Question

question 12 of 30
which of the following types of breaches may trigger civil penalties up to $1.5 million for cha?
select all that apply
deliberate, unauthorized access to phi without phi disclosures (e.g., snoopers viewing information of vips, co - workers, friends, family without legitimate business reason, failure to follow policy without legitimate reason password sharing)
deliberate, unauthorized disclosure of phi or data - tampering without malice – promptly corrected (e.g., snooper disclosure to news media, or unauthorized modification of an electronic document to expedite a process)
deliberate, unauthorized disclosure of phi for malice or gain – not promptly corrected (e.g., stolen phi sold to tabloids or used for personal financial gain)
all of the above

Explanation:

To determine which breaches trigger civil penalties, we analyze each option:

1. The first option (unauthorized access without legitimate reason) is a breach.
2. The second option (unauthorized disclosure/modification without malice but uncorrected) is a breach.
3. The third option (unauthorized disclosure for malice/gain) is a breach.

Since all these are types of PHI breaches that can lead to penalties, "All of the above" is correct.

Answer:

All of the above