HIPAA General Workforce Compliance (AL)

First published: September 2, 2026Last verified: September 2, 2026Reviewed by the CertQuestUSA team

TL;DR

HIPAA General Workforce Compliance (AL): a 27-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 27 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.

Start diagnostic

3

full papers, no repeats

27

questions per paper

27

questions in the bank

What this exam covers

Accounting of Disclosures7%
Administrative Safeguards7%
Breach Notification Rule11%
Covered Entities and Business Associates11%
Minimum Necessary Standard11%
Patient Right of Access7%
Patient Right to Amend4%
Patient Rights4%
Permitted Uses and Disclosures11%
PHI Definition7%
Physical Safeguards4%
Technical Safeguards7%
Training Requirements4%
Workforce Sanctions4%

5 real sample questions

Under HIPAA, which of the following is a 'covered entity'?

A. A health plan, health care clearinghouse, or health care provider that transmits health information electronically in connection with certain transactions

B. Any company that stores files on a computer

C. A retail business that sells vitamins

D. A newspaper that reports on public health issues

Source: 45 CFR § 160.103

A billing company that processes claims on behalf of a physician practice, and in doing so creates, receives, or transmits PHI, is generally classified as what under HIPAA?

A. A covered entity

B. A business associate

C. A patient representative

D. An exempt vendor with no HIPAA obligations

Source: 45 CFR § 160.103

Which of the following is considered Protected Health Information (PHI) under HIPAA?

A. De-identified data with all 18 HIPAA identifiers removed

B. Aggregate statistics with no individual identifiers

C. A patient's name linked to their diagnosis, held by a covered entity

D. A phone book listing with no health information

Source: 45 CFR § 160.103 (definition of protected health information)

The HIPAA minimum necessary standard requires covered entities and business associates to:

A. Disclose the entire medical record for every request, regardless of purpose

B. Refuse to disclose PHI under any circumstances

C. Only apply to disclosures made to insurance companies

D. Make reasonable efforts to limit PHI use, disclosure, and requests to the minimum necessary to accomplish the intended purpose

Source: 45 CFR § 164.502(b); § 164.514(d)

Which type of disclosure is exempt from the minimum necessary standard?

A. Disclosures for treatment purposes between health care providers

B. Marketing disclosures to third-party advertisers

C. Disclosures to a patient's employer without authorization

D. Sale of PHI for commercial purposes without authorization

Source: 45 CFR § 164.502(b)(2)

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (AL) practice test?

27 questions total, split into 3 full papers of 27 each with no repeats across papers.

What topics does the HIPAA General Workforce Compliance (AL) test cover?

14 domains, with the heaviest weight on Breach Notification Rule (11%), Covered Entities and Business Associates (11%), and Minimum Necessary Standard (11%).

Where do CertQuestUSA's HIPAA General Workforce Compliance (AL) questions come from?

Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.

Is there a free diagnostic for HIPAA General Workforce Compliance (AL)?

Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.