Name: 

Department: 

Email Address: 

(a) After you no longer work in the Hospitals
(b) After the patient dies
(c) When the patient is a neighbor or friend
(d) Only when it is necessary to do your job

2. What does "PHI" stand for?

(a) Patient Health Information
(b) Public Health Information
(c) Protected Health Information
(d) Private Health Information

3. What question should you ask yourself before looking at patient information?

(a) Would the patient mind if I looked at this?
(b) Do I need to know this to do my job?
(c) Can anyone see what I am doing?
(d) Am I curious?

4. Which of the following are some common features designed to protect confidentiality of health information contained in patient medical records?

(a) Locks on medical records rooms/cabinets
(b) Passwords to access computerized records
(c) Rules that prohibit employees from looking at records unless they have a need to know
(d) All of the above

5. What should you do before you step away from your computer to leave on a break, for lunch, or for the evening?

(a) Comb your hair and powder your nose
(b) Log-off your computer
(c) Exit out of e-mail
(d) None of the above

(a) Bob Gross
(b) Kerry Congdon DeMott
(c) Eric Yablonka
(d) Sandy Senti

7. Your coworker, Tracy, asks you to accompany her to the Emergency Department during work hours to investigate her chest pain. You stay with her during treatment until her husband arrives. When returning to the office, Tracy's supervisor asks about her medical condition. Should you share Tracy's medical information with her supervisor?

Yes
No

8. You hear from a neighbor, who is not employed at The University of Chicago Medical Center (UCMC), that your close friend is hospitalized at UCMC and unconscious after an automobile accident. You call your friend's mother and learn of multiple injuries threatening his life. You also read the limited description of the accident and injuries in the evening newspaper. The next day at work, a mutual friend of yours, who also works at UCMC, asks what you know. You have access to the patient's electronic medical record via OACIS, but you have not accessed it. What should you do?

(a) Access OACIS for the information and then tell your friend what is going on
(b) Tell the mutual friend to read the newspaper article and call the patient's mother for information
(c) Visit the patient in the ICU and get permission from his mother to disclose the information
(d) Tell them that all you know is what you read in the newspaper and heard from the mother, and emphasize that you could not share anything you learned on the job.

9. Your friend has given you permission to openly share details of her medical condition with anyone who asks. When receiving a call, you can't quite remember if you acquired certain details from the medical record or from your friend. Sharing the details nevertheless is allowed because of her unrestricted permission.

True
False

10. The UCMC Notice of Privacy Practices tells all but the following:

(a) The individual's rights under HIPAA
(b) The UCMC security policies and procedures
(c) How patient information is used
(d) How patient information is disclosed