Question

keeping e-phi secure includes which of the following?
the hipaa security officer places limits on what information is viewed by business associates determined by their job description.
policies and procedures are written to protect against unlawful access by administration.
changing the passwords for computer access every 30 days.
safeguards are in place to protect e-phi against unauthorized access or loss.
question 15 (2.5 points)
hipaa security rule applies to data contained in
unrecorded video teleconferencing.
any computer storage media.
voicemail messages.
paper-to-paper faxes.

Explanation:

First Question (Keeping e - PHI secure):

• For the option "The HIPAA Security Officer places limits...": Limiting access by job description is part of access control but not the core of keeping e - PHI secure in a general sense.
• For "Policies and procedures are written to protect against unlawful access by administration": The focus should be on all unauthorized access, not just from administration.
• For "Changing the passwords for computer access every 30 days": This is a specific technical safeguard, not the overall concept of keeping e - PHI secure.
• For "Safeguards are in place to protect e - PHI against unauthorized access or loss": This is the broad and correct definition of keeping e - PHI secure as per HIPAA, as safeguards (technical, physical, administrative) are put in place to prevent unauthorized access or loss of electronic Protected Health Information (e - PHI).

• "unrecorded video teleconferencing": Unrecorded communications do not fall under the HIPAA Security Rule as there is no stored electronic data.
• "any computer storage media": The HIPAA Security Rule applies to electronic Protected Health Information (e - PHI) which can be stored on computer storage media.
• "voicemail messages": Voicemail messages are not typically considered as part of the data covered by the HIPAA Security Rule in the same way as electronic data on computer storage.
• "paper - to - paper faxes": Paper - to - paper faxes are not electronic data in the sense covered by the HIPAA Security Rule (it applies to electronic data).

Answer:

Safeguards are in place to protect e - PHI against unauthorized access or loss.

Second Question (HIPAA Security Rule application):