HIPAA Privacy Rule  

In a covered entity and business associate relationship, a business associate agreement is not required.

Under HITECH, individually identifiable health information loses its Privacy Rule protection after the individual has been deceased for _____ years.

Health records created or collected by a school are covered by FERPA and also excluded from the Privacy Rule's definition of PHI.

The Safe Harbor method used to de-identify patient information contains a total of __ elements.

Under the Privacy Rule, healthcare providers are not required to obtain the patient's signed consent to use identifiable information for TPO purposes.

The Privacy Rule categorizes a total of __ public interest and benefit situations for which authorization is not required.

Organ, eye, or tissue donation do not require patient authorization for use and disclosure.