This course is required for all HHS Employees, and for Contractors and Volunteers who work with clients and need access to the eICM. It replaces the required HIPAA Basic Privacy and the HIPAA Clients Rights Assessments for this group effective December 2016.

This course is provided by Joy Royes, HHS Office of Risk Management. 

Please answer all of the questions below. Click on Done when you have completed the assessment. Thank you.

Question Title

1. Please Fill Out the Fields Below.

Question Title

2. The HIPAA Privacy Rule was not designed to create a barrier to health care and permits providers to use, share and disclose information for the purpose of treating clients, obtaining reimbursement for services and for health care operations.

Question Title

3. A volunteer who works on our site for just a few days needs to complete basic HIPAA training.

Question Title

4. HHS is required to show its Notice of Privacy Practices only to clients who ask for it.

Question Title

5. HIPAA's Privacy Rule allows individuals to see and receive copies of their medical records.

Question Title

6. HHS staff who work in a program that does not handle any health information about clients, do not need to be as concerned about protecting the client information.

Question Title

7. HIPAA requires that we audit our electronic client record systems to ensure that staff are accessing client records in the system only as necessary to do their jobs.

Question Title

8. Lab results and other medical information can be left on a client's home answering machine without his or her permission.

Question Title

9. As long as you have up to date virus protections on your home computer, you can work with client information at home and save client information to your home computer.

Question Title

10. Your house was broken into over the weekend and your County issued laptop was stolen. You must notify your supervisor and call the HelpDesk at 7-2828 to report a potential security incident.

Question Title

11. All paper, including papers that contain client identifying information, should be disposed of in the recycling bin.

Question Title

12. Your brother-in-law lost his job and you are concerned about him and his family. You access the client record systems to see if he or your sister has applied for any income supports. It is permissible for you to conduct this search because you are genuinely concerned about the well- being of your relatives.

Question Title

13. If a police officer calls you and asks questions about one of your clients, you are required by law to immediately provide the information.

Question Title

14. You work in a program that provides Supplemental Nutrition Assistance (SNAP). You receive a call from a therapist in our Adult Behavioral Health program. She is providing services to one of your clients and needs information about the status of the client's SNAP application. You should provide the therapist with the information.

Question Title

15. You work in the Crisis Center and have just been served with a subpoena. You should notify your supervisor and the Office of the County Attorney as soon as possible so that the Office of the County Attorney can handle the response.

Question Title

16. A client requests access to their records. The Department sends the complete record out of eICM to the client's address on record. However, the client no longer lives there. The client's family still lives there, opens the mail and reads the client's information. They then return it to the department. The client files a complain saying we violated their privacy rights. The Department breached confidentiality and has to notify the Secretary.

Question Title

17. A client pays out of pocket for the services they receive from DHHS. They contact the Department and request a restriction on how the department uses their information. We must honor the restriction.

Question Title

18. Consents and Authorizations are the same.

Question Title

19. A physician needs a patient's written authorization to send a copy of the patient's medical record to a specialist or other health care provider who will treat the patient.

Question Title

20. Minimum necessary means when Protected Health Information (PHI) is used, disclosed, or requested, reasonable efforts must be taken to determine how much information will be sufficient to serve the intended purpose.

T