HIPAA General Workforce Compliance (KY)

First published: September 2, 2026Last verified: September 2, 2026Reviewed by the CertQuestUSA team

TL;DR

HIPAA General Workforce Compliance (KY): a 30-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 30 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.

Start diagnostic

3

full papers, no repeats

30

questions per paper

30

questions in the bank

What this exam covers

Administrative Safeguards10%
Breach Notification13%
Business Associates7%
Deceased Individuals and Personal Representatives7%
Minimum Necessary7%
Patient Rights17%
Permitted Uses and Disclosures10%
PHI Definitions7%
Physical and Technical Safeguards7%
Sanctions and Enforcement10%
Workforce Conduct7%

5 real sample questions

Which situation is exempt from the HIPAA minimum necessary standard?

A. A researcher requesting a limited data set for a study

B. A hospital disclosing PHI to a business associate for routine operations

C. A health plan disclosing PHI to a marketing vendor

D. A physician disclosing PHI to another physician for treatment purposes

Source: 45 CFR § 164.502(b)(2)

Under the HIPAA Privacy Rule, which of the following is classified as protected health information (PHI)?

A. A patient's name and diagnosis stored in a covered entity's medical record system

B. De-identified data from which all 18 HIPAA identifiers have been removed

C. A hospital's aggregate quarterly patient-volume statistics with no identifiers

D. A health plan's publicly filed corporate tax return

Source: 45 CFR § 160.103

A covered entity is an organization that is a health plan, a health care clearinghouse, or a health care provider that does which of the following?

A. Employs more than 50 workers in a clinical setting

B. Transmits health information in electronic form in connection with a HIPAA standard transaction

C. Operates exclusively within a single state

D. Bills patients directly rather than through insurance

Source: 45 CFR § 160.103

A billing clerk needs to verify a patient's insurance coverage to process a claim. Under the minimum necessary standard, the clerk should access:

A. The patient's entire medical record, including psychotherapy notes

B. The patient's full treatment history for the past ten years

C. Only the demographic and insurance information needed to verify coverage

D. All records for every patient seen that day, for efficiency

Source: 45 CFR § 164.502(b)

Which of the following disclosures of PHI does NOT require patient authorization under the HIPAA Privacy Rule?

A. Sharing a patient's record with another treating provider for care coordination

B. Sharing a patient's diagnosis with a marketing company for a paid promotion

C. Sharing a patient's chart with a life insurance underwriter

D. Posting a patient's photo and diagnosis on the clinic's social media page

Source: 45 CFR § 164.506

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (KY) practice test?

30 questions total, split into 3 full papers of 30 each with no repeats across papers.

What topics does the HIPAA General Workforce Compliance (KY) test cover?

11 domains, with the heaviest weight on Patient Rights (17%), Breach Notification (13%), and Administrative Safeguards (10%).

Where do CertQuestUSA's HIPAA General Workforce Compliance (KY) questions come from?

Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.

Is there a free diagnostic for HIPAA General Workforce Compliance (KY)?

Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.