CertQuestUSA
Transportation70+AK/AL/AR +moreConstruction & Safety39+CAEnvironmental98+AL/AR/AZ +moreHealthcare & Clinical183+AL/AR/AZ +moreProfessional Licensing307+AL/AR/AZ +moreEducation & Teacher Certification17Aviation & FAA Certification9Finance & Securities Licensing19View all sectors ›

HIPAA General Workforce (New York)

First published: September 2, 2026Last verified: September 2, 2026Reviewed by the CertQuestUSA team
TL;DR

HIPAA General Workforce (New York): a 144-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 40 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (76%) and N.Y. Public Health Law (9%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.
Start diagnostic
3
full papers, no repeats
40
questions per paper
144
questions in the bank
What this exam covers
5 real sample questions
A hospital in New York already has a signed HIPAA general authorization from a patient covering release of 'all medical records' to a specialist. Under NY Public Health Law Article 27-F, is that general authorization enough to release the patient's HIV-related test results?
A. Yes, a general HIPAA authorization covering 'all medical records' is sufficient on its own
B. No, Article 27-F generally requires a release that specifically addresses confidential HIV-related information, separate from a general medical-records authorization
C. No, HIV-related information in New York can never be disclosed under any circumstances
D. Yes, but only if the specialist is also a New York-licensed physician
Source: N.Y. Public Health Law § 2782
Since the 2014 amendment to PHL §2781, is written patient consent still required before a physician orders an HIV-related test in a general outpatient clinic setting (not a correctional facility)?
A. Written consent is required for every HIV test in New York
B. Consent is not required at all because HIV testing became mandatory statewide
C. No, oral notice and consent are sufficient outside of correctional facilities, as long as the required information is provided to the patient
D. Written consent is required only for patients under 18
Source: N.Y. Public Health Law § 2781
A clinic employee in New York improperly discloses a patient's confidential HIV-related information in violation of PHL §2782. What civil penalty does PHL §2783 authorize per occurrence?
A. There is no set civil penalty amount; only injunctive relief is available
B. Up to $500 per occurrence
C. A civil penalty of up to $5,000 for each occurrence
D. A mandatory $50,000 penalty regardless of the number of disclosures
Source: N.Y. Public Health Law § 2783
Under PHL §2783, what is the criminal classification for someone who WILLFULLY discloses confidential HIV-related information in violation of §2782?
A. A felony
B. A civil infraction only, with no criminal exposure
C. A violation, but only if the disclosure was to the media
D. A misdemeanor
Source: N.Y. Public Health Law § 2783
Under PHL §2782, which recipient may generally receive confidential HIV-related information as part of ordinary patient care without a fresh, separate release each time?
A. Any employer of the protected individual, upon request
B. Any insurance company marketing unrelated products to the patient
C. Any member of the patient's extended family, regardless of relationship to care
D. An agent or employee of the health facility or health care provider involved in providing care to the protected individual, under the conditions specified in the statute
Source: N.Y. Public Health Law § 2782
Same exam, other states
ARAZCAFLGAILINKSMAMIMSNCNJOHPATNTXVAWA

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce (New York) practice test?
144 questions total, split into 3 full papers of 40 each with no repeats across papers.
What topics does the HIPAA General Workforce (New York) test cover?
10 domains, with the heaviest weight on Privacy Rule Fundamentals (28%), Security Rule Safeguards (22%), and Breach Notification Basics (15%).
Where do CertQuestUSA's HIPAA General Workforce (New York) questions come from?
Primarily 45 CFR (76%) and N.Y. Public Health Law (9%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.
Is there a free diagnostic for HIPAA General Workforce (New York)?
Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.
Composing your paper...