HIPAA General Workforce Compliance (LA)

First published: September 2, 2026Last verified: September 2, 2026Reviewed by the CertQuestUSA team

TL;DR

HIPAA General Workforce Compliance (LA): a 28-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 28 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.

Start diagnostic

3

full papers, no repeats

28

questions per paper

28

questions in the bank

What this exam covers

Accounting of Disclosures4%
Administrative Safeguards4%
Administrative Safeguards - Training4%
Administrative Safeguards - Workforce Access4%
Authorization Requirements4%
Breach Definition4%
Breach Notification - Large Breaches4%
Breach Notification Timing4%
Breach Risk Assessment4%
Business Associate Agreements4%
Covered Entities & Business Associates7%
De-identification4%
Marketing and Sale of PHI4%
Minimum Necessary Standard7%
Notice of Privacy Practices4%
Patient Right of Access4%
Patient Right to Amend4%
Permitted Uses and Disclosures4%
PHI Definition4%
Physical Safeguards4%
Right to Request Restrictions4%
Technical Safeguards - Access Control4%
Technical Safeguards - Audit Controls4%
Technical Safeguards - Transmission Security4%
Workforce Sanctions4%
Workforce Training Timing4%

5 real sample questions

Under the HIPAA right of access, a covered entity must generally act on an individual's request for a copy of their own records within how many days?

A. 10 calendar days

B. 90 calendar days with no extension available

C. 60 business days

D. 30 calendar days, with one possible 30-day extension

Source: 45 CFR 164.524

Under the HIPAA Privacy Rule, which of the following is classified as a 'covered entity'?

A. A health plan that pays claims for enrollees

B. A cloud hosting company that stores encrypted backups for a hospital but never views the data

C. A janitorial contractor that cleans a medical office after hours

D. A patient's family member who helps manage the patient's care

Source: 45 CFR 160.103

A billing company hired by a physician practice to process claims and receives PHI to do so is best described as a:

A. Covered entity

B. Business associate

C. Hybrid entity

D. Personal representative

Source: 45 CFR 160.103

Which of the following is protected health information (PHI) under HIPAA?

A. A hospital's aggregate quarterly infection-rate statistics with no patient identifiers

B. A de-identified dataset stripped of all 18 HIPAA identifiers

C. An individually identifiable medical record maintained by a health care provider

D. Employment records held by an employer in its role as employer, not as a health plan sponsor

Source: 45 CFR 160.103

The HIPAA minimum necessary standard requires a covered entity to:

A. Obtain patient authorization before any internal use of PHI

B. Destroy PHI within 30 days of the end of treatment

C. Encrypt all PHI at rest and in transit

D. Limit uses, disclosures, and requests for PHI to the minimum needed to accomplish the intended purpose

Source: 45 CFR 164.502(b) and 164.514(d)

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (LA) practice test?

28 questions total, split into 3 full papers of 28 each with no repeats across papers.

What topics does the HIPAA General Workforce Compliance (LA) test cover?

26 domains, with the heaviest weight on Covered Entities & Business Associates (7%), Minimum Necessary Standard (7%), and Accounting of Disclosures (4%).

Where do CertQuestUSA's HIPAA General Workforce Compliance (LA) questions come from?

Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.

Is there a free diagnostic for HIPAA General Workforce Compliance (LA)?

Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.