CRIS Certification Test



2014 CRIS Test

Please circle the best answer.

Section A: MEDICAL RECORDS THEORY

1. Who owns the medical record?

a) The patient

b) The physician

c) The heath care facility

d) The Federal Government under HIPAA

2. The tool most often used to gather a complete medical record is the :

a) Conditions of Admission

b) Notice of Privacy Practices

c) Master Patient Index

d) Information Management Plan

3. The purpose(s) of the medical record is/are:

a) To assist in further research and education

b) To assist in protecting the legal rights of the patient and healthcare facility

c) To provide analysis, study and evaluate care given to the patient

d) All of the above

Section B: RELEASE OF INFORMATION QUESTIONS (ROI)

4. Which of the following may be considered an improper disclosure of protected health information?

a) Releasing records to a requester for legal purposes without a signed patient

authorization.

b) Accidentally releasing the wrong patient’s records to a requester.

c) Releasing dates of service to a requester if the service dates were not

authorized.

d) All of the above

5. Which of the following is not required on a HIPAA compliant authorization?

a) Name of the healthcare provider

b) Identity of the patient

c) Any fees associated with the release

d) Signature of the patient or his/her personal representative

e) Expiration date or event

6. A patient presents to the HIM Department requesting information about a recent biopsy. The patient reveals he wants to know details about the procedure and specifics regarding the specimen removed. The patient should be advised to request a copy of:

a) Entire record

b) Operative and Pathology Report

c) History and Physical

d) None of the above

7. Some attorneys send a courtesy deposition letter prior to issuing a subpoena. Can you release information without authorization if you have the deposition letter prior to receiving the subpoena?

a) Yes

b) No

8. A facility may put all the elements of a valid authorization on one form to cover HIPAA, chemical dependency, HIV and genetic testing.

a) True

b) False

9. When a patient completes an authorization, can they simply put “at the request of the patient” as a disclosure purpose?

a) Yes

b) No

10. With a court order (signed by a judge), is an authorization signed by the patient or personal representative required?

a) Yes

b) No

11. Which of the following hospital departments have access to a patient’s medical records without authorization? (please circle all that apply)

a) Nursing unit – patient readmitted to hospital

b) Cook in food service – reviews for friend

c) Medical Staff Physician not treating patient or consulting – reviews because

patient is a former patient

d) Quality Management Personnel – reviews for hospital statistics

e) Human Resources Receptionist – reviews for an employee

f) Risk Management – reviews for administrative issue

12. The PRO or QIO (Peer Review Organization or Quality Improvement Organization) contracted with CMS (Centers for Medicare & Medicaid Services) requests copies of medical records. Are they allowed access to the medical record without an authorization for a patient with schizophrenia??

a) Yes

b) No

13. What is the difference between a patient’s request and a patient’s authorization?

a) There is no difference.

b) The request is verbal and the authorization is in writing.

c) The request is in writing and asks that records be released; the authorization is the written permission to do so.

14. If there is a breach of protected health information, which of the following legal actions may be taken?

a) Civil Action

b) Criminal Action

c) Both

d) Neither Civil or Criminal Action

15. Birth and death certificates may be released by the hospital.

a) True

b) False

16. What records do you copy for a Medicare request?

a) Records specified for dates requested

b) The entire record

c) Current records only

Section C: Application/Practicum Questions

17. Dr. Grant and Dr. Palmer work at the same hospital. Dr. Grant is the only physician

treating Dr. Palmer’s son, Jerry, who is 18 years old and able to sign for himself. Dr. Palmer signs an authorization and demands to see his son’s records. He is a well-known physician at the hospital. Does he have a right to access this medical record without authorization?

a) Yes

b) No

18. A female patient has expired in your hospital. Your state law specifies that in the case of a deceased patient, all of the following individuals may have equal access to the patient’s records: Executor of the estate, Administrator of the will, Surviving Spouse, Surviving Parents, and Surviving Children. She was a widow with two (2) daughters, Sally and Beth. Both daughters admitted their mother into the hospital and are listed on the chart as next of kin. Beth is the executor of the will. Sally calls you, explaining that the sisters are in the midst of an argument concerning their mother’s will. She asks you to copy the records for her (she offers to come in to sign the release) and also asks that you deny such release to her sister, Beth. You should tell her:

a) To write a letter stating why Beth should not have access to the information.

b) To bring proof of her identity for the records before she picks them up.

c) That Beth has a right to receive a copy of the records as executor and as a surviving child.

d) B & C

19. A woman calls to tell you she has received a bill for outpatient services (which she has already spoken to the billing department about), but was never a patient at the hospital. She suspects someone has fraudulently used her name and insurance cards. She requests a copy of the record “out of curiosity”. You should tell her:

a) You will speak to the Manager about correcting the situation so that the record does not appear under her name, but you cannot release medical information related to another person without consent of the patient.

b) She is entitled to the information since the person used her name.

c) You cannot give it to her since you know the situation, but if she calls back and speaks to someone else, she can probably get it.

20. A man calls and says that he wants his history and physical sent to the insurance company for consideration of a life insurance application. “One minor thing…if it has anything in there about my history of smoking, just cover that up when you copy it, OK?” You tell him:

a) You must copy the report in full, as it appears in the record. You apologize that you cannot fulfill his special request, but this would be considered tampering with his medical record.

b) You can fold the report when you copy it so it will not appear on the copy.

c) You tell him to have the records sent to him, so he can make any changes he wants and then send it off to the insurance company.

21. A patient signs an authorization for release of medical records and you notice the patient was treated in the chemical dependency program. The authorization you received is a general authorization. You:

a) Call to tell the patient that it is a special circumstance and ask whether you should still send the records.

b) Send the records but mark them with a special stamp.

c) Send a letter requesting special authorization for this particular situation, and enclose the special authorization that’s required.

22. A nurse who works in the hospital comes in the HIM department to request copies of the medical record of her mother-in-law, who now resides in a local nursing home. The nurse tells you she has power of attorney and needs the records for personal reasons.

a) You request a copy of the power of attorney to make sure that this includes power of attorney for medical care. Then you follow the appropriate release procedure.

b) You send the request directly to the nursing home; asking them to verify whether the daughter-in-law nurse has power of attorney.

c) You only need to have the authorization signed, since the nurse is wearing an identification badge and is employed by the hospital.

23. You are working in a small town where everyone knows everyone else. A mother comes in and asks for copies of her daughter’s medical records. The mother explains that her daughter is 20 years old and attends college out of town. The mother also explains that they are changing HMOs, so she needs the records to take to the new clinic. The authorization is signed by the mom. You should:

a) Tell the mom you need her daughter’s authorization to release the records to the mother.

b) Tell the mom that she can have the new clinic request the records directly for treatment purposes.

c) Copy the records, put them in a sealed envelope and tell the mom not to open the envelope before she brings them to the new clinic.

d) A & B.

24. You are working in a children’s hospital. You have received a request from the mother of a 17-year-old married patient for his medical records. The parents consented for the 17-year-old to marry and marriage is grounds for emancipation in the state. The mother wants the records to complete the personal health record she has compiled and wishes to give to her son. You should:

a) Copy the records because the age of majority in the state is 18.

b) Tell the mom the son must sign the authorization now that he is an emancipated minor.

c) Tell the mom her son’s wife must sign the authorization now that she is the next of kin.

25. A man walks into the Health Information Management Department where you work. He is asking for copies of his now deceased father’s records. You should:

a) Copy the requested records for the son and bill him for the pages.

b) Tell the son you need a signature from the deceased patient’s wife.

c) Refuse the request because you don’t know if the patient is deceased.

d) Ask for a copy of court documents appointing him executor or administrator of the father’s estate. If there is no executor or administrator, ask for a copy of the death certificate and determine who is “next of kin”or has access to a deceased patient’s records in your state before you copy the records.

26. An insurance company is requesting the medical records of a person who wants to purchase life insurance with this company. The authorization submitted is invalid. But the agent has called you three times about this request and is begging you to copy the records. You should:

a) Copy the records while he tries to get a new authorization from the patient.

Tell the agent you need a valid authorization before you can copy the records.

b) Call the patient and ask if it is OK for you to copy his medical records for the agent.

c) Copy the records and mail the records to the home office of the insurance company instead of giving them directly to the agent.

27. You are working in a clinic close to your home. You are filling in for a vacationing employee, who is the only employee at this location. A request and valid authorization for the medical records of your neighbor is in the pile of requests you have to process today. You should:

a) Complete the request for records. Review as little as possible. Any information you learn while processing the request must be kept confidential and safeguarded.

b) Give it to the medical secretary and ask her to do it since you know the patient.

c) Refuse to process the request.

d) Call your neighbor and ask if it is ok if you send the medical records.

28. Erica Smith, 19 years old, has submitted an authorization asking for a copy of an x-ray

taken when she was 5 years old at another hospital. The records she is requesting are in her chart at your hospital. The designated record set in your healthcare facility includes outside records used for treatment purposes. Are you allowed to release these records?

a) Yes

b) No

29. The non-custodial parent requests a copy of their child’s medical record. The parent provides documentation that they are indeed the child’s parent. There is no notice of child abuse or a restraining order in the file. The non-custodial parent has a right to access the medical record.

a) True

b) False

30. A doctor requests copies of his wife’s records, whom he is not treating and she has no medical condition that would limit her ability to sign. You refuse to copy and release the records because you do not have a signed authorization from the wife.

a) True

b) False

31. A minor’s mother calls your HIM Department explaining that her family moved and the school needs a copy of her child’s immunization records to begin school the next day. She states that she can fax a letter with full instructions. Immunization records are required for a child to begin school in both the old and the new state where the minor resides. What should you do?

a) Ask the mother to fax her request with the minor’s full name, identification data & recipient instructions so that you may process the request right away.

b) Tell the mother an authorization is required per HIPAA and her written request will not be good enough.

32. One of the HIM employees brings a chart to you and asks you to copy some of the records. This employee has no authorization. What do you do?

a) You tell the employee that you need a HIPAA compliant authorization before you can copy the record.

b) Copy the record, because she wouldn’t ask you to copy something if she didn’t need it.

c) Tell the HIM manager the employee is doing something unethical.

d) Put it on your pile and “forget” to do it.

33. You have access to the computer at your facility. You forgot your password, but the computer next to your desk is on and no one is working there. Should you use that computer?

a) Yes. The computer has the same programs, so it is OK for you to use this computer.

b) No. You call the person in charge of passwords at your facility, and ask for help .

34. A revocation of an authorization allows the patient to change his/her mind about the release of their medical records if it has not been acted upon yet.

a) True

b) False

35. You are working for a facility that does not release outside records for ROI requests. If an attorney says he needs to obtain records from all the facilities in which the patient was treated and asks you to give him the names of the facilities for any “other records” in the chart, should you provide a list?

a) No – where a patient was seen is protected health information, and should be kept confidential.

b) Yes – since they requested records and sent an authorization they have a right to know even if it is against hospital policy.

Section D: HIPAA QUESTIONS

36. “Designated Record Set” includes the following information regarding health care

decisions:

a) Medical records

b) Billing records

c) Claims information

d) All of the above

37. Which of the following types of information does HIPAA’s Privacy Rule protect?

a) Oral health information

b) Health information in paper form

c) Health information in electronic form

d) All of the above

38. HIPAA’s Privacy Rule gives a patient the right to access their:

a) Medical record only

b) Designated Record Set

c) Itemized bill only

d) Insurance records only

39. Can a healthcare facility deny a patient’s request to amend or correct his/her medical record?

a) Yes

b) No

40. What are required disclosures under the HIPAA Privacy Rule?

a) Disclosures to the patient

b) Disclosures to another healthcare facility

c) Disclosures to the Secretary of HHS for purposes of compliance

d) A & C

41. Which of the following is not a public priority exception to HIPAA’s Privacy Rule?

a) Requests for child or elder abuse investigation

b) Public health reporting

c) Law enforcement purposes

d) Insurance company requests

e) Coroner requests

42. For which reason under HIPAA’s Privacy Rule can protected health information be disclosed without authorization?

a) Treatment

b) Payment

c) Health care operations

d) All of the above

43. Under HIPAA, a personal representative is an individual who is authorized to sign an authorization on behalf of the patient. Choose all possible personal representatives:

a) Parent of a minor child

b) Legal guardian of a minor child

c) Patient’s attorney

d) Person who holds Durable Power of Attorney for Healthcare

44. A person who is a caregiver or bill payer for a patient has the right to access the records about that deceased patient’s death.

a) True

b) False

45. If a patient brings a personal flash drive to the facility and asks you to copy his record onto the flash drive, HIPAA requires that the facility must honor the patient’s request to put the data onto the patient’s personal device.

a) True

b) False

46. A “valid” authorization must contain specific elements including:

a) A patient’s right to revoke

b) A re-disclosure statement

c) Signature and date by the patient or their personal representative

d) All of the above

47. Copy fees charged to a patient under HIPAA cannot include:

a) Copying costs including labor

b) Retrieval or handling fees

c) Actual postage

d) All of the above

48. Covered entities must provide individuals with an accounting of disclosures for a

period of up to six years.

c) True

d) False

49. Incidental disclosures are permitted however, the covered entity has to use

reasonable and appropriate safeguards.

a) True

b) False

50. Covered entities are permitted to re-disclose patient health information

received from other healthcare providers for treatment purposes.

a) True

b) False

51. A person or organization that performs a function or activity on behalf of a

covered entity, but is not a part of the covered entity’s workforce is called:

a) A HIPAA Contingent

b) A Business Associate

c) A Patient’s Advocate

d) All of the above

52. The HIPAA Privacy Rule generally treats information about one medical

condition the same as information about any other medical condition.

Psychotherapy Notes are an exception. Psychotherapy notes may not be

routinely shared and require a patient authorization for any disclosure.

a) True

b) False

53. What does HIPAA stand for?

a) Health Information Privacy and Accountability Act

b) Health Insurance Portability and Accountability Act

c) Health Information Protection and Authorization Act

d) Health Insurance Privacy and Authorization Act

e) None of the above

54. What does PHI stand for?

a) Public Health Information

b) Physician Hospital Information

c) Protected Health Information

d) Patient Hospital Information

e) None of the above

55. What are some of the personal identifiers that become PHI if combined with health or payment information?

a) Social Security number

b) Email address

c) Home address and phone number

d) All of the above

e) None of the above

56. A patient may designate a third party to receive a copy of their Protected Health Information if their request is in writing, clearly identifies the third party recipient and where to send the copies.

a) True

b) False

57. Which one of the following types of requests does not fall under TPO (Treatment, Payment or Healthcare Operations)?

a) Transfer-of-care

b) Insurance claim

c) Hospital Risk Management

d) Insurance Underwriting

e) Medicare Audit

58. Which of the following is the best example of a “Right to Revoke” statement?

a) I understand that I can revoke this authorization at any time.

b) I hereby revoke all prior authorizations that may have been provided to you by an insurance company or other entity.

c) I understand that this authorization is subject to revocation.

d) I understand that I have a right to revoke this authorization at any time by submitting written notice to the following address.

59. Which of the following is a valid “Re-disclosure” statement?

a) I understand that state law restricts the re-disclosure of healthcare information without the patient’s written authorization.

b) I understand that once disclosed, my records may be subject to re-disclosure and will no longer be protected by federal privacy laws.

c) I authorize my records to be re-disclosed as needed in order to expedite my application for life insurance.

d) I understand that “Insurer” will not re-disclose the medical records received except to our agents and subcontractors or as directed to by law.

e) None of the above.

60. Which of the following is a valid “Conditioning” statement?

a) I understand that my treatment, payment or eligibility for benefits cannot be conditioned upon whether or not I sign this authorization.

b) I understand that my treatment, payment or eligibility for benefits will be available only upon the condition that I sign this authorization.

c) I understand that my treatment, payment or eligibility for benefits will be approved regardless of my medical condition.

d) I understand that my treatment, payment or eligibility will be denied if I do not disclose all pre-existing medical conditions.

e) None of the above.

61. HIPAA preempts all state laws governing the release of medical information.

a) True

b) False

62. HIPAA requires a valid authorization before medical records can be released to any requester.

a) True

b) False

63. HIPAA requires that a valid authorization include the patient’s birth date.

a) True

b) False

64. HIPAA requires that a valid authorization include an expiration date or event.

a) True

b) False

65. HIPAA requires that a valid authorization include a description of how the patient

may revoke his/her authorization.

a) True

b) False

66. Patients have a right to receive an electronic copy of their health information in the form and format requested if the information is readily producible and maintained electronically . (For example, a patient requests a pdf file of their PHI from the electronic health record and the EHR can produce a pdf.)

a) False

b) True

67. Subpoenas are exempt from the HIPAA valid authorization requirements if there is proof that the patient was notified of the subpoena, had time to object, and the objection period is over.

a) True

b) False

68. If a patient pays for a service with cash and asks that the information from the visit be restricted from being disclosed to the patient’s insurance company, must the facility honor the patient’s request?

a) Yes

b) No

69. Disability requests are exempt from the HIPAA valid authorization requirements.

a) True

b) False

70. Court Orders are exempt from the HIPAA valid authorization requirements.

c) True

d) False

Section E: Standard Definitions

71. What is a Court Order for healthcare records?

a) A legal document signed by an attorney directing the release of medical records without the patient’s authorization.

b) A legal document signed by a judge directing the release of medical records without the patient’s authorization.

c) A legal document signed by the attorney for the patient and the attorney for the plaintiff agreeing on what information will be requested from a healthcare provider.

d) A legal document signed by the patient and notarized by a notary public, appointing another person as their representative for healthcare decisions.

e) None of the above.

72. What is a Subpoena Duces Tecum for healthcare records?

a) A legal document from a court directing the disclosure of medical records without the patient’s authorization.

b) A legal document agreeing on what information will be requested from a healthcare provider.

c) A legal document appointing another person as their representative for healthcare decisions.

d) None of the above.

73. What is a Durable Power of Attorney for healthcare records?

a) A legal document signed by an attorney directing the release of medical records without the patient’s authorization

b) A legal document signed by a judge directing the release of medical records without the patient’s authorization

c) A legal document signed by the attorney for the patient and the attorney for the plaintiff agreeing on what information will be requested from a healthcare provider.

d) A legal document signed by the patient (and notarized in most states), appointing another person as their representative for healthcare decisions.

e) None of the above

74. What is a Certification?

a) A form completed by an attorney certifying that they received all of the records that they requested.

b) A form completed by the records custodian or its agentcertifying that they provided all records requested and that the records copied are true and complete copies of the original.

c) A form completed by a healthcare provider certifying that the information in the records is accurate and true.

d) A form completed by the patient certifying that she/he has provided the name of all of their healthcare providers.

e) None of the above

75. What does an Insurance Underwriter primarily do?

a) Process applications for life and health insurance.

b) Process claims for benefits related to accidental injuries.

c) Process claims for benefits related to workers compensation.

d) Process audits of medical records.

e) All of the above.

76. What does an Insurance Adjuster primarily do?

a) Process applications for life and health insurance.

b) Process claims for benefits related to accidental injuries.

c) Process claims for benefits related to workers compensation.

d) Process audits of medical records.

e) All of the above

77. What does a Peer Review Organization/Quality Improvement Organization primarily do?

a) Process applications for life and health insurance.

b) Process claims for benefits related to accidental injuries.

c) Process claims for benefits related to workers compensation.

d) Process audits of medical records.

e) All of the above.

78.    An accounting of disclosures is a summary of information released, the date information

was released, who the information was released to and the purpose for releasing the

information. Which of the following best describes the type(s) of disclosures that must

be accounted for?

a) If the disclosure was made from an electronic record, the accounting must also

include disclosures related to treatment, payment, and healthcare operations.

b)  The accounting must include disclosures made pursuant to an authorization.

  c)  The accounting must include disclosures for governmental oversights, i.e DHHS. 

d)   Both A & C 

e)  None of the above

79. If a patient does not agree with something documented in the medical record, he or she can request an amendment to the record.

a) True

b) False

80. A Notice of Privacy Practices

a) Includes description of types of uses and disclosures that require patient consent

b) Must be displayed or posted on a healthcare facility’s website

c) Must be signed by patients upon their first visit to a physician

d) All of the above

81. An Electrocardiogram (EKG/ECG) is a test to ensure that the heart is functioning correctly.

a) True

b) False

82. An Electroencephalogram (EEG) is a test to ensure that the brain is functioning correctly.

a) True

b) False

83. A Pulmonary Function Test (PFT) is a test to ensure that the liver is functioning correctly.

a) True

b) False

84. The History and Physical (H&P) is a form the patient completes when they are admitted to the hospital.

a) True

b) False

85. The Discharge Summary (DS) is a report completed by the attending Physician summarizing the treatment provided during an inpatient hospital stay.

a) True

b) False

86. The Continuity of Care Document is a summary of the patient’s visit to a healthcare provider.

a) True

b) False

Section F: Application

87. If you become aware of a misrelease or potential breach, when must you report this to your supervisor?

a) Within 3 days

b) Immediately

88. You receive a request from a Workers Compensation company representing the patient’s employer. They are requesting a copy of the patient’s recent HIV test, but there is no authorization attached. You review the records and discover that the patient is a police officer who was recently stuck with a needle while searching a suspect and that is the reason she filed the claim. What should you do?

a) Reject the request since no authorization was received.

b) Reject the request because medical records can never be released to a patient’s employer.

c) Copy the records since the HIV test is directly related to the Workers Compensation claim and no authorization is required per state law.

d) Copy the request since HIV tests are not specifically covered by HIPAA.

e) None of the above.

89. You work for an ROI service and you are faxing emergency room records for a patient waiting in a doctor’s office. You misdial the fax number and the fax goes to a local business rather than to the physician office. The business calls and tells you they have received the fax in error and that they have destroyed the records. What do you do?

a) Re-copy and fax the emergency room records to the physicians office, making

sure to dial the correct number.

b) Call the patient and tell them that their records have been faxed to the business

in error and apologize for the mistake.

c) Ask your co-worker what he or she thinks you should do about the situation.

d) Notify your supervisor of the improper disclosure.

e) Both A & D

90. You receive a request and authorization for a deceased patient. The authorization is signed by the patient’s cousin, and a Durable Power of Attorney authorizing the cousin to make healthcare decisions is attached. You review the chart and see that the patient’s marital status was listed as “Married” at the time of his last visit. What should you do?

a) Copy as requested since the cousin is listed on the DPOA as having the right to access the patient’s medical records.

b) Copy as requested since the DPOA preempts the spouse’s right to act as legal next-of-kin in this case.

c) Reject the request because a DPOA expires when the patient is deceased, and the right to authorize the release of records defaults back to the spouse, executor of the estate, or others per state law.

d) Reject the request because a DPOA cannot pre-empt the spouse’s right to act as legal next-of-kin.

e) None of the Above

91. You receive a request and a valid authorization from an attorney. The request letter asks for any and all records from 6/1/12 to present. When you review the authorization you note that it authorizes the release of accident records from 6/1/13 to present. You review the chart, and you note that the patient was treated only once for accident related injuries on 6/2/12, but has been seen several times since then for unrelated illnesses from 6/1/13 to the present. What should you do?

a) Copy all records from 6/1/12 to present, since the patient probably just wrote down the wrong information on the authorization.

b) Copy only the accident related record from 6/2/12.

c) Copy only the records from 6/1/13 to present.

a) Return the request because there are no accident records for the dates specified on the authorization.

92. You receive a request from a PRO/QIO that is auditing records for compliance with Medicare regulations. There is no authorization attached. You review the chart and note that the patient is HIV positive. What should you do?

a) Reject the request because HIV information can never be released without the patient’s consent.

b) Reject the request because PRO/QIO audits are not considered part of TPO and they require a valid authorization.

c) Copy the records because HIV information does not require an authorization to be released.

d) Copy the records because PRO/QIO audits are exempt from HIPAA under the TPO exceptions.

e) None of the above.

93. You receive a request from a US Army recruiter. The patient is applying to join the Army and the recruiter needs to review the patient’s records for any healthcare issues that might prevent him from serving. The authorization is valid and signed by the patient. You review the chart and note that the patient is seventeen years old and still considered a minor in your state. What should you do?

a) Copy the records since the patient is almost eighteen and is joining the Army.

b) Copy the records because US Army recruiters are considered medical providers and a valid authorization is not required.

c) Copy the records because Federal Government requests are exempt from HIPAA.

d) Reject the request because the patient’s parent or legal guardian is required to sign the authorization to release the records.

e) None of the above.

94. You receive a request from a patient. She states that she has been transferred to a new job out of state and would like to hand-carry copies of her records, as well as the records for her husband and her newborn baby, to give to their new medical clinic. She is listed as the primary insured in all three of their charts. What should you do?

a) Reject all three requests until her husband signs an authorization to release his records.

b) Copy only her request and her child’s request, and reject the request for her husband’s records until she provides an authorization signed by him.

c) Copy all three requests, including the husband’s, because it is her insurance coverage paying for the medical records and that gives her a right to access them.

d) Copy all three requests, including the husband’s, because she is taking them to a new doctor and medical treatment requests are exempt from HIPAA.

e) None of the above.

95. A Third-Party payer can have all records before and after the claim date without

a HIPAA compliant authorization.

a) True

b) False

96. A Business Associate must comply with HIPAA Privacy & Security rules and is liable and subject to fines for non-compliance.

a) True

b) False

97. A workers compensation carrier can request all records on a patient without authorization, regardless of the date of service.

b) True

c) False

98. A minor can never authorize the release of their medical records without the consent of a parent or guardian.

a) True

b) False

99. A competent adult can be denied access to his/her own medical records in certain circumstances.

a) True

b) False

100. Your neighbor just had a baby boy at your hospital. You found out about it because your neighbor’s husband told you about it after you got home from work. You are free to share this information.

a) True

b) False

................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download