Certified HIPAA Professional: HIO-201

Select the correct statement regarding the administrative requirements of the HIPAA privacy rule

A. A covered entity must apply disciplinary sanctions against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.

B. A covered entity need not train all members of its workforce whose functions are materially affected by a change in policy or procedure

C. A covered entity must designate, and document, a contact person responsible for receiving acknowledgements of Notice of Privacy Practice.

D. A covered entity may require individuals to waive their rights.

E. A covered entity must provide maximum safeguards for PHI from any intentional or unintentional use or disclosure that is in violation of the regulations and to limit incidental uses and disclosures made pursuant to permitted or required use or disclosure.

Maintenance personnel that normally have no access to PHI are called in to investigate water that is leaking from the ceiling of the room where a large amount of PHI is stored. The room is normally secured but the file cabinets have no doors or locks. Situations like this are addressed by which Workforce Security implementation specification?

A. Risk Management

B. Written Contract or Other Arrangement

C. Accountability

D. Authorization and/or Supervision

E. integrity Controls

This HIPAA security area addresses the use of locks, keys and procedures used to control access to computer systems:

A. Administrative Safeguards

B. Physical Safeguards

C. Technical Safeguards

D. Audit Controls

E. Information Access Management