HIPAA Privacy and Security Assessment

All employees at a healthcare practice have a right to know about any patient’s personal health information.

A covered entity should only use or disclose protected health information for purposes of treatment, payment, and healthcare operations without the patient’s written authorization.

Written, spoken and electronic health information is protected by the HIPAA laws

It is acceptable to wait to report a breach or incident until you personally try to figure out what happened.

HIPAA incidents can occur from:

The most secure passwords are

Which workstation security safeguards is EVERYONE responsible for using and/or protecting?

HIPAA protection lasts for ________________ years after a person has passed away.

What are possible consequences of HIPAA Violations?

____________ share PHI with anyone who doesn’t have a right or need to know.

___________ use strong passwords and keep virus software up to date.

__________ access PHI on devices that do not have encryption and/or multi-level authentication.

___________ have Business Associates sign a Business Associate Agreement.

___________ perform a Security Risk Assessment every year.

__________ report any breaches of PHI immediately to the HIPAA Compliance Officer.