MENU
A hospital is preparing a file of treatment information for the state of California. This file is to be sent to external medical researchers. The hospital has removed SSN, name, phone and other information that specifically identifies an individual However, there may still be data in the file that potentially could identify the individual Can the hospital claim 'safe harbor'' and release the file to the researchers?
Suggested Answer: B
Get Premium HIO-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
33 comments · newest first
RE
Reta
12 months ago
Sounds too risky to me, how can they be sure?
SO
Sommer
12 months ago
Definitely no, they need to ensure no risk of re-identification.
DA
Danilo
1 year ago
Wait, are researchers really considered covered entities?
GI
Gilma
1 year ago
Not so fast! There could still be info that identifies someone.
ST
Starr
1 year ago
I think they can claim 'safe harbor' if they removed all identifiers.
SA
Sabra
1 year ago
I thought researchers could access this data under certain conditions, but I can't recall if that applies here. Maybe option C is the right choice?
OD
Odette
1 year ago
I feel like option D makes sense because the hospital must ensure that the remaining data can't be used to identify someone, but I’m not completely confident.
PA
Paris
1 year ago
I think I saw a similar question about de-identification in our practice exam. It seems like there needs to be more than just removing names and SSNs.
GE
Georgene
1 year ago
I remember discussing the 'safe harbor' provisions in class, but I'm not entirely sure if just removing identifiers is enough.
CE
Cecily
1 year ago
The application server stdout log is probably my best bet here. That's where I usually find the most detailed error information when things go wrong.
RE
Renea
1 year ago
Alright, based on the options provided, I'm going to go with option D. The Cloud VPN feature is likely enabled in the Configuration section under Customer VPN enablement.
TE
Tegan
1 year ago
Hmm, I'm a bit unsure about this one. I know we need to document the crime scene and have legal authority to collect evidence, but I can't quite remember the other guidelines. I'll have to think this through carefully.
TI
Tiffiny
1 year ago
This is a tricky one. I'm not sure I fully understand the context, but I'll give it my best shot and try to eliminate the options that don't seem to fit.
DO
Dottie
1 year ago
I'm gonna have to go with B. Wouldn't want to end up in the doghouse with the state of California, am I right? Though I do enjoy a good game of 'How Many Patients Can We Identify?'
LU
Luisa
1 year ago
C) No - authorization to release the information is still required by HIPAA
SH
Shawna
1 year ago
A) Yes the hospital's actions satisfy the ''safe harbor'' method of de-identification
DO
Douglass
1 year ago
B) No - a person with appropriate knowledge and experience must determine that the information that remains can identify an individual
TA
Tamesha
2 years ago
Hold up, option E? What kind of hospital is this running a cheeky HIPAA loophole like that? Nope, not on my watch!
JA
Jaime
1 year ago
D) No- to satisfy ''safe harbor the hospital must also have no knowledge of a way to use the remaining data to identify an individual.
IN
In
1 year ago
C) No - authorization to release the information is still required by HIPAA
TA
Tammara
1 year ago
B) No - a person with appropriate knowledge and experience must determine that the information that remains can identify an individual
AR
Arthur
1 year ago
A) Yes the hospital's actions satisfy the ''safe harbor'' method of de-identification
MA
Magnolia
1 year ago
D) No- to satisfy ''safe harbor the hospital must also have no knowledge of a way to use the remaining data to identify an individual.
MA
Margart
1 year ago
C) No - authorization to release the information is still required by HIPAA
JE
Jeannine
1 year ago
B) No - a person with appropriate knowledge and experience must determine that the information that remains can identify an individual
IR
Irma
1 year ago
A) Yes the hospital's actions satisfy the ''safe harbor'' method of de-identification
TH
Thaddeus
2 years ago
Option D seems like the way to go. Gotta cover all your bases when it comes to protecting patient privacy. Can't be too careful these days, right?
CA
Carman
1 year ago
Option D seems like the way to go. Gotta cover all your bases when it comes to protecting patient privacy. Can't be too careful these days, right?
AL
Alona
1 year ago
A) Yes the hospital's actions satisfy the ''safe harbor'' method of de-identification
OZ
Ozell
2 years ago
I agree with Jacki, authorization is still required by HIPAA to release the information.
JA
Jacki
2 years ago
I disagree, a person with appropriate knowledge must determine if the remaining data can identify an individual.
MA
Mari
2 years ago
Hmm, this is a tricky one. I'm leaning towards option B, but I'm not 100% sure. HIPAA can be a real minefield sometimes, you know?
RE
Regenia
2 years ago
I think the hospital can claim 'safe harbor' and release the file.