What information must a notice of privacy policy contain?

2. Be able to identify situations in which each of the following PHI disclosure rules apply: 1. No Authorization Required, 2. No Authorization Required, but Must Give Opportunity to Object, or 3. Authorization Required.

3. What are the categories of covered entities under HIPAA?

4. Describe one of the federal laws that were in place prior to HIPAA that protected health information. Describe the limitations of that law.

5. How far should an individual's right to medical privacy extend?

6. Describe the differences between the designated record set and the legal health record.

7. List the five HIPAA-identified individual rights. For each, explain whether a covered entity must comply with the request