Compliance and Ethics Week 2026

Edit Answers
12345678910111213141516171819
Across
  1. 3. HIPAA rule that governs how protected health information may be used and disclosed
  2. 5. One of the three HIPAA permitted purposes commonly abbreviated TPO
  3. 7. Three-letter abbreviation for Protected Health Information
  4. 10. HIPAA rule that requires safeguards for electronic protected health information
  5. 13. Person you can immediately notify when you suspect a PHI breach
  6. 16. Login credential that associates must never share with others
  7. 19. Permission that may be required before disclosing PHI to an outside requester
Down
  1. 1. Three-letter abbreviation for multi-factor authentication
  2. 2. Federal law enacted in 1996 that protects health information and establishes privacy and security requirements
  3. 4. What you must confirm about an outside requester before releasing PHI
  4. 6. Abbreviation for patient information created stored received or shared electronically
  5. 8. Reporting channel available to VBRCM associates for raising compliance concerns
  6. 9. Reporting tool in Outlook used to forward suspicious emails
  7. 11. Security method used to protect electronic patient information when stored or transmitted
  8. 12. Unauthorized access use or disclosure of PHI that compromises its privacy or security
  9. 13. Proper method for destroying printed patient statements containing PHI
  10. 14. Tracking method used to record user activity involving electronic patient information
  11. 15. The first word in the HIPAA principle requiring associates to use only the information needed for their work
  12. 17. Harmful software that may damage or compromise patient information
  13. 18. Looking up a friend or family member's billing account without a work-related reason