HCCA – CHPC Exam | Questions
and Verified Answers with
Rationale| Rated A+ | Latest Guide
2024/2025
What does HIPAA do?
A. Protects the privacy and security of a patient's health information.
B. Prevents health care fraud and abuse.
C. Provides for electronic and physical security of a patient's health
information.
D. All of the answers. - Correct Answer - D. All of the answers.
What is PHI (Protected Health Information)?
a. Information that can be used to identify a patient.
b. Covered transactions (eligibility, enrolment, health care claims,
payment, etc.) performed electronically.
c. Information about a past or present mental or physical condition of a
patient.
d. All of the answers. - Correct Answer - d. All of the answers.
A covered entity must designate a ___________________ who is
responsible for developing and implementing its security policies and
procedures.
a. physician
b. security official
c. police officer
d. custodian - Correct Answer - b. security official
,A covered entity may disclose protected health information (PHI) without
a patient's written permission for:
a. Treatment purposes
b. Payment
c. Health care operations activities
d. All of the above - Correct Answer - d. All of the above (a covered
entity may use or disclose PHI for TPO)
A covered entity must obtain the patient's written authorization for any
use or disclosure of protected health information (PHI) in which
circumstances?
a. Marketing activities
b. Research
c. PHI sales and licensing
d. Information sharing needed for treatment
e. A and C only
f. All of the above - Correct Answer - e. A and C only
Name examples for which an authorization is required, other than for
use/disclosure of Psychotherapy notes: - Correct Answer - marketing
and sales of PHI
Health information that does not identify an individual is called
_______________.
a. Cloned information
b. De-identified information
c. Re-identified information
d. Misidentified information - Correct Answer - b. De-identified
information
,Note: practice question from AAPC CPCO Ch5
What policy is written to encourage communication?
a. Attendance policy
b. Electronic protected information policy
c. Non-retaliation policy
d. Safety and security management policy - Correct Answer - c. Non-
retaliation policy
What defines and limits the circumstances in which an individual's PHI
may be used or disclosed by covered entities?
a. Constitution
b. First Amendment
c. OIG
d. Privacy Rule - Correct Answer - d. Privacy Rule
PHI may be disclosed without the patient's authorization for
___________________.
a. Death, operations, and birth certificates
b. Treatment, pictures, and operations
c. Injections, shots, and research
d. Treatment, payment, and operations - Correct Answer - d. Treatment,
payment, and operations (TPO)
PHI can be disclosed to another entity for treatment purposes; for quality
or competency assurance activities; or fraud and abuse detection and
compliance activities if both entities have or had a professional
relationship with the patient and the PHI pertains to the relationship.
Note: practice question from AAPC CPCO Ch5
, When can patients instruct their provider not to share information about
their treatment with their health plan?
a. Never, patients must disclose all information to their health plan.
b. Only if the patient tells the secretary when scheduling an appointment
that their information should not be given to their health plan.
c. If, when scheduling an appointment, the patient indicates that they are
paying cash for the visit and do not want their information to be given to
the health plan.
d. Never, because the health plan has a contract with the provider. -
Correct Answer - c. If, when scheduling an appointment, the patient
indicates that they are paying cash for the visit and do not want their
information to be given to the health plan.
Remember: Patients also have the right to request restrictions on the
use and disclosure of their PHI to carry out treatment, payment, and
healthcare operations. These requests do not have to be agreed to by
the covered entity, except when a patient pays by cash, which allows the
patient to instruct the provider not to share information about their
treatment with the health plan.
Note: practice question from AAPC CPCO Ch5
Are there certain rules for PHI disclosure in cases of an emergency?
a. No, especially if the patient is not able to provide consent.
b. No, there is not a separation of emergency treatment.
c. Yes, PHI can be released for emergency treatment.
d. No, PHI cannot ever be disclosed without patient consent. - Correct
Answer - c. Yes, PHI can be released for emergency treatment.
Note: practice question from AAPC CPCO Ch5
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller nursehailey. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $11.99. You're not tied to anything after your purchase.
