CertQuestUSA
Transportation70+AK/AL/AR +moreConstruction & Safety39+CAEnvironmental99+AL/AR/AZ +moreHealthcare & Clinical196+AL/AR/AZ +moreProfessional Licensing307+AL/AR/AZ +moreEducation & Teacher Certification24+CAAviation & FAA Certification9Finance & Securities Licensing23IT & Cloud Certification6Project Management1Military Entrance Testing1View all sectors ›

Free New Mexico HIPAA Practice Test Online

Official exam: HIPAA General Workforce Compliance (NM)

Take a free New Mexico HIPAA practice test online: a full 110-question paper with every answer explained, no sign-up, scored by topic. The full 110-question bank and the timed simulator are $14.99 for 30 days.

First published: September 5, 2026Bank updated: September 5, 2026Published by CertQuestUSA · review process
TL;DR

HIPAA General Workforce Compliance (NM): a 110-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 110 questions each with no repeats, every question written to the regulation it comes from.

Where these questions come from

Every question in this bank cites a source -- primarily 45 CFR (55%) and 45 CFR 160.103 - Definitions (12%) of this exam's citations.

Take a full practice test free. 110 real questions built to the exam's domain weights, every answer explained, no sign-up required, with a domain-by-domain score at the end.
Start diagnostic
Want the whole bank for HIPAA General Workforce Compliance (NM)? One payment of $14.99 gives you 30 days of full access to this exam. It does not renew. No account needed to buy, and there is a 7-day money-back guarantee.
Not ready yet? Take the free practice test first.
Ways to pay for the full bank
30-day pass
$14.99
about $15 a month
This exam only. Pays once, does not renew.
Monthly
$19.99
$19.99 a month
Every exam. Cancel any time.
Yearly
$143.93
about $11.99 a month
Every exam. Billed once a year.
Lifetime
$39.99
pay once
This exam only, no time limit.

See all plans and bundles

3
full papers, no repeats
110
questions per paper
110
questions in the bank
What this exam covers
5 real sample questions
Which of the following would generally be considered PHI?
A. A de-identified data set with all identifiers permanently removed per the Safe Harbor method
B. A patient's name linked to their diagnosis in a hospital record
C. Aggregate statistics with no way to identify any individual
D. A phone book listing with no health information
Show answer and reasoning

Correct answer: B. A patient's name linked to their diagnosis in a hospital record

Correct. Information that identifies an individual (such as their name) and relates to their health condition or care is PHI under 45 CFR 160.103.

  • A: Properly de-identified data under the Safe Harbor or expert determination method is specifically excluded from the PHI definition.
  • C: Aggregate data that cannot be traced to an individual does not meet the identifiability requirement of PHI.
  • D: A phone listing without health information does not meet the PHI definition.
Source: 45 CFR 160.103 - Definitions (protected health information)
For routine, recurring disclosures of PHI, a covered entity's minimum necessary compliance approach typically involves:
A. Reviewing every single disclosure individually with no standard criteria
B. Implementing policies and procedures (such as standard protocols) that limit the PHI disclosed to what is reasonably necessary
C. Disclosing complete records by default to save time
D. Ignoring the requirement for recurring disclosures since they happen often
Show answer and reasoning

Correct answer: B. Implementing policies and procedures (such as standard protocols) that limit the PHI disclosed to what is reasonably necessary

Correct. 45 CFR 164.514(d) allows covered entities to develop policies and procedures, including standard protocols, that reasonably limit routine and recurring PHI disclosures to the minimum necessary.

  • A: Case-by-case review of every routine disclosure is not required if adequate standard policies exist.
  • C: Defaulting to full records disregards the minimum necessary obligation.
  • D: Frequency of a disclosure does not exempt it from the minimum necessary requirement.
Source: 45 CFR 164.502(b), 164.514(d) - Minimum necessary requirement
Role-based access controls limiting which staff can view specific categories of PHI in an EHR system are an example of implementing:
A. The right to request restrictions
B. The minimum necessary standard
C. The breach notification rule
D. The right to amend
Show answer and reasoning

Correct answer: B. The minimum necessary standard

Correct. Role-based access controls that limit staff PHI access to what is needed for their job function are a practical implementation of the minimum necessary standard.

  • A: Right to request restrictions is a patient-initiated right regarding specific disclosures, not a general access-control mechanism.
  • C: This scenario is unrelated to reporting a breach after it has occurred.
  • D: This scenario is unrelated to a patient's request to amend their record.
Source: 45 CFR 164.502(b), 164.514(d) - Minimum necessary requirement
A valid HIPAA authorization for release of PHI must include which of the following core elements?
A. A description of the information to be disclosed, who may disclose and receive it, and an expiration date or event
B. Only the patient's verbal consent with no written form
C. The treating physician's personal opinion of the patient
D. A blank form to be filled in later by office staff
Show answer and reasoning

Correct answer: A. A description of the information to be disclosed, who may disclose and receive it, and an expiration date or event

Correct. 45 CFR 164.508(c) requires a valid authorization to include specific core elements: a description of the information, the persons authorized to disclose and receive it, and an expiration date or event, among other required elements.

  • B: A valid authorization under the Privacy Rule must generally be in writing, not merely verbal.
  • C: A physician's personal opinion is not a required authorization element.
  • D: An authorization must be specific and completed, not left blank for later completion, to be considered valid.
Source: 45 CFR 164.508 - Uses and disclosures requiring an authorization
Under 45 CFR 164.528, an individual generally has the right to receive an accounting of disclosures of their PHI made by a covered entity going back how far?
A. The prior 6 years before the date of the request
B. Only the prior 30 days
C. The individual's entire lifetime with no limit
D. Only disclosures made after a lawsuit is filed
Show answer and reasoning

Correct answer: A. The prior 6 years before the date of the request

Correct. 45 CFR 164.528(a) generally entitles individuals to an accounting of disclosures made during the six years prior to the date of the request (subject to certain exclusions).

  • B: 30 days significantly understates the actual look-back period.
  • C: There is a defined six-year look-back period, not an unlimited lifetime scope.
  • D: The right to an accounting is not conditioned on a lawsuit being filed.
Source: 45 CFR 164.528 - Accounting of disclosures

Frequently asked questions

Where can I take a free New Mexico HIPAA practice test online?
Right here. CertQuestUSA's free New Mexico HIPAA practice test online is a full 110-question practice paper built to the real exam's domain weights, with every answer explained, with no sign-up and no credit card, and shows your score by topic at the end. The full 110-question bank, with every answer explained and cited to the regulation it comes from, is $14.99 for a 30-day pass that never renews.
How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (NM) practice test?
110 questions total, split into 3 full papers of 110 each with no repeats across papers.
What topics does the HIPAA General Workforce Compliance (NM) test cover?
26 domains, with the heaviest weight on Permitted Uses and Disclosures (6%), Patient Right of Access (5%), and Covered Entities & Business Associates (5%).
Where do CertQuestUSA's HIPAA General Workforce Compliance (NM) questions come from?
Primarily 45 CFR (55%) and 45 CFR 160.103 - Definitions (12%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.
Is there a free HIPAA General Workforce Compliance (NM) practice test?
Yes -- one full 110-question practice paper built to the exam's domain weights, free with no sign-up, with every answer explained and a domain-by-domain score at the end.
Need the certificate itself, not just the practice?
This page is a practice test. Certified Training USA, our sister site, sells the HIPAA for the General Healthcare Workforce course with a certificate of completion.
See the course
Composing your paper...