Which of the following is a reason for not using e-mail to communicate sensitive patient information?

Barbara requested a copy of her PHI from her physician office on August 31. It is now October 10 and she has not heard anything from the physician office. Which of the following statements is correct?

Under which access security mechanism would an individual be allowed access to ePHI if they have a proper log-in and password, belong to a specified group, and their workstation is located in a specific place within the facility?

Mitigation is __________.

The most common place to find a firewall is between __________.

The director of health information services is allowed access to the medical record tracking system when providing the proper log-in and password. Under which access security mechanism is the director allowed access to the system?

The HIPAA security rule applies to which of the following covered entities?

Which of the following would provide the best support of an organization’s efforts toward compliance with the security rule?

Medical information loses PHI status and is no longer protected by the HIPAA privacy rule when it __________.

You are a member of the hospital’s health information management committee. The committee has created a HIPAA-complaint authorization form. Which of the following items would you advise the committee to remove, as the Privacy Rule does not require it?