CertQuestUSA
Transportation70+AK/AL/AR +moreConstruction & Safety39+CAEnvironmental98+AL/AR/AZ +moreHealthcare & Clinical183+AL/AR/AZ +moreProfessional Licensing307+AL/AR/AZ +moreEducation & Teacher Certification17Aviation & FAA Certification9Finance & Securities Licensing19View all sectors ›

HIPAA General Workforce Compliance (HI)

First published: September 5, 2026Last verified: September 5, 2026Reviewed by the CertQuestUSA team
TL;DR

HIPAA General Workforce Compliance (HI): a 104-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 104 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.
Start diagnostic
3
full papers, no repeats
104
questions per paper
104
questions in the bank
What this exam covers
5 real sample questions
A direct treatment provider must make a good faith effort to obtain the patient's written acknowledgment of receipt of the Notice of Privacy Practices:
A. Never, it is optional
B. At the first direct treatment encounter (with some exceptions such as emergencies)
C. Only for patients over age 65
D. Only if the patient requests it
Source: 45 CFR 164.520(c)(2)
Which of the following must generally be included in a valid Notice of Privacy Practices?
A. A statement that most uses/disclosures for treatment, payment, and health care operations do not require authorization, and a description of individual rights such as the right to request restrictions
B. The hospital's annual revenue
C. A list of every employee's home address
D. The CEO's personal phone number
Source: 45 CFR 164.520(b)
Under HIPAA's right of access, a covered entity must generally act on an individual's request for a copy of their own records within how many days?
A. 10 calendar days
B. 30 calendar days, with one possible 30-day extension
C. 90 calendar days with no extension
D. 60 business days
Source: 45 CFR 164.524
Can a covered entity charge a patient a fee for providing a copy of their own records under the right of access?
A. No fee is ever allowed
B. Yes, but generally limited to a reasonable, cost-based fee as permitted under the rule
C. Any amount the provider wishes to charge
D. Only if the patient is uninsured
Source: 45 CFR 164.524(c)(4)
If a business associate violates the terms of its BAA in a material way and does not cure the breach, what must the covered entity do?
A. Nothing is required
B. Terminate the contract or arrangement, if feasible, or report the problem to HHS if termination is not feasible
C. Continue business as usual indefinitely
D. Only send a strongly worded email with no further action
Source: 45 CFR 164.504(e)(1)(ii)

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (HI) practice test?
104 questions total, split into 3 full papers of 104 each with no repeats across papers.
What topics does the HIPAA General Workforce Compliance (HI) test cover?
26 domains, with the heaviest weight on Covered Entities & Business Associates (7%), Minimum Necessary Standard (7%), and Accounting of Disclosures (4%).
Where do CertQuestUSA's HIPAA General Workforce Compliance (HI) questions come from?
Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.
Is there a free diagnostic for HIPAA General Workforce Compliance (HI)?
Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.
Composing your paper...