click below
click below
Normal Size Small Size show me how
Chapter 2 review
| Question | Answer |
|---|---|
| Which of the following laws is designed to uncover fraud and abuse? | HIPAA |
| A Notice of Privacy Practices is given to | A practices patients |
| Patients’ PHI may be released without authorization to | employers in workers' compensation cases |
| Which government group has the authority to enforce the HIPAA Privacy Rule? | OCR |
| The authorization to release information must specify | The entity to whom the information is to be released |
| Health information that does not identify an individual is referred to as | do-identified health information |
| Analyze the following scenarios to determine which would likely warrant a breach notification. | the database of a large insurance company is accessed by a hacker |
| The main purpose of the HIPAA Security Rule is to | control the confidentiality and integrity of and access to protected health information |
| A compliance plan contains | consistent written polices and procedures |
| patients always have the right to | Withdraw their authorization to release information |
| breach | An impermissible use or disclosure under the Privacy Rule that compromises the security or privacy of PHI |
| abuse | Action that improperly uses another person’s resources. |
| accountable care organization (ACO) | A network of doctors and hospitals that shares responsibility for managing the quality and cost of care provided to a group of patients. |
| Affordable Care Act (ACA) | Health system reform legislation that offers improved insurance coverage and other benefits. |
| Centers for Medicare and Medicaid Services (CMS) | Federal agency within the Department of Health and Human Services (HHS) that runs Medicare, Medicaid, clinical laboratories (under the CLIA program), and other government health programs. |
| code set | Alphabetic and/or numeric representations for data. |
| operating rules | Rules that improve interoperability between the data systems of different entities, such as health plans and providers, and so increase their usefulness. |
| compliance plan | A medical practice’s written plan for the following: the appointment of a compliance officer and committee; a code of conduct for physicians’ business |
| evaluation and management (E/M) | Provider’s evaluation of a patient’s condition and decision on a course of treatment to manage it. |
| documentation | The systematic, logical, and consistent recording of a patient’s health status—history, examinations, tests, results of treatments, and observations—in chronological order in a patient medical record. |