nerdexam
IAPP

CIPP-US · Question #6

All of the following organizations are specified as covered entities under the Health Insurance Portability and Accountability Act (HIPAA) EXCEPT?

The correct answer is C. Healthcare providers. The Privacy Act of 1974 is a federal law that regulates the collection, use, and disclosure of personal information by federal agencies. The Privacy Act of 1974 applies to records that are maintained in a system of records, which is defined as a group of records under the control

Legal, Risk, and Compliance

Question

All of the following organizations are specified as covered entities under the Health Insurance Portability and Accountability Act (HIPAA) EXCEPT?

Options

  • AHealthcare information clearinghouses
  • BPharmaceutical companies
  • CHealthcare providers
  • DHealth plans

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    7% (2)
  • C
    74% (20)
  • D
    15% (4)

Explanation

The Privacy Act of 1974 is a federal law that regulates the collection, use, and disclosure of personal information by federal agencies. The Privacy Act of 1974 applies to records that are maintained in a system of records, which is defined as a group of records under the control of an agency from which information is retrieved by the name of the individual or by some identifying number, symbol, or other identifier assigned to the individual. The Privacy Act of 1974 grants individuals the right to access and amend their records, and requires agencies to provide notice of their systems of records, establish safeguards for the protection of the records, and limit the disclosure of the records to certain authorized purposes. The Privacy Act of 1974 also establishes civil and criminal penalties for violations of the law, such as unauthorized disclosure, failure to publish a notice, or refusal to grant access or amendment. The Privacy Act of 1974 does NOT require agencies to obtain the consent of the individual before collecting their personal information. However, the Privacy Act of 1974 does require agencies to inform the individual of the authority for the collection, the purpose and use of the collection, and the effects of not providing the information.

Topics

#HIPAA#covered entities#healthcare providers#pharmaceutical

Community Discussion

No community discussion yet for this question.

Full CIPP-US Practice