Effective Study Techniques for the HIPAA HIO-201 Exam

No - This would be considered an allowed "routine disclosure" between the doctor and his business partner

Yes - There is no exception to the requirement for an authorization prior to disclosure, no matter how well intentioned or documented.

Yes - a delivery service is not considered a covered entity

Yes - to be a “routine disclosure” all the parties must have their own Privacy Officer as mandated by HIPAA

Yes - this is not considered a part of "treatment", which is one of the valid exceptions to the Privacy Rule

National PKI Identifier.

National Standard Health Care Provider Identifier.

National Standard Employer Identifier.

Standards for Electronic Transactions and Code Sets.

Security Rule.

Risk Analysis

Access Control and Validation Procedures

Integrity Controls

Access Authorization

Termination Procedures

270

276

278

280

834

Their professional judgment and standards.

The policies set by the security rule for the protection of the information.

Specific guidelines set by WEDI.

Measures that are expedient and reduce costs.

The information for research and marketing purposes only.

Patient's country of birth

Patient's pet name

Patient's weight

Patient's address

Patient's date of birth

Requires PKJ for the provider and the patient.

Is electronically stored information about an individual's lifetime health status and healthcare.

Is another name for an HMO.

Identities all non-profit organizations.

Is a person or an entity that on behalf of the covered entity performs or assists in the performance of a function or activity invoking the use or disclosure of health-relatedinformation.

Security information such as a fingerprint.

Privacy information.

Information on all business associates.

Information on all health care clearinghouses.

Identifiers.