Health

Insurance Portability and Accountability Act

(HIPAA) Video Quiz Answer Key
Quiz and answer key based on course material:

1. The Health Insurance Portability and Accountability Act (HIPAA) provides individuals with
certain rights regarding their protected health information. Which of the following
statements does NOT apply?

A. Individuals can request and receive a copy of their protected health information.
B. Covered entities can share an individual’s protected health information with
family members regarding their care and treatment.
C. Individuals can know how their information is being shared.
Answer: B. HIPAA provides individuals with the right to receive a copy of their protected
health information to know how their information is shared and to ensure its
accuracy. Also there are standards for electronic health care transactions
recognizing that use of technology could breach the privacy of health information.

2. True or False? Health information connected to a person (including their name, address
and social security number) that includes past, present or future health conditions is
considered Protected Health Information under the Act.

True False
Answer: True. Protected Health Information also includes: how health care is provided and
payment history. This information is covered by HIPAA when it is used orally, printed
on paper or sent electronically. Always assume any health information in your
possession is protected by HIPAA unless told otherwise by a subject-matter
specialist.

3. A covered entity is required to provide a patient with a copy of their privacy policy and
patient rights in ALL of the following EXCEPT?

A. Any time they attend an appointment for healthcare.
B. Whenever they arrive for new healthcare treatment.
C. Whenever there is a substantive change in their health plan that may affect their
medical privacy.
Answer: A. Covered entities do not have to provide patients with a copy of their privacy
policy and patient rights if they are returning for an appointment related to ongoing
care for a condition they have received treatment for in the past.

www.hronlinecompliancetraining.com Page 1
 Health Insurance Portability and Accountability Act
(HIPAA) Video Quiz Answer Key
4. What steps can a covered entity take to limit the use and disclosure of protected health
information?

A. Have policies and procedures in place that address how they will restrict access to
that information.
B. Communicate the same patient information to all medical personnel regardless of
role.
C. Share protected health information with individuals in order to accomplish the
intended purpose of the information and to provide the appropriate healthcare
support for the patient.
D. A and C
Answer: D. Covered entities are required to take reasonable steps to limit the use and
disclosure of protected health information. Communications should be kept to the
minimum necessary for the individual receiving the information to perform their
role. For example, a physican will share different information with a lab technician
than with an office assistant based on their role.

5. Under the Privacy Rule, there are some instances when obtaining written permission for
release of information is not required. Which one of the following examples does NOT
require written permission for release of information?

A. Sharing of information with a family member or friend for ongoing care and
treatment.
B. Release of information to a health insurance company.
C. Communicating public health activities related to disease control.

Answer: C. Permission for communications is not required regarding public health activities
related to disease control and for reporting victims of abuse, neglect or domestic
violence.

6. True or False? When a patient is incapacitated or unable to provide consent, the caregiver is
expected to use their personal judgment to determine what is in the best interest of the
patient when disclosing Protected Health Information.

True False
Answer: True. Remember, covered entities MUST obtain written authorization from the
patient to release their protected health information unless the patient is unable to
provide consent (i.e., they are incapacitated or otherwise unable to make their
wishes known.)

www.hronlinecompliancetraining.com Page 2
 Health Insurance Portability and Accountability Act
(HIPAA) Video Quiz Answer Key
7. True or False? It would be appropriate for a nurse to inform a family member of their
parent’s test results without first checking if the patient has provided written consent.

True False
Answer: False. That is correct! Information shared without the patient’s permission is a
breach of Protected Health Information. The patient must provide written consent
for a family member to receive this information regarding his/her care and
treatment. Some exemptions can apply if a patient is incapacitated or if they have
been accompanied by the family member to a medical appointment.

8. True or False? Covered entities are required to provide notice to all patients at their first
visit regarding their rights under HIPAA.

True False
Answer: True. Covered entities are required to provide notice to all patients at their first visit
regarding their rights under HIPAA, including the right to access their own
information and the right to complain if they feel their rights have been violated.
The written acknowledgement that the patient has received notice of the covered
entity’s privacy policies should be kept in the patient’s file.

9. True or False? Patients who have questions or complaints about their protected health
information should first seek clarification from the government.

True False
Answer: False. Covered entities must designate one individual who is responsible for
implementing privacy programs and policies as well as provide patients with the
name of a contact person in their office who is responsible for receiving complaints.

10. Which of the following statements apply to a violation of HIPAA Privacy Laws?
A. Charges can be levied by the government against both individuals and/or
organizations
B. Civil fines can range anywhere from $25,000 up to $1.5 million
C. Penalities can include up to 10 years of imprisonment
D. All of the above
Answer: D. All are charges and penalties for violations of HIPAA Privacy Laws. It is important
to remember that charges can be levied by the government against both individuals
and/or organizations that violate HIPAA Privacy Laws. Civil and/or criminal fines
start at $25,000 and criminal charges can include up to 10 years of imprisonment.

www.hronlinecompliancetraining.com Page 3