CertQuestUSA
Transportation70+AK/AL/AR +moreConstruction & Safety39+CAEnvironmental99+AL/AR/AZ +moreHealthcare & Clinical196+AL/AR/AZ +moreProfessional Licensing307+AL/AR/AZ +moreEducation & Teacher Certification24+CAAviation & FAA Certification9Finance & Securities Licensing23IT & Cloud Certification6Project Management1Military Entrance Testing1View all sectors ›

Free New York HIPAA Practice Test Online

Official exam: HIPAA General Workforce (New York)

Take a free New York HIPAA practice test online: a full 40-question paper with every answer explained, no sign-up, scored by topic. The full 144-question bank and the timed simulator are $14.99 for 30 days.

First published: September 2, 2026Bank updated: September 2, 2026Published by CertQuestUSA · review process
TL;DR

HIPAA General Workforce (New York): a 144-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 40 questions each with no repeats, every question written to the regulation it comes from.

Where these questions come from

Every question in this bank cites a source -- primarily 45 CFR (76%) and N.Y. Public Health Law (9%) of this exam's citations.

Take a full practice test free. 40 real questions built to the exam's domain weights, every answer explained, no sign-up required, with a domain-by-domain score at the end.
Start diagnostic
Want the whole bank for HIPAA General Workforce (New York)? One payment of $14.99 gives you 30 days of full access to this exam. It does not renew. No account needed to buy, and there is a 7-day money-back guarantee.
Not ready yet? Take the free practice test first.
Ways to pay for the full bank
30-day pass
$14.99
about $15 a month
This exam only. Pays once, does not renew.
Monthly
$19.99
$19.99 a month
Every exam. Cancel any time.
Yearly
$143.93
about $11.99 a month
Every exam. Billed once a year.
Lifetime
$39.99
pay once
This exam only, no time limit.

See all plans and bundles

3
full papers, no repeats
40
questions per paper
144
questions in the bank
What this exam covers
5 real sample questions
A hospital in New York already has a signed HIPAA general authorization from a patient covering release of 'all medical records' to a specialist. Under NY Public Health Law Article 27-F, is that general authorization enough to release the patient's HIV-related test results?
A. Yes, a general HIPAA authorization covering 'all medical records' is sufficient on its own
B. No, Article 27-F generally requires a release that specifically addresses confidential HIV-related information, separate from a general medical-records authorization
C. No, HIV-related information in New York can never be disclosed under any circumstances
D. Yes, but only if the specialist is also a New York-licensed physician
Show answer and reasoning

Correct answer: B. No, Article 27-F generally requires a release that specifically addresses confidential HIV-related information, separate from a general medical-records authorization

  • A: A blanket 'all medical records' authorization does not satisfy Article 27-F's requirement that HIV-related information disclosure generally be authorized by a release addressing that information specifically.
  • C: Article 27-F permits disclosure of confidential HIV-related information; it is not an absolute bar, it is a heightened consent and confidentiality framework under PHL §2782.
  • D: The specific-release requirement under Article 27-F does not turn on the receiving physician's licensure state.
Source: N.Y. Public Health Law § 2782
Since the 2014 amendment to PHL §2781, is written patient consent still required before a physician orders an HIV-related test in a general outpatient clinic setting (not a correctional facility)?
A. Written consent is required for every HIV test in New York
B. Consent is not required at all because HIV testing became mandatory statewide
C. No, oral notice and consent are sufficient outside of correctional facilities, as long as the required information is provided to the patient
D. Written consent is required only for patients under 18
Show answer and reasoning

Correct answer: C. No, oral notice and consent are sufficient outside of correctional facilities, as long as the required information is provided to the patient

  • A: The 2014 amendment to §2781 eliminated the general written-consent requirement (except in correctional facilities); oral notice/consent suffices in ordinary healthcare settings.
  • B: HIV testing in New York remains voluntary; the amendment changed the form of consent required, not whether consent is needed.
  • D: The written-versus-oral consent distinction under §2781 is based on setting (correctional facility or not), not the patient's age.
Source: N.Y. Public Health Law § 2781
A clinic employee in New York improperly discloses a patient's confidential HIV-related information in violation of PHL §2782. What civil penalty does PHL §2783 authorize per occurrence?
A. There is no set civil penalty amount; only injunctive relief is available
B. Up to $500 per occurrence
C. A civil penalty of up to $5,000 for each occurrence
D. A mandatory $50,000 penalty regardless of the number of disclosures
Show answer and reasoning

Correct answer: C. A civil penalty of up to $5,000 for each occurrence

  • A: §2783 sets a specific per-occurrence civil penalty amount; it is not limited to injunctive relief.
  • B: The statutory cap is higher than $500 per occurrence.
  • D: $50,000 is not the figure set by §2783, and the statute caps the penalty per occurrence rather than imposing a flat mandatory amount regardless of occurrences.
Source: N.Y. Public Health Law § 2783
Under PHL §2783, what is the criminal classification for someone who WILLFULLY discloses confidential HIV-related information in violation of §2782?
A. A felony
B. A civil infraction only, with no criminal exposure
C. A violation, but only if the disclosure was to the media
D. A misdemeanor
Show answer and reasoning

Correct answer: D. A misdemeanor

  • A: §2783 classifies a willful violation as a misdemeanor, not a felony.
  • B: §2783 does carry criminal exposure for willful violations, in addition to the civil penalty.
  • C: The misdemeanor classification under §2783 is not limited to disclosures made to media outlets.
Source: N.Y. Public Health Law § 2783
Under PHL §2782, which recipient may generally receive confidential HIV-related information as part of ordinary patient care without a fresh, separate release each time?
A. Any employer of the protected individual, upon request
B. Any insurance company marketing unrelated products to the patient
C. Any member of the patient's extended family, regardless of relationship to care
D. An agent or employee of the health facility or health care provider involved in providing care to the protected individual, under the conditions specified in the statute
Show answer and reasoning

Correct answer: D. An agent or employee of the health facility or health care provider involved in providing care to the protected individual, under the conditions specified in the statute

  • A: An employer is not among the categories permitted to receive confidential HIV-related information without a specific authorized release under §2782.
  • B: An insurer engaged in unrelated marketing is not a permitted recipient under §2782's care-related disclosure provisions.
  • C: General family members are not automatically authorized recipients under §2782 absent the patient's consent or a role in providing care.
Source: N.Y. Public Health Law § 2782
Same exam, other states
ARAZCAFLGAILINKSMAMIMSNCNJOHPATNTXVAWA

Frequently asked questions

Where can I take a free New York HIPAA practice test online?
Right here. CertQuestUSA's free New York HIPAA practice test online is a full 40-question practice paper built to the real exam's domain weights, with every answer explained, with no sign-up and no credit card, and shows your score by topic at the end. The full 144-question bank, with every answer explained and cited to the regulation it comes from, is $14.99 for a 30-day pass that never renews.
How many questions are on the CertQuestUSA HIPAA General Workforce (New York) practice test?
144 questions total, split into 3 full papers of 40 each with no repeats across papers.
What topics does the HIPAA General Workforce (New York) test cover?
10 domains, with the heaviest weight on Privacy Rule Fundamentals (28%), Security Rule Safeguards (22%), and Breach Notification Basics (15%).
Where do CertQuestUSA's HIPAA General Workforce (New York) questions come from?
Primarily 45 CFR (76%) and N.Y. Public Health Law (9%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.
Is there a free HIPAA General Workforce (New York) practice test?
Yes -- one full 40-question practice paper built to the exam's domain weights, free with no sign-up, with every answer explained and a domain-by-domain score at the end.
Need the certificate itself, not just the practice?
This page is a practice test. Certified Training USA, our sister site, sells the HIPAA for the General Healthcare Workforce course with a certificate of completion.
See the course
Composing your paper...