Formal, documented instructions for reporting security breaches are referred to as:
The Final Privacy Rule requires a covered entity to obtain an individual's prior written authorization to use his or her PHI for marketing purposes except for:
Which one of the following is a required implementation specification of the Security Management Process?
The implementation specifications for this HIPAA security standard (within Technical Safeguards) must support emergency access and unique user identification:
As defined in the HIPAA regulations, a group of logically related data in units is called a:
To comply with the Final Privacy Rule, a valid Notice of Privacy Practices:
HL7 is particularly involved with:
Once a year, a team at ABC Hospital reviews environmental and operational changes that may have had an impact on the security of electronic PHI. This is an example of:
The Security Incident Procedures standard requires just one implementation specification. That implementation specification is:
A pharmacist is approached by an individual and asked a question about an over-the-counter medication. The pharmacist needs some protected health information (PHI) from the individual to answer the question. The pharmacist will not be creating a record of this interaction. The Privacy Rule requires the pharmacist to:
