Question

The privacy rules requires covered entities to have which of the following measures in place?

More than one answer is correct. Please select all correct answers.

A. Safeguards that prevent printing protected health information (PHI)

B. Policy that forbids anyone from accessing a patient's PHI other than the patient

C. HIPPA training program that requires participation by all staff

D. Privacy Officer (Privacy Official)

Answer 1

Question- The privacy rules requires covered entities to have which of the following measures in place?

More than one answer is correct. Please select all correct answers.

A. Safeguards that prevent printing protected health information (PHI)

B. Policy that forbids anyone from accessing a patient's PHI other than the patient

C. HIPPA training program that requires participation by all staff

D. Privacy Officer (Privacy Official)

Answer- Privacy Rule requires covered entities to maintain reasonable and appropriate administrative, technical, and physical safeguards for protecting e-PHI. Specifically, covered entities must:

1. Ensure the confidentiality, integrity, and availability of all e-PHI they create, receive, maintain or transmit;

2. Identify and protect against reasonably anticipated threats to the security or integrity of the information;

3. Protect against reasonably anticipated, impermissible uses or disclosures; and

4. Ensure compliance by their workforce.

Hence, following answers are correct with respect to Privacy rules:

A. Safeguards that prevent printing protected health information (PHI)

C. HIPPA training program that requires participation by all staff

D. Privacy Officer (Privacy Official)

Explaination-  

For Option A- The security rules requires a covered entity to implement policies and procedures for authorizing access to e-PHI only when such access is appropriate based on the user or recipient's role (role based access)

For Option B- It forbids unauthorized uses of patient's PHI, while authorized users including patient can access it.

For Option C- A covered intity must train all workforce members regarding its security policies and procedures and there must be appropriate sanctions against workforce members who voilet its policies and procedures.

For Option D- There must be an Privacy Officer (Security Officer) for proper implementation of privacy rules.