Form Center

2. HIPAA QUIZ
4. Date*
   Date
6. First Name*
7. Last Name*
8. Volunteer ID*
9. Company Affiliation*
11. Email*
13. Station *

    This form is real-time. Once submitted, your Chief will receive an email notification immediately.

    1. Station 19
    2. Station 26
17. 1. The following persons are responsible for ensuring that protected health information (PHI) is not shared in violation of HIPAA:

    1. A. An EMS provider who works or volunteers for an ambulance provider that bills for services.
    2. B. The Contracted Billing Vendor that performs billing services on behalf of an ambulance provider that bill for services.
    3. C. A and B
    4. D. None of the above
19. 2. Under HIPAA, information that could reasonable identify a patient includes:

    1. A. The Zip code of a patient
    2. B. The Patient’s date of birth
    3. C. The patient’s Medicare ID number
    4. D. All of the above
21. 3. If HIPAA does not expressly prohibit the use of confidential information learned about a patient, you do not have an obligation to protect it.

    1. A. True
    2. B. False
23. 4. Protected health information (PHI) must be safeguarded under HIPAA when it is in the following forms:

    1. A. Photographic
    2. B. Verbal
    3. C. Written
    4. D. All of the above
25. 5. Once an EMT generates a patient care report, s/he is permitted to do the following with the document:

    1. A. Make a personal copy for the EMT’s own files
    2. B. Share the report with another staff member at the organization who has a legitimate need to see the information for the purpose of billing the transport
    3. C. Share the report with another coworker who was not on the trip and who is curious about the patient
    4. D. Crumple the paper copies of the electronic patient care report you may have printed and toss them into the trash can once the EMT is through with it.
27. 6. Protected heath information (PHI) may be used and disclosed without the patient’s permission for the following purposes:

    1. A. Payment
    2. B. Healthcare Operations
    3. C. Treatment
    4. D. All of the Above
29. 7. What is the best way to destroy a piece of paper that contains patient information?

    1. A. Tear it into a few pieces and throw it in the trash
    2. B. Tear it into a few pieces and throw it in a biohazard waste bin
    3. C. Shred the document or place it in a secure shredder box
    4. D. Use a marker and strike the patient’s name
31. 8. The use of PHI for “treatment purposes means that PHI can generally be used for any purposes related to providing emergency medical services or other healthcare to a patient:

    1. A. True
    2. B. False
33. 9. Which of the following uses would qualify as a proper use of PHI for “treatment” purposes under HIPAA

    1. A. While at the office, an EMS provider decides to access the file of a call he was on a year ago because he is now curious after reading about the patient’s arrest for burglary in the new
    2. B. An EMS provider gets back to the station after responding to a motor vehicle accident and states to another EMS provider who was not on the call, “Man, was the guy messed up from the accident.”
    3. C. On the way to the hospital, the EMS provider attending patient care relays the condition of the patient via radio to the physician at the emergency department
    4. D. As EMS providers are unloading the patient at the hospital, EMT Misfit shouts, “Outta my way everyone, we have the President of the Board of County Commissioners on this stretcher!”
35. 10. If a patient is under duress, unconscious, incapacitated, or in the midst of a medical emergency, you must still make a reasonable effort to get them to sign an acknowledgement that they have received your notice of privacy practices.

    1. A. True
    2. B. False
37. 11. If you notice someone on your shift using or disclosing PHI in a way that you think may violate HIPAA you should:

    1. A. Document the incident and only report it if you see it happen again
    2. B. Tell another coworker about the incident
    3. C. Warn the individual that you will report them then next time you see it happen
    4. D. Report the incident immediately to your chain of Command and HIPAA Compliance Officer
39. 12. EMS providers may ask sending and receiving facilities for protected health information (PHI) about a patient they are transporting to another facility because:

    1. A. Generally these facilities have a contractual arrangement with the ambulance services.
    2. B. HIPAA allows PHI to be freely shared between healthcare providers who are treating the patient
    3. C. EMS providers are required by HIPAA to gather as much PHI about a patient as they can
    4. D. The patient may wish to review the record from the facility before providing to another facility.
41. 13. Because others could be listening on the open airwaves, you should absolutely refrain from using any patient identifying information over the radio

    1. A. True
    2. B. False
43. 14. If a law enforcement officer approaches you at the scene of a motor vehicle accident and asks to speak with your patient, who is currently stable, the best course of action is to:

    1. A. Inform the officer that it would be a violation of HIPAA to allow him to speak with the patient
    2. B. Tell the officer that you can give him whatever information he needs to know about the patient’s condition
    3. C. As long as it would not impede care, you may allow the officer to speak directly to the patient without violating HIPAA
    4. D. Simply refuse to acknowledge the officer
45. 15. All of the following are exceptions under HIPAA where you may release protected health information to law enforcement without the patient’s consent, except:

    1. A. When a state law requires that you notify police regarding about the type of injury your patient received
    2. B. When law enforcement suspects that your patient may be intoxicated and asks you to render an opinion as to the patient’s condition or state of intoxication
    3. C. To help police locate a suspect, fugitive, material witness or missing person
    4. D. To report a crime in an emergency, such as when there could be immediate danger to others
47. 16. HIPAA does not regulate what EMS providers are allowed to disclose on social networking sites, such as Facebook, MySpace and Twitter because they are private websites.

    1. A. True
    2. B. False
49. 17. If you are approached by law enforcement and you are unsure as to whether HIPAA permits disclosure of PHI under the circumstances, you should:

    1. A. Have the law enforcement contact the DFRS Compliance Officer
    2. B. Release only demographic information about the patient
    3. C. Err on side of disclosing the information to officer because he is a law enforcement agent
    4. D. Don’t acknowledge the officer
51. 18. If a field provider receives a request for PHI from an attorney, the best course of action for the provider to follow is:

    1. A. Check to see whether the attorney is licensed to practice law in your state
    2. B. Release the information if the attorney sends the request in writing
    3. C. Call the attorney to ask s/he whether or not the patient authorized the release and release the information if the attorney confirms this to you over the phone
    4. D. Direct the request to the EMS Billing Coordinator/HIPAA Compliance Officer and/or EMS Battalion Chief.
53. 19. If you elect to disclose PHI regarding a patient, which of the following may result?

    1. A. The liability will fall upon you
    2. B. DFRS may discipline you up to and including termination
    3. C. The Medical director may take action up to and including revocation of your license in Frederick County
    4. D. MIEMSS may take action up to and including revocation of your license/certification
    5. E. All of the above
55. 20. HIPAA permits you to release PHI to the media without patient authorization when you are merely confirming facts:

    1. A. True
    2. B. False
Leave This Blank:


57. 1. Receive an email copy of this form.
58. Email address

    This field is not part of the form submission.

59. Submit

* indicates a required field