HIPAA Competency Examination

35 questions · 1 point each · Pass with at least 32/35 and all critical questions correct.

  1. 1.

    What does PHI include?

  2. 2.

    Does a working login authorize viewing any Mendrix Medical Associates patient?

  3. 3.

    An Mendrix Care Solutions employee wants the entire Mendrix Medical Associates census for a generic meeting. Best action?

  4. 4.

    Which is a minimum-necessary principle?

  5. 5.

    Minimum-necessary HIPAA standard generally does NOT apply to which disclosure?

  6. 6.

    Caller says “I am the patient’s spouse.” What next?

  7. 7.

    A family friend asks whether a person is Mendrix Medical Associates patient.

  8. 8.

    A request for records arrives by email.

  9. 9.

    Federal HIPAA access-request time generally is:

  10. 10.

    Before faxing records, assistant must:

  11. 11.

    Email containing PHI sent to wrong address. First response?

  12. 12.

    An unexpected MFA notification appears.

  13. 13.

    A vendor requests live patient data for software testing.

  14. 14.

    Who determines formal breach notification?

  15. 15.

    HIPAA breach notice to affected individuals, if required, is generally:

  16. 16.

    If a provider asks for records for treatment:

  17. 17.

    Which is improper?

  18. 18.

    Can an assistant give clinical advice on lab abnormalities?

  19. 19.

    What if a manager asks you to access an unrelated chart?

  20. 20.

    A printer contains uncollected charts.

  21. 21.

    A subpoena demanding a patient chart arrives.

  22. 22.

    Mendrix Medical Associates Tennessee records can automatically be used by the Foundation because leadership overlaps.

  23. 23.

    A nurse requests patient information for care coordination.

  24. 24.

    Which information is safe to include automatically in voicemail?

  25. 25.

    A lost phone that might contain work email is:

  26. 26.

    A patient complains their information was shared improperly.

  27. 27.

    A patient is visibly ill and asks for medical help.

  28. 28.

    Training question: special records such as Part 2, minors or HIV records:

  29. 29.

    A shared password spreadsheet is discovered.

  30. 30.

    For routine RCM review, best dataset:

  31. 31.

    What is the proper use of a public generative-AI chatbot?

  32. 32.

    If you accidentally access the wrong patient chart:

  33. 33.

    A co-worker asks you to send a patient’s schedule to personal WhatsApp.

  34. 34.

    The best action before allowing vendor PHI access is:

  35. 35.

    HIPAA workforce education is:

0 / 35 answered