A. The social security number has been selected as the National Health Identifier for individuals.

B. The COT code set is maintained by the American Medical Association.

C. Preferred Provider Organizations (PPO) are not covered by the definition of "health plan" for purposes of the National Health Plan Identifier

D. HIPAA requires health plans to accept every valid code contained in the approved code sets

E. An important objective of the Transaction Rule is to reduce the risk of security breaches through identifiers.

A. Risk Analysis

B. Risk Management

C. Access Establishment and Modification

D. Isolating Health care Clearinghouse Function

E. Information System Activity Review

A. It can be used for the payment of provider claims.

B. It can be used to pay for insurance products (either individual or group premiums).

C. It can function solely as a remittance advice.

D. Electronic Funds Transfer is fully supported.

E. This transaction can carry either summary or detailed remittance information.

A. Person or Entity Authentication

B. Technical Safeguards

C. Administrative Safeguards

D. Physical Safeguards

E. Transmission Security

A. Referral Premium Payment

B. Health Care Referral Certification and Authorization.

C. First Report of Injury.

D. Health Plan Referral Enrollment and Dis-enrollment.

E. Coordination of Referral Benefits.

A. In some circumstances a coveted entity is permitted, but not required, to rely on the judgment of the party requesting the disclosure as to the minimum amount of information necessary for the intended purpos

B. Some examples of these requesting parties are: another covered entity or a public official.

C. The privacy rule prohibits use, disclosure, or requests for an entire medical record.

D. Non-Covered entities need to redesign their facility to meet the requirement for minimum necessary uses.

E. The minimum necessary standard requires covered entities to prohibit maintenance of medical charts at bedside and to require that X-ray light boards be totally isolated.

F. If there is a request for more than the minimum necessary PHI, the privacy rule requires a covered entity to deny the disclosure of information after recording the event in the individual's case file.