Question

research organizations are permitted to receive
a limited data set that has been de - identified for research purposes.
iihi without withholding any information.
only iihi when patients have given written authorization.
any phi a covered entity may choose to send them in relation to the diseases they are researching.
question 6 (2.5 points)
written policies and procedures relating to the hipaa privacy rule
are kept by the hipaa officer only.
must be only in electronic format.
are not necessary.
must be available to all employees.

Explanation:

• For the first question:
• Research organizations are permitted to receive a limited data set that has been de - identified for research purposes. HIPAA regulations restrict the sharing of PHI (Protected Health Information). Sharing PHI without withholding any information (option 2) is not allowed. While patients' written authorization (option 3) is one way, there are also limited data set provisions. Option 4 is incorrect as covered entities cannot just send any PHI.
• For the second question:
• Written policies and procedures relating to the HIPAA Privacy Rule must be available to all employees. They are not just kept by the HIPAA officer (option 1). They don't have to be only in electronic format (option 2) and are necessary (option 3 is incorrect).

Answer:

First question: a limited data set that has been de - identified for research purposes.
Second question: must be available to all employees.