Compliance & RegulatoryQuestion 95 of 100

If a billing staff member accesses a patient's record out of curiosity, with no job-related reason, this is:

a.An impermissible use of PHI that violates HIPAA
b.Always permitted because the staff works there
c.Allowed if the patient is famous
d.Required by the minimum necessary rule

Explanation

Accessing PHI without a legitimate work-related purpose, sometimes called snooping, is an impermissible use that violates the HIPAA Privacy Rule and the minimum necessary standard. Covered entities must limit access to what each role requires and may discipline violators. Such breaches can trigger penalties for both the individual and the organization.

Law Reference: HIPAA

Practice all 100 questions free — no signup required.

Related questions on this topic

Last reviewed: · editorial process

PrepPass Editorial Team · Verified against NHA Certified Billing & Coding Specialist (CBCS) Exam · How we review
Report