HIPAA HIO-201 Exam Questions in PDF and Online

QUESTION: 25

A hospital is preparing a file of treatment information for the state of California. This file is to be sent to external medical researchers. The hospital has removed SSN, name, phone and other information that specifically identifies an individual. However, there may still be data in the file that potentially could identify the individual. Can the hospital claim "safe harbor" and release the file to the researchers?

Yes - the hospital's actions satisfy the "safe harbor" method of de-identification.
No - a person with appropriate knowledge and experience must determine that the information that remains can’t identify an individual.
No - authorization to release the information is still required by HIPAA
No - to satisfy "safe harbor" the hospital must also have no knowledge of a way to use the remaining data to identify an individual.
Yes - medical researchers are covered entities and "research" is considered a part of "treatment" by HIPAA.

Answer(s): D

Reveal Solution Next Question

QUESTION: 26

Which of the following is NOT a HIPAA national health care identifier?

National Provider Identifier (NPI)
Social Security Number (SSN)
National Health Plan Identifier (PlanID)
National Employer Identifier for Health Care (EIN)
National Health Identifier for Individuals (NHII)

Answer(s): B

Reveal Solution Next Question

QUESTION: 27

Select the correct statement regarding code sets and identifiers.

A covered entity must use the applicable code set that is valid at the time the transaction is initiated.
April 14, 2003 is the compliance date for implementation of the National Provider Identifier.
CMS is responsible for updating the CPT-4 code set.
An organization that assigns NPIs is referred to as National Provider for Identifiers.
HHS assigns the Employer Identification Number (EIN), which has been selected as the National Provider Identifier for Health Care.

Answer(s): A

Reveal Solution Next Question

QUESTION: 28

This security standard requires that the covered entity establishes agreements with each organization with which it exchanges data electronically, protecting the security of all such data:

Security Incident Procedures
Integrity
Person or Entity Authentication
Assigned Security Responsibility
Business Associate Contracts and other Arrangements

Answer(s): E

Reveal Solution Next Question

QUESTION: 29

Select the FALSE statement regarding code sets and identifiers.

The CPT-4 code set is maintained by the American Medical Association (AMA).
A covered entity must use the applicable medical code set that is valid at the time the health care is delivered.
The National Provider Identifier (NPI) will be assigned by the National Provider System (NPS).
The Centers for Medicare and Medicaid Services is responsible for updating the HCPCS code set.
The National Provider Identifier (NPI) will be assigned to health plans.

Answer(s): E

Reveal Solution Next Question