A. H must be written in plain, simple language

B. It must explicitly describe all uses of PHI

C. A description about the usage of hidden security cameras for tracking patient movements for implementing privacy.

D. A description of the duties of the individual

E. A statement that the individual must abide by the terms of the Notice.

A. ICD-9-CM, Volumes 1 and 2

B. CPT-4

C. CDT

D. ICD-9-CM, Volume 3

E. NDC

A. PKI requirements for hospitals and health care providers.

B. Encryption algorithms that must be supported by hospitals and health care providers.

C. Fraud and abuse in the health care system and ways to eliminate the same.

D. Guaranteed health insurance coverage to workers and their families when they change employers.

E. The use of strong authentication technology that must be supported by hospitals and health care providers.

A. A covered entity must obtain an authorization for any use or disclosure of protected health information for marketing, except if the communication is in the form allowed by the regulations.

B. A face-to-face communication made by a covered entity to an individual is allowed by the regulations without an authorization

C. A promotional gift of nominal value provided by the covered entity is NOT allowed by the regulations without an authorization.

D. If the marketing is expected to result in direct or indirect remuneration to the covered entity from a third party, the authorization must state that such remuneration is expected

E. Disclosure of PHI for marketing purposes is limited to disclosure to business associates (which could be a telemarketer) that undertakes marketing activities on behalf of the covered entity

A. Simple flat file structure for transactions.

B. Envelope structure for transactions.

C. Employer identifier.

D. Health plan identifier

E. Provider identifier.

A. A covered entity must apply disciplinary sanctions against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.

B. A covered entity need not train all members of its workforce whose functions are materially affected by a change in policy or procedure.

C. A covered entity must designate, and document, a contact person responsible for receiving acknowledgements of Notice of Privacy Practice.

D. A covered entity may require individuals to waive their rights.

E. A covered entity must provide maximum safeguards for PHI from any intentional or unintentional use or disclosure that is in violation of the regulations and to limit incidental uses and disclosures made pursuant to permitted or required use or disclosure.