Compliance & RegulatoryQuestion 99 of 100
Obtaining a patient's signed authorization is generally required before a provider may:
a.Disclose PHI for purposes not otherwise permitted, such as many marketing uses
b.Submit a claim to the patient's insurer for treatment
c.Share information with another treating provider for care
d.Report a communicable disease as required by law
Explanation
HIPAA permits certain uses and disclosures of PHI without authorization, including for treatment, payment, and health care operations, and for legally required public-health reporting. However, disclosures outside these permitted purposes, such as most marketing or the sale of PHI, require the patient's written authorization. Billing staff should know which activities need a signed authorization.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Accurate and complete medical record documentation is important for billing because:
- If a billing staff member accesses a patient's record out of curiosity, with no job-related reason, this is:
- A compliance program in a medical practice is designed to:
- A breach of unsecured protected health information under HIPAA generally requires the covered entity to:
- Medical record retention requirements are generally set by:
- A Notice of Privacy Practices (NPP) is a document that a covered entity must:
Last reviewed: · editorial process
PrepPass Editorial Team · Verified against NHA Certified Billing & Coding Specialist (CBCS) Exam · How we review