Certified Public Procurement Officer (CPPO) Practice Test

Access More Questions

A hospital is revising its internal access policy for billing staff. Which policy design best reflects the HIPAA minimum necessary standard?

Give every billing employee full-chart access to avoid workflow delays Permit access based on the PHI categories needed for assigned job functions Require a patient authorization for every billing access Limit only paper records because minimum necessary does not apply to electronic PHI

Correct Answer:

Permit access based on the PHI categories needed for assigned job functions

Explanation:

For internal uses, a covered entity should implement role-based access policies that identify who needs access and the categories of PHI needed to perform job duties. Blanket full-record access is not appropriate merely for convenience.

Access more questions from this quiz

Continue to Certified Public Procurement Officer (CPPO) Practice Test for more practice questions and the full quiz experience.

Access More Questions