HIPAA General Workforce Compliance (IN)

First published: September 2, 2026Last verified: September 2, 2026Reviewed by the CertQuestUSA team

TL;DR

HIPAA General Workforce Compliance (IN): a 30-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 30 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (93%) and I.C. (7%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.

Start diagnostic

3

full papers, no repeats

30

questions per paper

30

questions in the bank

What this exam covers

Breach Notification Definition3%
Breach Notification Exceptions3%
Breach Notification Timeline3%
Breach Notification Who3%
Business Associate Obligations3%
Business Associate Requirements3%
Covered Entity Definitions3%
Deidentification Effect3%
Deidentification Safe Harbor3%
Indiana State Law7%
Privacy Rule Authorization7%
Privacy Rule De Minimis3%
Privacy Rule Individual Requests3%
Privacy Rule Minimum Necessary3%
Privacy Rule Patient Rights10%
Privacy Rule Treatment Payment Operations3%
Privacy Rule Uses Disclosures7%
Security Rule Administrative3%
Security Rule Audit Controls3%
Security Rule Encryption3%
Security Rule Overview3%
Security Rule Physical3%
Security Rule Sanctions Policy3%
Security Rule Technical3%
Security Rule Workforce Training3%

5 real sample questions

Under HIPAA Privacy Rule, which of the following is a permitted use or disclosure of protected health information without an individual's authorization?

A. Disclosure to a news organization for publication

B. Disclosure to an employer for employment decisions

C. Disclosure to a life insurance company for underwriting purposes

D. Disclosure for treatment purposes by a healthcare provider

Source: 45 CFR 164.502(a)

What does the minimum necessary standard require covered entities to do when using or disclosing protected health information?

A. Notify the patient before any use or disclosure occurs

B. Maintain separate systems for different types of information

C. Disclose all available information to ensure complete patient records are shared

D. Limit the information to the amount reasonably needed to accomplish the intended purpose

Source: 45 CFR 164.502(b)

Which of the following is a required element in a valid HIPAA authorization form for use or disclosure of protected health information?

A. Authorization for future unlimited uses of the patient's information

B. A requirement that the provider accept the authorization or refuse all treatment

C. Notification to the patient's employer of any disclosures made

D. A description of each purpose for the requested use or disclosure

Source: 45 CFR 164.508(b)

Under HIPAA, what is the maximum time period within which a covered entity must provide an individual with access to their protected health information?

A. 60 days from the date of the request with no extensions

B. 10 business days without any extension

C. Immediately upon verbal request, no written request required

D. 30 days from the date of the request, with one possible 30-day extension

Source: 45 CFR 164.524

An individual requests access to their protected health information from a healthcare provider. Which of the following records must be included in the designated record set that must be provided?

A. Psychotherapy notes and all provider personal notes without exception

B. Only medical records; billing records are proprietary to the provider

C. Medical records, billing records, and payment and claims records

D. Only records created in the past 12 months

Source: 45 CFR 164.524(a)(2)

Same exam, other states

AR AZ CA FL GA IL KS MA MI MS NC NJ NY OH PA TN TX VA WA

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (IN) practice test?

30 questions total, split into 3 full papers of 30 each with no repeats across papers.

What topics does the HIPAA General Workforce Compliance (IN) test cover?

25 domains, with the heaviest weight on Privacy Rule Patient Rights (10%), Indiana State Law (7%), and Privacy Rule Authorization (7%).

Where do CertQuestUSA's HIPAA General Workforce Compliance (IN) questions come from?

Primarily 45 CFR (93%) and I.C. (7%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.

Is there a free diagnostic for HIPAA General Workforce Compliance (IN)?

Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.