Question 71 · 856 in bank
Two hospitals merged into a single organization. The privacy officer requested a review of all records to ensure encryption was used during record storage, in compliance with regulations. During the review, the officer discovered that medical diagnosis codes and patient names were left unsecured. Which of the following types of data does this combination BEST represent?
Show answer
Answer: A
Explanation
The definition that I work with for PII and PHI are as follows: Protected Health Information (PHI): Any information, whether oral or recorded in any form or medium that is created or received by a health care provider, health plan, public health authority, employer, life insurer, school or university, or health care clearinghouse and relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual. Personally Identifiable Information (PII): One or more of the following elements of information about an individual: First and last name, personal address, personal telephone number, personal email address, instant messaging username, or other online contact information, business email address (to the extent it incorporates an individual’s name), social security number, date of birth, home address, account number, disability code.
Source: Adapted from community discussion — assfedassfinished