Congratulations, you passed this test!
Question 1 of 5 Correct
Select the best answer: Protected health information (PHI) is data about a person and the healthcare they have received. What does the HIPAA Privacy Rule say about PHI?
Your Answer
Keep PHI private from people unless the Privacy Rule allows them to see it.
Feedback
Protected health information (PHI) should be kept private from other people unless the Privacy Rule allows them to see it.
Question 2 of 5 Correct
Fill in the blank: There are a few times when covered entities (CEs) can use and disclose protected health information (PHI) without permission from the person. One example of this is when __________.
Your Answer
Other providers need to give treatment.
Feedback
There are times when other providers giving treatment to the person will need their PHI. Other examples include when others might be at risk of harm and also for the purpose of submitting claims for payment.
Question 3 of 5 Correct
Fill in the blank: A healthcare worker observes a visitor looking through a person's medical file. This breach should be reported ______________.
Your Answer
Right away
Feedback
A breach should be reported right away to a manager, the privacy officer, or the compliance hotline or other reporting portal.
Question 4 of 5 Incorrect
Select the best answer: Administrative safeguards help covered entities (CEs) know when they can share protected health information (PHI). What is a safeguard that a CE may use?
Your Answer
Put guardrails around high platforms.
Correct Answer
Have a set of rules for the CE.
Feedback
An example of an administrative safeguard for CEs is having a set of rules or policies and procedures to run the facility.
Question 5 of 5 Correct
Select the best answer: What can a healthcare worker do to make sure the person who speaks little English knows how their protected health information (PHI) will be used?
Your Answer
Provide a copy of the Notice of Privacy Practices (NPP) in their preferred language.
Feedback
Healthcare workers should provide a Notice of Privacy Practices (NPP) the first time a person receives a service. It should be provided in the person's native or preferred language.