hipaa.systems
Free training episode · billing · about 8 minutes · no sign-up

Claims day One batch. Six decisions.

Handle the day's claims and balances at a fictional outpatient practice. Payment work is allowed; decide what each task needs, which account instruction matters and who may receive the information. All people and records are fictional.

Decision 1 of 6

Decision 1 of 6

The attachment request

9:05 a.m., Lakeview Health Partners. You're handling today's billing.

Maya Reed Private health plan representative

For this claim review, please upload the patient's complete medical record.

Verified health plan contact and claim-review role. No explanation for the whole chart. These are additional documents, not standard-transaction fields; no restriction applies.

Which point is still missing for this payment disclosure? Choose one

Right

Payment is a permitted purpose. You ask what supports this claim; Maya identifies the visit note and related report. Send that justified material through the approved route. Reasonable reliance isn't a whole-chart pass: an entire record needs specific justification. The standard-transaction exemption doesn't cover these extra documents.

Maya Reed

The visit note and that report will do. I'll correct the request so we don't keep chasing each other.

HIPAA permits Payment disclosures can proceed without an authorization, with the applicable minimum-necessary limits. 45 CFR 164.506(c); 164.502(b); 164.514(d)(3), (5)

Why the other answers are wrong
  • Confirm the requester's role in the plan's claims team. Not yet. The contact is already verified. That check doesn't explain why a complete chart is needed for this claim. Reasonable reliance on another covered entity is permitted, but an entire record still needs specific justification.
  • Confirm the patient's acceptance of the plan's privacy notice. Not yet. Acceptance or acknowledgment of a privacy notice isn't the missing condition for this payment disclosure. It doesn't authorize a whole chart or justify its contents. Clarify the actual need for the requested material.

Decision 2 of 6

Already paid

9:30 a.m. Dana brings a note from the desk before transmission.

Previous conversation

Maya Reed: For this claim review, please upload the patient's complete medical record.

Verified health plan contact and claim-review role. No explanation for the whole chart. These are additional documents, not standard-transaction fields; no restriction applies.

Maya Reed: The visit note and that report will do. I'll correct the request so we don't keep chasing each other.

Nora Bell Patient

I paid the full price myself. Please don't tell my health plan about this visit.

Account check

Payment cleared in full. The visit is still in today's claim batch. No law requires this plan disclosure.

The claim is removed and Nora's instruction saved. What must stay out of later reports to her plan? Choose one

Right

The practice must agree to this restriction and document it. Keep information solely about this fully paid service out of health-plan payment or operations disclosures unless law requires disclosure. Flag the account before the batch leaves; a standard claim isn't an exception.

Dana

It's out of the batch. I'll make sure the instruction follows any later request for this visit too.

HIPAA requires Honour a qualifying paid-in-full restriction before sending the service to the health plan. 45 CFR 164.522(a)(1)(vi), (a)(3)

Why the other answers are wrong
  • This visit's information in bills, but not in audit records sent to the plan. Not yet. The qualifying restriction covers plan payment and operations disclosures. Removing the claim but leaving this service in an operations-audit export would not carry it through. A disclosure required by law would be different; none applies here.
  • This visit's notes, but not its billing codes in records sent to the plan. Not yet. Codes and other billing entries can still identify the fully paid service. The restriction is on the service's PHI in these plan disclosures, not just on narrative notes. Removing today's claim doesn't settle later exports.

Decision 3 of 6

The collection referral

10:10 a.m. A different patient's overdue account is ready for referral.

Previous conversation

Maya Reed: For this claim review, please upload the patient's complete medical record.

Verified health plan contact and claim-review role. No explanation for the whole chart. These are additional documents, not standard-transaction fields; no restriction applies.

Maya Reed: The visit note and that report will do. I'll correct the request so we don't keep chasing each other.

Nora Bell: I paid the full price myself. Please don't tell my health plan about this visit.

Account check: Payment cleared in full. The visit is still in today's claim batch. No law requires this plan disclosure.

Dana: It's out of the batch. I'll make sure the instruction follows any later request for this visit too.

Referral checks

Agency and recipient verified; BAA effective. The agency has no contact information for this patient. Collection fields: contact details, amount and dates. The export also includes notes from last year's fully paid visits. No restriction blocks the referral.

Dana Front-desk colleague

Which version goes out?

Which version of the referral do you send? Choose one

Right

Proceed with the checked referral, leaving out the unrelated notes. A collection agency or outside billing company handling PHI for the practice is a business associate for that work. A required BAA comes before PHI, and the task still sets the information needed.

Ms. Ruiz

That gives the agency what it needs without turning a balance referral into a clinical history.

HIPAA permits Collection work can proceed through a business associate, with the required agreement and limited information. 45 CFR 164.501; 164.502(b), (e); 164.504(e)

Why the other answers are wrong
  • Export contact details, the referral balance and dates with the care notes. Not yet. Those care notes concern earlier, fully paid visits. Including them doesn't help collect the current balance on these facts. The BAA doesn't supply a need for that clinical background.
  • Export contact details, the settled balance and dates from the earlier visits. Not yet. Last year's visits were fully paid. Their settled balance isn't the overdue account being referred. Select the current referral figures; this is an account-selection error, not a rule that more information is always better.

Decision 4 of 6

Did her payment arrive?

10:45 a.m. Nora's adult son Eli calls about her account.

Previous conversation

Maya Reed: For this claim review, please upload the patient's complete medical record.

Verified health plan contact and claim-review role. No explanation for the whole chart. These are additional documents, not standard-transaction fields; no restriction applies.

Maya Reed: The visit note and that report will do. I'll correct the request so we don't keep chasing each other.

Nora Bell: I paid the full price myself. Please don't tell my health plan about this visit.

Account check: Payment cleared in full. The visit is still in today's claim batch. No law requires this plan disclosure.

Dana: It's out of the batch. I'll make sure the instruction follows any later request for this visit too.

Referral checks: Agency and recipient verified; BAA effective. The agency has no contact information for this patient. Collection fields: contact details, amount and dates. The export also includes notes from last year's fully paid visits. No restriction blocks the referral.

Dana: Which version goes out?

Ms. Ruiz: That gives the agency what it needs without turning a balance referral into a clinical history.

Eli Bell Nora's adult son

I'm helping Mum sort her bills. Did the payment for last week's visit arrive?

Nora's recorded choice

Eli may discuss billing and payments. No clinical details. Statements go to Nora. Payment posted; that visit has no balance.

Lakeview's caller check uses information the caller supplies, compared with the account.

Which steps fit this call? Choose all that apply

Right

After the caller check, confirm the payment information within Nora's agreement. Helping with bills doesn't give Eli the whole record or make him her legal representative. The identity-check method is Lakeview's policy; HIPAA permits directly relevant sharing with someone involved in payment.

Eli Bell

Perfect. I'll mark that one paid. We didn't need to go through the appointment itself.

HIPAA permits An involved relative can receive relevant payment information within the patient's agreement. 45 CFR 164.510(b)(1)–(2)

Why the other answers are wrong
  • Read the account information for the caller to confirm. Not yet. Lakeview's check compares what the caller supplies with the information held. Reading it out first supplies the answers rather than performing that check. This particular method is practice policy, not a universal HIPAA verification ritual.
  • Confirm the original charge as the amount due on that bill. Not yet. This payment has posted and no balance remains for that visit. The amount originally charged isn't the outstanding sum. Eli may receive the relevant payment information, but it must reflect the current account.

Decision 5 of 6

Not just the balance

11:20 a.m. Nora contacts billing herself; her identity is verified.

Previous conversation

Maya Reed: For this claim review, please upload the patient's complete medical record.

Verified health plan contact and claim-review role. No explanation for the whole chart. These are additional documents, not standard-transaction fields; no restriction applies.

Maya Reed: The visit note and that report will do. I'll correct the request so we don't keep chasing each other.

Nora Bell: I paid the full price myself. Please don't tell my health plan about this visit.

Account check: Payment cleared in full. The visit is still in today's claim batch. No law requires this plan disclosure.

Dana: It's out of the batch. I'll make sure the instruction follows any later request for this visit too.

Referral checks: Agency and recipient verified; BAA effective. The agency has no contact information for this patient. Collection fields: contact details, amount and dates. The export also includes notes from last year's fully paid visits. No restriction blocks the referral.

Dana: Which version goes out?

Ms. Ruiz: That gives the agency what it needs without turning a balance referral into a clinical history.

Eli Bell: I'm helping Mum sort her bills. Did the payment for last week's visit arrive?

Nora's recorded choice: Eli may discuss billing and payments. No clinical details. Statements go to Nora. Payment posted; that visit has no balance.

Lakeview's caller check uses information the caller supplies, compared with the account.

Eli Bell: Perfect. I'll mark that one paid. We didn't need to go through the appointment itself.

Nora Bell Patient

Please email me a copy of my itemised charges, payments and adjustments for this year.

Billing system

Those entries are retained. Nora has chosen a readily producible PDF. The usual statement shows only the current balance.

How do you prepare Nora's copy? Choose one

Right

Proceed: billing records belong in the designated record set too. Record receipt and coordinate the retained entries in the requested PDF through the approved delivery process. HIPAA's access clock applies; billing shouldn't become a separate queue with no due date.

Nora Bell

Thank you. The running balance wasn't enough to check the adjustments.

HIPAA requires A patient's access right includes their billing records, not just clinical notes. 45 CFR 164.501; 164.524

Why the other answers are wrong
  • Use the invoice amounts due to prepare the year's PDF. Not yet. An invoice register alone doesn't provide the retained payment and adjustment entries Nora requested. It may be part of a response, but she hasn't agreed to narrow her copy to invoices.
  • Use the receipt amounts paid to prepare the year's PDF. Not yet. A receipt register alone doesn't provide the retained charge and adjustment history. Her request includes those entries too. Supply the existing records through the access process rather than a receipts-only copy.

Decision 6 of 6

Another request from the plan

1:15 p.m. The plan sends a different kind of request.

Previous conversation

Maya Reed: For this claim review, please upload the patient's complete medical record.

Verified health plan contact and claim-review role. No explanation for the whole chart. These are additional documents, not standard-transaction fields; no restriction applies.

Maya Reed: The visit note and that report will do. I'll correct the request so we don't keep chasing each other.

Nora Bell: I paid the full price myself. Please don't tell my health plan about this visit.

Account check: Payment cleared in full. The visit is still in today's claim batch. No law requires this plan disclosure.

Dana: It's out of the batch. I'll make sure the instruction follows any later request for this visit too.

Referral checks: Agency and recipient verified; BAA effective. The agency has no contact information for this patient. Collection fields: contact details, amount and dates. The export also includes notes from last year's fully paid visits. No restriction blocks the referral.

Dana: Which version goes out?

Ms. Ruiz: That gives the agency what it needs without turning a balance referral into a clinical history.

Eli Bell: I'm helping Mum sort her bills. Did the payment for last week's visit arrive?

Nora's recorded choice: Eli may discuss billing and payments. No clinical details. Statements go to Nora. Payment posted; that visit has no balance.

Lakeview's caller check uses information the caller supplies, compared with the account.

Eli Bell: Perfect. I'll mark that one paid. We didn't need to go through the appointment itself.

Nora Bell: Please email me a copy of my itemised charges, payments and adjustments for this year.

Billing system: Those entries are retained. Nora has chosen a readily producible PDF. The usual statement shows only the current balance.

Nora Bell: Thank you. The running balance wasn't enough to check the adjustments.

Maya Reed Private health plan representative

Our compliance audit needs 40 complete patient files. Please upload them this week.

Authenticated private insurer acting for itself, not government. All named people are its members and Lakeview patients. The letter gives no further explanation.

What is still missing for Ms. Ruiz's decision about sending these records? Choose one

Right

This may be payment or qualifying plan operations, not government oversight. Ms. Ruiz checks the activity: the operations route requires both parties' patient relationships, related information and an eligible purpose. Once the basis and scope are established, send the justified material through the approved route, honouring restrictions.

Maya Reed

I'll send the review purpose and the reason for each document. Forty names shouldn't mean forty whole charts by default.

HIPAA permits A private plan's audit needs its actual disclosure basis; the heading alone isn't permission. 45 CFR 164.506(c)(3)–(4); 164.514(d); compare 164.512(d)

Why the other answers are wrong
  • What gives the plan public oversight powers, and which records it needs. Not yet. The plan is acting for itself, not under government authority. Ms. Ruiz needs to find out what the plan is actually reviewing and why it needs the records, under the rules for payment or qualifying health care operations.
  • Which patients belong to the plan, and which records it needs. Not yet. Shared membership and a scope check don't establish the purpose that permits this disclosure. For the receiving plan's operations, the activity must qualify under the narrower rule; payment has its own route. Confirm that basis as well.

Shift complete

The batch leaves

Dana

One claim came out. The other payment work still moved.

You

Right purpose, right account instructions, right information for the recipient.

Payment is allowed. Check the purpose, the account and the recipient before information leaves.

Episode complete. Your employer must also teach its own policies and procedures.

All episodes

The whole billing add-on

Every billing episode: $19 per learner on top of the $29 core course every role needs. With a final check, a certificate of completion and a training record.

See pricing

Billing: one practice scenario, not a complete HIPAA training program. HIPAA requires your employer to train you on its own policies and procedures (45 CFR 164.530(b)) and to run a security awareness program (164.308(a)(5)). Sources checked 2026-10-19. More: all episodes by role · HIPAA training for new employees.