Prepare to pass the CHPC with healthcare privacy practice

A community hospital has written privacy policies and a training schedule, but no named person owns the program. What administrative designation does the covered entity still owe?

Tap an answer to reveal the correct answer, rationale and source.

• A. A security official as the only named role, because electronic systems already have a designated owner.
• B. A rotating committee chair who changes each quarter so no single person holds the privacy duties.
• C. A privacy official who must develop and implement the covered entity's policies and procedures.
• D. An outside auditor who reviews completed disclosures rather than developing and running the program.

A hospital's operations binder covers visitor hours, shift change, and a one-page 'be discreet' chapter labeled privacy. Which Privacy Rule documentation duty is still unmet?

Tap an answer to reveal the correct answer, rationale and source.

• A. A visitor-hours addendum listing which hospital lobbies remain open after eight in the evening.
• B. Written policies and procedures that implement the Privacy Rule standards, not general operations text.
• C. An intranet slogan reminding staff to be discreet when they talk about patients in public spaces.
• D. An oral orientation briefing that privacy matters, with no retained written policy on the standards.

IT presents last year's ePHI confidentiality assessment to the board and calls that the privacy program's ongoing monitoring. Which two duties did leadership collapse?

Tap an answer to reveal the correct answer, rationale and source.

• A. Last year's ePHI confidentiality assessment counted as the privacy program's ongoing monitoring by itself.
• B. A Security Rule ePHI CIA assessment, which does not finish Privacy Rule administrative monitoring on its own.
• C. A substitute for complaint intake, sanctions files, and mitigation under the Privacy Rule standards.
• D. A vendor SOC letter that retires the duty to watch how internal privacy controls actually operate day to day.