Under the Privacy Rule, an individual may request a covered provider to restrict routine use or disclosure beyond what exists in the providers Notice of Privacy Practices. Upon that request, the provider

A. Must store the information in an encrypted format.

B. May refuse the request but still offer treatment.

C. Must comply within seventy-five (75) days.

D. Must only transfer the information using the ASC X12 format specification.

E. Can request binding arbitration

Security reminders, using an anti-virus program on workstations, keeping track of when users log-in and out, and password management are all part of:

A. Security incident Procedures

B. information Access Management

C. Security Awareness and Training

D. Workforce Security

E. Security Management Process

This transaction is used to transmit referral transactions between UMOs and other parties:

A. Referral Premium Payment.

B. Health Care Referral Certification and Authorization.

C. First Report of Injury.

D. Health Plan Referral Enrollment and Dis-enrollment.

E. Coordination of Referral Benefits.

Select the correct statement regarding the administrative requirements of the HIPAA privacy rule.

A. A covered entity must apply disciplinary sanctions against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.

B. A covered entity need not train all members of its workforce whose functions are materially affected by a change in policy or procedure.

C. A covered entity must designate, and document, a contact person responsible for receiving acknowledgements of Notice of Privacy Practice

D. A covered entity may require individuals to waive their rights.

E. A covered entity must provide maximum safeguards for PHI from any intentional or unintentional use or disclosure that is in violation of the regulations and to limit incidental uses and disclosures made pursuant to permitted or required use or disclosure.

The objective of this document is to safeguard the premises and building from unauthorized physical access and to safeguard the equipment therein from unauthorized physical access, tampering and theft

A. Contingency Plan

B. Facility Security Plan

C. Emergency Mode Operation Plan

D. Accountability

E. Device and Media Controls