Q
Quibank
All tests
Podcast
中
EN
ES
Question 1 of 22
← Back
A physician practice sends a patient's operative report to the patient's health plan so the plan can adjudicate the surgical claim. Under the HIPAA Privacy Rule, what makes this disclosure permissible without the patient's written authorization?
A
Health plans are not covered entities, so information sent to them falls outside the Privacy Rule
B
The practice obtained the patient's signed acknowledgment of its Notice of Privacy Practices, which serves as blanket authorization for any disclosure
C
It is a disclosure for payment, one of the treatment, payment, and health care operations purposes that does not require the patient's written authorization
D
Any disclosure is permitted once the record has been stripped of the patient's account number