CertQuestUSA
Transportation70+AK/AL/AR +moreConstruction & Safety39+CAEnvironmental98+AL/AR/AZ +moreHealthcare & Clinical183+AL/AR/AZ +moreProfessional Licensing307+AL/AR/AZ +moreEducation & Teacher Certification17Aviation & FAA Certification9Finance & Securities Licensing19View all sectors ›

HIPAA General Workforce (Illinois)

First published: September 2, 2026Last verified: September 2, 2026Reviewed by the CertQuestUSA team
TL;DR

HIPAA General Workforce (Illinois): a 138-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 40 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (80%) and 740 ILCS 14/15 (4%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.
Start diagnostic
3
full papers, no repeats
40
questions per paper
138
questions in the bank
What this exam covers
5 real sample questions
Under 740 ILCS 110, for a recipient's advance consent to disclosure of mental health records to be valid, what must it specify?
A. Only the name of the recipient's therapist.
B. The nature of the information to be disclosed in detail, and the duration of the consent.
C. A blanket authorization is sufficient without any time limit.
D. Nothing beyond the recipient's signature.
Source: 740 ILCS 110/5
Under the Illinois Genetic Information Privacy Act (410 ILCS 513), to whom may genetic testing results generally be released?
A. To any employer that requests the information for benefits administration.
B. Only to the individual tested and to persons specifically authorized in writing by that individual to receive the information.
C. To any health insurer without restriction.
D. To law enforcement upon informal request.
Source: 410 ILCS 513/15
Under the Illinois Biometric Information Privacy Act (740 ILCS 14/15(b)), before a private healthcare employer may collect a fingerprint scan from an employee for a biometric timeclock, what must first occur?
A. The employer must obtain a signed written release from the employee and inform the employee in writing of the purpose and length of the collection and storage.
B. The employer only needs to post a general privacy policy on its website.
C. The employer may collect the data first and obtain consent within 30 days after collection.
D. No consent is required because the data is used only for payroll purposes.
Source: 740 ILCS 14/15(b)
Under 740 ILCS 14/15(a), a healthcare employer that collects employee fingerprints for time-tracking must destroy the biometric data by which of the following deadlines?
A. Within 90 days of collection regardless of purpose.
B. When the initial purpose for collection has been satisfied, or within 3 years of the individual's last interaction with the entity, whichever occurs first.
C. Only upon written request from the employee.
D. There is no destruction requirement as long as the data is encrypted.
Source: 740 ILCS 14/15(a)
A hospital uses palm-vein scanning both (1) to identify patients at check-in for medical records matching and (2) to clock employee shifts. Under BIPA's definition of 'biometric identifier' (740 ILCS 14/10), which use is exempt from the Act?
A. Neither use is exempt; BIPA applies equally to patients and employees.
B. Only the employee timeclock use is exempt because it involves a workplace, not a clinical, function.
C. The patient check-in use is exempt because it is information collected for health care treatment, payment, or operations; the employee timeclock use is not exempt and remains subject to BIPA.
D. Both uses are exempt because the hospital is a HIPAA covered entity.
Source: 740 ILCS 14/10
Same exam, other states
ARAZCAFLGAINKSMAMIMSNCNJNYOHPATNTXVAWA

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce (Illinois) practice test?
138 questions total, split into 3 full papers of 40 each with no repeats across papers.
What topics does the HIPAA General Workforce (Illinois) test cover?
10 domains, with the heaviest weight on Privacy Rule Fundamentals (29%), Security Rule Safeguards (23%), and Breach Notification Basics (16%).
Where do CertQuestUSA's HIPAA General Workforce (Illinois) questions come from?
Primarily 45 CFR (80%) and 740 ILCS 14/15 (4%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.
Is there a free diagnostic for HIPAA General Workforce (Illinois)?
Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.
Composing your paper...