Free Hawaii HIPAA Practice Test Online

Correct answer: B. At the first direct treatment encounter (with some exceptions such as emergencies)

Correct. 45 CFR 164.520(c)(2) requires a good faith effort to obtain written acknowledgment of NPP receipt at the first direct treatment encounter, with recognized exceptions like emergency treatment situations.

• A: Obtaining acknowledgment is a specific, expected practice, not optional for direct treatment providers.
• C: There is no age-based limitation on this NPP acknowledgment requirement.
• D: The requirement is proactive and applies regardless of whether the patient specifically requests to sign; the provider must attempt to obtain it.

Correct answer: A. A statement that most uses/disclosures for treatment, payment, and health care operations do not require authorization, and a description of individual rights such as the right to request restrictions

Correct. The NPP must describe permitted uses/disclosures (like TPO) and individual rights, including the right to request restrictions, access, and file complaints.

• B: Financial performance data is not a required NPP element.
• C: Employee home addresses are irrelevant and inappropriate to include in an NPP.
• D: Personal contact details of executives are not required NPP content.

Correct answer: B. 30 calendar days, with one possible 30-day extension

Correct. 45 CFR 164.524 requires a response within 30 calendar days, with one possible 30-day extension if the covered entity provides written notice of the reason for delay.

• A: 10 days understates the standard timeframe under the right of access rule.
• C: 90 days overstates the allowed base period; the base window is 30 days, extendable once.
• D: The rule uses calendar days, not business days, and 60 is not the correct base figure.

Correct answer: B. Yes, but generally limited to a reasonable, cost-based fee as permitted under the rule

Correct. 45 CFR 164.524(c)(4) permits a reasonable, cost-based fee for copies, limited to specific enumerated cost categories (such as labor for copying and supplies).

• A: Some fee is generally permitted, so a blanket 'no fee ever' statement is inaccurate.
• C: Fees are not unlimited; they must be reasonable and cost-based as defined by the rule.
• D: Fee permissibility is not conditioned on insurance status.

Correct answer: B. Terminate the contract or arrangement, if feasible, or report the problem to HHS if termination is not feasible

Correct. 45 CFR 164.504(e)(1)(ii) requires the covered entity to terminate the contract, if feasible, or report the problem to the Secretary of HHS if termination is not feasible.

• A: A material, uncured breach triggers a specific required response, not inaction.
• C: Continuing without addressing a known material, uncured violation would itself be a compliance failure.
• D: An email alone does not satisfy the regulatory requirement to terminate or report.