Employee HIPAA Training Follow-Up Questions.

1.

1 point

True or False: I should write my password down and have it accessible in case someone needs to log into my user profile when I am not at work.

True

False

2.

1 point

A patient asks that I send her test results to her via email. Is it appropriate to send the results to her email?

Yes, email, including gmail and hotmail, is a safe and private way to send PHI

Yes, the Privacy Officer has determined that it is okay to send email with PHI, as long as you encrypt the email.

Maybe, the patient should first be directed to the patient portal to receive the test results. If you have to send an email, you should check with the Privacy Officer first and use an approved encryption method

No, email should never be used to transmit PHI

3.

1 point

As an employee of South Texas Renal Care Group (STRCG), you must comply with the requirements of which of the following laws:

HIPAA

Texas Medical Records Privacy Act

Both

Neither

4.

1 point

A patient requests a change to her medical record. As an employee, should you make the change?

No, a patient cannot request changes to her medical record. Only the medical office or the doctor can change the medical record

Yes, automatically, I have to make all requested changes to the medical record.

Potentially, I should consult with my supervisor before making the change.

5.

1 point

As an employee, can you review the medical record of your friend or family member to make sure they are in good health and they are not sick?

No, this may be considered a breach and you should only access PHI that relates to your job

Yes, you are accessing the medical record with good intent

No, you can only review the medical records of public figures and not private individuals.

Yes, but only for your family members, including family members older than 18, but not your friends

6.

1 point

A patient requests that STRCG send all mailings to his work address instead of his home address. Can you do this?

No, the home address is more appropriate location to send confidential documents

No, you can only use the address that is listed in the patient’s file

Yes, the Patient has the right to request alternative methods of communication including an alternative address.

Yes, confidential documents should never be sent to a patient’s home.

7.

1 point

If STRCG or an employee violates HIPAA or the TMRPA, STRCG or the employee could face which of the following penalties:

Monetary penalties

Jail time

Exclusion from state-funded healthcare programs.

All of the above

8.

1 point

Which of the following types of information is not a piece of Protected Health Information:

Health Plan Beneficiary Number

Name

Emergency Contact’s name

Date of Birth

9.

1 point

I’d like to text PHI to another health care provider for a patient’s treatment purposes. Can I text the provider the PHI?

No, PHI should never be texted but can be emailed using your personal email account

Yes, iChat or any text messaging program is fine as long as you personally know the recipient

Yes, but only through approved means like the HIPAA compliant app - qliqSoft

No, PHI can never be sent via an electronic mobile device including laptops, cell phones and tablets

10.

1 point

Where should you dispose of paper-based PHI when you no longer need the PHI?

Tear it up and throw it in the trash

The recycle bin

The appropriately labeled and secured shredding bin

The trash