HIPAA General Workforce Compliance (MO)

First published: September 2, 2026Last verified: September 2, 2026Reviewed by the CertQuestUSA team

TL;DR

HIPAA General Workforce Compliance (MO): a 30-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 30 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.

Start diagnostic

3

full papers, no repeats

30

questions per paper

30

questions in the bank

What this exam covers

Accounting Of Disclosures3%
Administrative Safeguards3%
Amendment Rights3%
Authorization7%
Breach Notification10%
Business Associate Agreements7%
Confidential Communications3%
De Identification7%
Minimum Necessary7%
Notice Of Privacy Practices3%
Patient Access Rights7%
Permitted Uses Tpo7%
Phi Definition3%
Physical Safeguards3%
Restriction Requests3%
Safeguards General7%
Security Rule General3%
Technical Safeguards3%
Workforce Sanctions10%

5 real sample questions

Under HIPAA, which of the following is considered Protected Health Information (PHI)?

A. A patient's name linked to their diagnosis, stored in a hospital's billing system

B. De-identified aggregate data showing that 40% of clinic patients have hypertension, with no identifiers

C. A hospital's general visiting-hours policy posted in the lobby

D. An employee's personnel file maintained by a covered entity in its role as an employer

Source: 45 CFR § 160.103

A billing clerk needs to verify a patient's insurance coverage for a recent visit. Under the minimum necessary standard, what should the clerk access?

A. The patient's entire medical record, including unrelated psychiatric history

B. Only the information reasonably necessary to verify coverage for that specific visit, such as visit date and billing codes

C. The patient's complete lifetime treatment history across all providers in the health system

D. Any information the clerk personally finds interesting about the patient

Source: 45 CFR § 164.502(b)

Which of the following disclosures is EXEMPT from the minimum necessary requirement?

A. A routine internal data pull for a hospital marketing analytics project

B. Disclosure to the patient of their own PHI in response to an access request

C. A workforce member browsing a coworker's chart for personal curiosity

D. Sharing an entire chart with a third-party vendor when only lab values were requested

Source: 45 CFR § 164.514(d)

Under HIPAA, a covered entity may use and disclose PHI without patient authorization for which of the following purposes?

A. Selling the patient's contact list to a pharmaceutical company for direct marketing

B. Treatment, payment, and healthcare operations (TPO)

C. Posting patient photos on the practice's public social media account for promotion

D. Providing a patient's diagnosis to their employer upon the employer's request, without the patient's authorization

Source: 45 CFR § 164.506

A patient wants their therapist to release detailed psychotherapy notes to a life insurance company. What does HIPAA require?

A. No authorization is needed because insurance companies are treated like healthcare operations

B. A valid, specific written authorization signed by the patient, since psychotherapy notes require heightened protection

C. Verbal consent given once over the phone is sufficient for any type of PHI

D. The therapist must refuse regardless of patient wishes because psychotherapy notes can never be disclosed

Source: 45 CFR § 164.508

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (MO) practice test?

30 questions total, split into 3 full papers of 30 each with no repeats across papers.

What topics does the HIPAA General Workforce Compliance (MO) test cover?

19 domains, with the heaviest weight on Breach Notification (10%), Workforce Sanctions (10%), and Authorization (7%).

Where do CertQuestUSA's HIPAA General Workforce Compliance (MO) questions come from?

Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.

Is there a free diagnostic for HIPAA General Workforce Compliance (MO)?

Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.