Washington Multistate Pharmacy Jurisprudence MPJE Practice Exam

What does the Privacy Rule allow without consent?

1. Using information for TPHCO

2. Release of medical records to media

3. Unrestricted marketing use

4. Sharing de-identified data without restrictions

The correct answer is: Using information for TPHCO

The Privacy Rule, which is part of the Health Insurance Portability and Accountability Act (HIPAA), allows for the use of Protected Health Information (PHI) without individual consent for Treatment, Payment, and Health Care Operations (TPHCO). This includes using PHI for clinical purposes, such as diagnosis and treatment, billing and payment purposes, and healthcare-related operational activities, such as quality assessment and improvement activities. Option B is incorrect because PHI cannot be released to the media without the individual's written authorization. Option C is also incorrect because marketing use of PHI requires individual authorization, with few exceptions. Option D is incorrect because while de-identified data can be shared without restrictions, the Privacy Rule has specific requirements for de-identification to ensure that it cannot be used to identify an individual.