1. Scenario: Ted is employed as a custodial worker by Tidy Team, a company that contracts with Mercy Hospital to provide janitorial services. Ted has been assigned to Mercy Hospital. As part of his duties, he routinely cleans the floors and empties the trash in the HIM department. What is Tidy Team's relationship with Mercy Hospital? What is Ted's relationship with Mercy Hospital? Is this a business associate relationship? (Bloom's Level: 3) 2. Describe the three elements that, together, make information "PHI." (Bloom's Level: 4) 3. You are a member of a hospital health information management committee. The committee is drafting a new authorization form for patients to sign for the release of their health information. What items are required for this form in order to comply with the HIPAA Privacy Rule's authorization requirement? (Bloom's Level: 3) 4. Describe the three exceptions to the breach definition. (Bloom's Level: 2) 5. Describe the required components of a security awareness training program. Bloom's Level: 3 6. What do you do if there is a HIPAA breach