As part of their HIPAA compliance process, a small doctor's office formally puts the office manager in charge of security related issues. This complies with which security rule standard?
A doctor is sending a patient's lab work to a lab that is an external business partner. The lab and the doctor's staff are all trained on the doctor's Privacy Practices. The doctor has a signed Notice from the patient. In order to use or disclose PHI, the lab MUST:
The implementation specifications for this HIPAA security standard (within Technical Safeguards) must support emergency access and unique user identification:
The Final Privacy Rule requires a covered entity to obtain an individual's prior written authorization to use his or her PHI for marketing purposes except for:
Select the phrase that makes the following statement FALSE. The 270 Health Care Eligibility Request can be used to inquire about:
This transaction, which is not a HIPAA standard, may be used as the first response when receiving a Health Care Claim (837):
The Privacy Rule has broad administrative requirements. Which one of the following requirements is defined under the Privacy Rule?
The code set that must be used to describe or identify dentists services and procedures is:
Select the correct statement regarding the requirements of HIPAA regulations.
This implementation specification might include actions such as revoking passwords, and collecting keys
The transaction number assigned to the Benefit Enrollment and Maintenance transaction is:
A doctor sends patient records to another company for data entry services. A bonded delivery service is used for the transfer. The records are returned to the doctor after entry is complete, using the same delivery service. The entry facility and the network they use are secure. The doctor is named as his own Privacy Officer in written policies. The doctor has written procedures for this process and all involved parties are documented as having been trained in them. The doctor does not have written authorizations to disclose Protected Health Information (PHI). Is the doctor in violation of the Privacy Rule?
Select the correct statement regarding the administrative requirements of the HIPAA privacy rule.
Implementation features of the Security Management Process include which one of the following?
ABC Hospital implements policies and procedures to ensure that all members of its workforce have appropriate access to electronic protected health information. These policies and procedures satisfy which HIPAA security standard?
This transaction type is a "response" transaction that may include information such as accepted/rejected claim, approved claim(s) pre-payment, or approved claim(s) post-payment:
This transaction supports multiple functions. These functions include: telling a bank to move money OR telling a bank to move money while sending remittance information: