HIPAA General Workforce Compliance (CT)

First published: September 2, 2026Last verified: September 2, 2026Reviewed by the CertQuestUSA team

TL;DR

HIPAA General Workforce Compliance (CT): a 30-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 30 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.

Start diagnostic

3

full papers, no repeats

30

questions per paper

30

questions in the bank

What this exam covers

accounting-of-disclosures3%
administrative-safeguards-contingency-plan3%
administrative-safeguards-risk-analysis3%
amendment-rights3%
authorization3%
authorization-core-elements3%
breach-notification-hhs-large3%
breach-notification-individual3%
breach-risk-assessment3%
business-associate-agreement3%
confidential-communications3%
decedent-information3%
fee-limits3%
incidental-disclosure3%
minimum-necessary3%
minimum-necessary-exception3%
minor-personal-rep3%
mitigation3%
notice-of-privacy-practices3%
patient-access-format3%
patient-access-rights3%
permitted-uses-tpo3%
phi-definition3%
physical-safeguards3%
psychotherapy-notes3%
restriction-requests-mandatory3%
technical-safeguards-audit-controls3%
technical-safeguards-encryption3%
workforce-sanctions3%
workforce-training3%

5 real sample questions

A hospital's environmental services worker overhears two nurses discussing a patient's diagnosis in a hallway. Which fact makes this conversation involve Protected Health Information (PHI)?

A. The information is individually identifiable health information created or received by a covered entity

B. The conversation happened inside a hospital building

C. A nurse, rather than a physician, spoke the information

D. The patient's insurance had already paid the claim

Source: 45 CFR § 160.103

A front-desk scheduler needs to confirm a patient's upcoming appointment time. Under the minimum necessary standard, what should the scheduler access?

A. The patient's full chart including specialist consult notes from unrelated visits

B. Only the scheduling information needed to confirm the appointment, such as date, time, and provider

C. The patient's complete billing and insurance history

D. Any information in the system the scheduler is capable of opening

Source: 45 CFR § 164.502(b)

Which of the following disclosures of PHI is exempt from the minimum necessary requirement?

A. A routine internal report pulled for general business review purposes

B. A workforce member forwarding a chart to a personal email account for convenience

C. A disclosure made pursuant to and consistent with a valid patient authorization

D. A bulk data export requested 'just in case it's needed later'

Source: 45 CFR § 164.502(b)(2)

A physician's office shares a patient's lab results with a specialist to whom the patient was referred for follow-up care. Does this require the patient's written authorization?

A. Yes, all disclosures to a different provider require a signed authorization

B. No, but only if the specialist is in the same physical building

C. Yes, unless the patient is a minor

D. No, because sharing PHI for treatment purposes is permitted without authorization under the TPO provisions

Source: 45 CFR § 164.506

A nurse calls out a patient's name in a busy waiting room to bring them back for their appointment, and another patient overhears it. Is this a Privacy Rule violation?

A. No, this is a permissible incidental disclosure because reasonable safeguards were otherwise in place

B. Yes, patient names may never be spoken aloud in any public area under any circumstances

C. Yes, this always requires a breach notification to HHS

D. No, because only diagnosis information is protected, not names

Source: 45 CFR § 164.502(a)(1)(iii)

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (CT) practice test?

30 questions total, split into 3 full papers of 30 each with no repeats across papers.

What topics does the HIPAA General Workforce Compliance (CT) test cover?

30 domains, with the heaviest weight on accounting-of-disclosures (3%), administrative-safeguards-contingency-plan (3%), and administrative-safeguards-risk-analysis (3%).

Where do CertQuestUSA's HIPAA General Workforce Compliance (CT) questions come from?

Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.

Is there a free diagnostic for HIPAA General Workforce Compliance (CT)?

Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.