Pass the HIPAA CHP HIO-201 Questions and answers with CertsForce

Testing and Revision Procedures

Information System Activity Review

Response and Reporting

Data Backup Plan

Emergency Access Procedure

Simple flat file structure for transactions.

Envelope structure for transactions.

Employer identifier.

Health plan identifier

Provider identifier.

A covered entity must apply disciplinary sanctions against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.

A covered entity need not train all members of its workforce whose functions are materially affected by a change in policy or procedure.

A covered entity must designate, and document, a contact person responsible for receiving acknowledgements of Notice of Privacy Practice.

A covered entity may require individuals to waive their rights.

A covered entity must provide maximum safeguards for PHI from any intentional or unintentional use or disclosure that is in violation of the regulations and to limit incidental uses and disclosures made pursuant to permitted or required use or disclosure.

The Notice must be signed before a State authorized notary

Direct Treatment Providers must make a good faith effort to obtain patient's written acknowledgement of Notice of Privacy Practices.

Organizations may not have a "layered" Notice - a short, summary Notice preceding the more detailed Notice.

Authorization forms are mandatory for the Notice to be valid

An individual must sign an authorization before a state authorized notary.

277.

278.

271.

82.

270.

A covered entity must designate, and document, a privacy official, security officer and a HIPAAcompliance officer

A covered entity must designate, and document, the same person to be both privacyofficial and as the contact person responsible for receiving complaints and providing further information about the notice required by the regulations.

A covered entity must implement and maintain written or electronic policies and procedures with respect to PHI that are designed to comply with HIPM standards, implementation specifications and other requirements.

A covered entity must train, and document the training of, at least one member of its workforce on the policies and procedures with regard to PHI as necessary and appropriate for them to carry out their function within the covered entity no later than the privacy rule compliance date

A covered entity must retain the document required by the regulations for a period often years from the time of it's creation or the time it was last in effect, which ever is later.

Access Establishment and Modification

Isolating Health care Clearinghouse Functions

Information System Activity Review

Risk Management

Risk Analysis

Access to the psychotherapy notes.

Request an amendment to their medical record.

Receive a digital certificate.

See an accounting of disclosures for which authorization was given.

The use of a smart card for accessing their records.

270.

820

837.

277.

278.

H must be written in plain, simple language

It must explicitly describe all uses of PHI

A description about the usage of hidden security cameras for tracking patient movements for implementing privacy.

A description of the duties of the individual

A statement that the individual must abide by the terms of the Notice.