Effective Study Techniques for the HIPAA HIO-201 Exam

$5,000 in fines.

55000 in fines and six months in prison.

An annual cap of $50,000 in fines.

A fine of up to $50,000 if they wrongfully disclose PHI.

Six months in prison.

A person who acts on behalf of a non-covered entity.

A person who's function may involve claims processing, administration, data analysis or practice management with access to PHI.

A person who is a member of the covered entity's workforce.

A clearinghouse.

A person that performs or assists in the performance of a function or activity that involves the use or disclosure of de-identified health information.

Premium Payment.

Health Care Claim.

First Report of Injury.

Health Plan Enrollment and Dis-enrollment.

Coordination of Benefits.

The social security number has been selected as the National Health Identifier for individuals.

The COT code set is maintained by the American Medical Association.

Preferred Provider Organizations (PPO) are not covered by the definition of "health plan" for purposes of the National Health Plan Identifier

HIPAA requires health plans to accept every valid code contained in the approved code sets

An important objective of the Transaction Rule is to reduce the risk of security breaches through identifiers.

Termination Procedures

Automatic Logoff

Emergency Access Procedure

Contingency Operations

Response and Reporting

Covered entities that violate the standards or implementation specifications will be subjected to civil penalties of up to $100 per violation except that the total amount imposed on any one person in each calendar year may not exceed $25,000 for violations of one requirement

Criminal penalties for non-compliance are fines up to $65,000 and one year in prison for each requirement or prohibition violated

Criminal penalties for willful violation are fines up to $50,000 and one year in prison for each requirement or prohibition violated.

Criminal penalties for violations committed under “false pretenses” are fines up to $100,000 and five years in prison for each requirement or prohibition violated

Criminal penalties for violations committed with the intent to sell, transfer, or use PHI for commercial advantage, personal gain or malicious harm are fines up to $250,000 and ten years in prison for each requirement or prohibition violated

Power Backup plan

Data Backup Plan

Security Testing

Risk Analysis

Authorization and/or Supervision

Person or Entity Authentication

Technical Safeguards

Administrative Safeguards

Physical Safeguards

Transmission Security

277.

278.

271.

82.

270.

Contingency Plan

Evaluation

Security Management Procedures

Facility Access Control

Security Incident Procedures