Author Question: Which entities have the authority to enforce penalties for a breach of PHI? (Select all that apply.) ... (Read 23 times)

kshipps · **on:** Jul 8, 2018

Which entities have the authority to enforce penalties for a breach of PHI? (Select all that apply.)

a. State attorney general
b. Office of Civil Rights
c. Office of Inspector General
d. Centers for Medicare and Medicaid Services

Question 2

When there is a breach of one unsecured patient record, it is necessary to notify:

a. the patient.
b. the Department of Health and Human Services.
c. the media outlets.
d. the Office of National Coordinator for Healthcare Information Technology.

xthemafja · **Reply #1 on:** Jul 8, 2018

Answer to Question 1

ANS: A, B
Pursuant to the enhanced enforcement authority granted under HITECH, both the Office of Civil Rights and the state attorney general have the authority to enforce penalties for the breach of the HIPAA laws that protect the privacy and security of PHI.

Answer to Question 2

ANS: A
If there is only a breach of one record versus a breach of more than 500 records, only the patient must be notified within sixty (60) days upon the discovery of the breach.