Covered entities need to conduct a risk assessment that considers at least the f
ID: 122375 • Letter: C
Question
Covered entities need to conduct a risk assessment that considers at least the following factors to determine whether there is a low probability that has been compromised. Which is not a factor used to determine if a breach occurred? Select the correct option and then click Submit to check your answer. The nature and extent of the PHI involved, including the types of identifiers and the likelihood of re-identification. The unauthorized person who used the PHI or to whom the disclosure was made. Whether the PHI was actually acquired or viewed. Whether the PHI was contained in a laptop computer that was left on a bus. The extent to which the risk to the PHI has been mitigated.Explanation / Answer
D) whether the PHI was containing a laptop computer that was left on a bus.
All other options are factors to determine if a breach occurred.