Certification Exam: HIPAA Patient Confidentiality

Question 1 of 10

Under the 2026 Reproductive Health Privacy Rule, can you share PHI with law enforcement for the purpose of investigating lawful medical care?

A) Only if the officer is friendly B) Yes, always C) Only in certain states D) No, HIPAA now provides a Federal Privacy Shield for lawful reproductive health data

Question 2 of 10

What is the "Accounting of Disclosures" patients can request?

A) A list of all medical treatments received B) A 6-year history of everyone who saw their PHI for purposes outside of Treatment, Payment, or Operations C) A bill for their services D) A list of their prescriptions

Question 3 of 10

Which of these is considered one of the 18 HIPAA identifiers?

A) General age (over 89) B) State of residence C) Type of medical insurance D) IP Address and Full-face photographs

Question 4 of 10

How are Substance Use Disorder (SUD) records (42 CFR Part 2) handled in 2026?

A) They are public record B) They have heightened protections and generally cannot be used in court against the patient without consent C) They are treated exactly like regular PHI with no extra protection D) They must be deleted after 30 days

Question 5 of 10

According to the 2026 NIST standard, how should paper PHI be disposed of?

A) Recycling bin B) Trash can with a lid C) Tearing it in half D) Shredding (cross-cut), burning, or pulping

Question 6 of 10

What is "Minimum Necessary" in the context of HIPAA PHI access?

A) Using a small font on medical forms B) Only keeping records for 1 year C) Talking in a whisper D) Accessing only the smallest amount of data required to do your specific job

Question 7 of 10

In 2026, what is the mandatory security requirement for any system accessing ePHI?

A) A specialized mouse B) A private office C) A long password D) Multi-Factor Authentication (MFA)

Question 8 of 10

What is the internal reporting timeline for a suspected PHI breach in a 2026 world-class organization?

A) 24 hours B) 60 days C) When you have time D) One week

Question 9 of 10

What is "Internal Snooping" in a healthcare facility?

A) Cleaning the patient rooms B) Looking for a patient's room number for a delivery C) Repairing the EHR system D) Accessing the records of friends, celebrities, or coworkers out of curiosity

Question 10 of 10

What is the "Safe Harbor" for a lost or stolen laptop in 2026?

A) The laptop was old B) The data on the laptop was fully encrypted to NIST standards C) Reporting it within a year D) The laptop was unencrypted but in a locked car