1. Under the HIPAA Privacy Rule patients have the right to:

a) Request a restriction on the use of their protected health information
b) Request an accounting of the disclosures of their protected health information
c) Request an amendment to their medical record
d) All of the above are true

2. Healthcare providers must be compliant with the HIPAA Privacy Rule by:

a) December 31, 2003
b) April 14, 2003
c) October 16, 2003
d) February 1, 2003

3. A healthcare provider would be required to obtain an authorization from a patient before disclosing Protected Health Information to which of the following?

a) A pharmacy
b) The FBI
c) An attorney
d) Another provider

4. A healthcare provider may release a patient’s protected health information without authorization for any of the following reasons except:

a) Treatment
b) Research
c) Payment
d) Healthcare Operations

5. If a patient feels their privacy rights have been violated they would write to the:

a) Department of Health and Human Services Office of Civil Rights
b) Centers for Medicare and Medicaid Services
c) Federal Drug Enforcement Agency
d) Department of Justice