You may use resources to completely answer the following question. I expect that you will use some creativity and depth when you are answering these questions. Your score will be determined by your use of critical thinking skills (problem solving) and persuasiveness of your conclusions. Be creative, what do you think are important elements the HIPAA Privacy and security rule.

When you use other sources, please use APA formatting. If you are unsure of how to format the citations and references, there are many resources on the internet.

Complete the following essay questions. Hint: search key words such as: consent, authorization in the Dept HHS web site. List the CFR reference you used to complete your answer. Site the state (if there is one) law/regulation and HIPAA privacy rule. Do not just copy from the website, write your answers in your own words.

1. Do patients have to sign an authorization to obtain their own records? (3 Points)

2. What records, besides medical records, must be provided for individual upon request per HIPAA? Hint: Consult the Department of HHS website. List the CFR reference you used to complete your answer. (3 points)

3. How soon do you have to provide patients copies of their own record? How soon do you have to provider them to other requestors? (4 points)

Case study (10 Points)

Be Well Medical Center has recently acquired five large physician practices in the region, and you, as part of the team merging the system and processes into the medical center procedures, are evaluating the privacy and security concern. During the evaluation it is discovered that the various physician practices have several different types of digital copiers that are use in the offices.

vWhat potential HIPAA violation (s) can be identified in the scenario?

vIs there a way to mitigate the risk for a potential HIPAA violation(s)?

vWhat advice does the OCR have that can be used to guide you in this process?

Final Part 2 Exam Grading Matrix: