisfy a particular purpose or carry out a function. 

What is Minimum Necessary

200

When a patient is deceased, all prior signed authorizations are still honored. 

No

200

"I manage records, keep them tight, Ensuring privacy day and night. From requests to releases, I oversee, What department could I be?" 

What is HIM

200

 At what age can minors typically consent to the release of their own health information without parental involvement? 

What is it Varies by state and type of treatment

300

I am HIPPA covered and can release PHI without an individual’s consent or authorization.

What is a TPO

300

Individually identifiable health information; does not include:• Education records covered by the Family Educational Rights and   Privacy Act, as amended, 20 U.S.C. 1232g;• Records described at 20 U.S.C. 1232g(a)(4)(B)(iv); and• Employment records held by a covered entity in its role as employer. 

What is HIPPA

300

HIPAA no longer protects a patient’s information once they are deceased.

False

300

"I'm young and underage, it's true, My records' access isn't up to you. My guardian holds the key, Unless the law says it's up to me." 

What is Parent or Legal Guardian of the minor's Health Information

300

I am the US Federal law that is designed to protect individuals’ medical records and other personally identifiable information, other personally identifiable information, when sharing PHI I make the call?

What is HIPPA?

400

Substance Use, Mental Health, HIV/AIDS, STD, Adoption and Genetic testing are considered what in a medical record?

What are Sensitive records.

400

"I am the form that tells you who, what and where without me nothing can be shared." 

What is the Authorization

400

A valid subpoena without patient authorization always allows the release of medical records.

False

400

"I am often forgotten but always required,

without me your form should be retired" 

What is Expiration date

400

I am NOT required to be HIPPA compliant, nor require a date, no reason or purpose is needed, no specific form and I can be typed or handwritten in the patient’s voice. 

What is a Patient Directive?

500

Who can authorize the release of a deceased patient’s records?

What is The executor or administrator of the estate?

500

Whether it was communicated or physical information that was given to an unauthorized recipient. What am I?

What is a UAD

500

A patient can verbally authorize ROI?

True with site specifics

500

"I am the rule that keeps things tight,

don’t give too much but just what is right." 

What is Minimum Necessary

500

A 17-year-old seeks treatment for a sensitive issue allowed by state law without parental consent. Who can access those records?

Whose is Only the Minor