Hipaa Privacy Security Jeopardy Game 285 3 Jeopardy Template

Covered Entities	Business Associate Agreement	Types of Information	Other HIPAA Terms of Art
100 Who work ‘with’ but not ‘under’ covered entities and handle ‘individually identifiable’ health information? Business Associate	100 What is the term of art for information being used, acquired, disclosed or acquired incorrectly? Breach	100 What information is protected by HIPAA? Protected Health Information (PHI)	100 Who is the subject of PHI? Individual
200 What is the term of art for employees, volunteers, students, paid and unpaid who may handle PHI while under the control of Covered Entities? Workforce	200 What is information collected about an individual and is considered ‘individually identifiable’? Protected Health Information	200 What can no longer identify the person the information is about? De-identified Information	200 What is the term meaning ‘in place of a parent’ or individual acting as a parent including legal authority? ‘in loco parentis’
300 What is the entity that transmits health information electronically? Provider	300 What is the term of art that is used when only the amount of information needed for the purpose is disclosed? Minimum Necessary	300 What is the set of records about an individual, includes all records required to make decisions about the individual? Designated Record Set (DRS)	300 What is the dissemination of PHI by covered entities and/or business associates? Disclosure
400 What is the entity that pays/covers the cost of healthcare? Plan	400 What is the length of time a BAA will be considered viable? Term	400 What is the data set that does not completely de-identify the individual? Limited Data Set	400 What is the internal handling of PHI by covered entities called? Use
500 What is the entity that processes billing activity between provider and plan? Clearinghouse	500 What is the term of art for a BAA being stopped because of a violation? Termination of cause	500 What is an organization agreed upon record set that will be disclosed incase of a court case? Legal Health Record (LHR)	500 What entity performs uncovered and covered functions under HIPAA? Hybrid Entity

HIPAA Privacy & Security Jeopardy Game - 285-3

Press F11 for full screen mode