CertQuestUSA
Transportation70+AK/AL/AR +moreConstruction & Safety39+CAEnvironmental98+AL/AR/AZ +moreHealthcare & Clinical183+AL/AR/AZ +moreProfessional Licensing307+AL/AR/AZ +moreEducation & Teacher Certification17Aviation & FAA Certification9Finance & Securities Licensing19View all sectors ›

HIPAA General Workforce Compliance (IA)

First published: September 2, 2026Last verified: September 2, 2026Reviewed by the CertQuestUSA team
TL;DR

HIPAA General Workforce Compliance (IA): a 30-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 30 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.
Start diagnostic
3
full papers, no repeats
30
questions per paper
30
questions in the bank
What this exam covers
5 real sample questions
A home health aide keeps a personal notebook listing patient names and the wound-care instructions given at each visit. Under HIPAA, is this notebook subject to PHI protections?
A. Yes, because it is individually identifiable health information maintained by a covered entity's workforce member in connection with providing care
B. No, because handwritten notes are never covered by HIPAA
C. No, because the notebook is the aide's personal property
D. Yes, but only once the notebook is typed into the agency's official chart
Source: 45 CFR § 160.103
A self-insured employer administers its own group health plan and reviews employee medical claims to decide payment. In that capacity, how is the employer's group health plan treated under HIPAA?
A. As a business associate of its employees
B. As exempt from HIPAA because it is an employer-sponsored plan
C. As a covered entity, because a group health plan is a type of health plan under the definition
D. As a workforce member of the third-party administrator
Source: 45 CFR § 160.103
A cloud storage vendor hosts encrypted backups of a clinic's electronic health record system but has no employees who ever view the actual patient data. Is the vendor a business associate under HIPAA?
A. No, because it never actually reads the PHI it stores
B. No, because encryption removes the data from HIPAA's scope entirely
C. Yes, but only if the vendor is physically located in the same state as the clinic
D. Yes, because it maintains PHI on behalf of a covered entity, and access to view the data is not required to meet the definition
Source: 45 CFR § 160.103
An unpaid nursing student completes a clinical rotation at a hospital and has access to the EHR under the hospital's direct supervision. Under HIPAA, is the student part of the hospital's workforce?
A. No, because workforce status requires a paid employment relationship
B. No, because students are governed only by their school's policies, not the hospital's
C. Yes, because workforce includes employees, volunteers, trainees, and others under the direct control of the covered entity, whether or not they are paid
D. Yes, but only after the student signs a separate business associate agreement
Source: 45 CFR § 160.103
A hospital scheduler needs to confirm which physician a patient is seeing tomorrow in order to book a follow-up test. What does the minimum necessary standard require of the scheduler?
A. Accessing only the appointment and provider information needed to complete the scheduling task
B. Reviewing the patient's full chart, including unrelated specialty visits, to be thorough
C. Contacting the patient directly to ask them to read out their own chart
D. Copying the entire record into a scheduling spreadsheet for future reference
Source: 45 CFR § 164.502(b)

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (IA) practice test?
30 questions total, split into 3 full papers of 30 each with no repeats across papers.
What topics does the HIPAA General Workforce Compliance (IA) test cover?
30 domains, with the heaviest weight on access-fees (3%), accounting-of-disclosures (3%), and administrative-safeguards (3%).
Where do CertQuestUSA's HIPAA General Workforce Compliance (IA) questions come from?
Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.
Is there a free diagnostic for HIPAA General Workforce Compliance (IA)?
Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.
Composing your paper...