31. If a patient requests a copy of his or her medical record, and in reading the physicians’ notes about a conversation that allegedly occurred between the physician and the patient disagrees with the outcome documented, the patient can: a.do nothing; it is already documented in the medical record. b.request an addendum be placed in his or her record indicating what the patient believes the outcome of the conversation to be. c.write a letter to the local newspaper complaining about the physician. d.have the physician’s comments deleted from the record. 32. Which of the following is a security measure to protect unauthorized release of information? a.Asking the caller if they are related to the patient in which they are inquiring b.Ensuring the computer screen used to access medical information about patients is not able to be seen by others c.Talking on your cell phone about a patient while at a restaurant d.Accepting an unsigned release-of-information form from someone other than the patient 33. Who should have access to the area where medical records are stored? a.The patient b.The janitor c.Authorized personnel d.Any employee 34. What is a common avenue for an unauthorized party to see private medical information? a.Hacking into the computer system b.Patient files left on desks face up c.Breaking into the medical records storage area d.Overhearing a phone conversation between a physician and a patient 35. To protect confidentiality of the patient being seen, the staff member calling the patient from the reception area should: a.use as little information as necessary to get the patient’s attention (e.g., just first name, or just the last name). b.use the patient’s full name to make sure you call the correct patient. c.go to each patient and ask if he or she is the patient you seek. d.identify who the patient is by the photo in the file, walk over to the person, and ask him or her to follow you. 36. The most current HIPAA regulations can be found: a.at any library. b.on the internet. c.in the Federal Register. d.in any health care magazine. 37. Faxing protected medical information requires: a.use of a secure fax line. b.use of a modem. c.use of a code. d.use of a HIPAA-compliant fax cover sheet. 38. Which of the following is NOT a requirement of a HIPAA compliant fax cover sheet? a.Number of total pages of the fax b.Date by which a response is required c.Confidentiality statement d.To whom the fax is intended 39. Who is required to be trained in HIPAA regulations? a.All employees of health care and health care–related organizations b.Families of insurance company employees c.Families of patients d.Government officials 40. Who is allowed to discuss a diagnosis with a patient? a.The insurance company of the patient b.The receptionist at the physician’s office c.The medical biller for the physician’s office d.The physician