HIPAA General Workforce Compliance (SC)

First published: September 2, 2026Last verified: September 2, 2026Reviewed by the CertQuestUSA team

TL;DR

HIPAA General Workforce Compliance (SC): a 32-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 32 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.

Start diagnostic

3

full papers, no repeats

32

questions per paper

32

questions in the bank

What this exam covers

Covered Entity Definition3%
Business Associate Definition3%
Business Associate Agreement3%
Minimum Necessary Standard3%
Minimum Necessary Exceptions3%
Phi Definition3%
Eighteen Identifiers3%
De Identification Safe Harbor3%
De Identification Expert Determination3%
Permitted Use Treatment3%
Permitted Use Payment3%
Permitted Use Operations3%
Disclosures Without Authorization3%
Authorization Requirements3%
Authorization Revocation3%
Right Of Access3%
Right Of Access Timeline3%
Right To Amend3%
Accounting Of Disclosures3%
Notice Of Privacy Practices3%
Administrative Safeguards3%
Physical Safeguards3%
Technical Safeguards3%
Security Rule Risk Analysis3%
Breach Definition3%
Breach Notification Individuals3%
Breach Notification Hhs3%
Breach Notification Media3%
Workforce Sanctions3%
Incidental Disclosures3%
Psychotherapy Notes3%
Personal Representatives3%

5 real sample questions

Under HIPAA, which of the following organizations meets the definition of a "covered entity"?

A. A health plan that processes and pays claims for its members

B. A law firm that occasionally represents hospitals in litigation

C. A janitorial company that cleans a medical office after hours

D. A courier service that transports lab specimens for a clinic

Source: 45 CFR 160.103

A third-party billing company processes claims for a physician's office and can view patient charts to verify diagnosis codes. Under HIPAA, this company is:

A. A covered entity, because it directly handles PHI

B. A business associate, because it creates, receives, maintains, or transmits PHI to perform a function on the practice's behalf

C. Exempt from HIPAA because it never provides treatment

D. A hybrid entity, since it performs both covered and non-covered functions

Source: 45 CFR 160.103

Before a covered entity discloses PHI to an outside transcription vendor, what must be in place?

A. Nothing, as long as the vendor is a reputable company

B. A signed business associate agreement meeting the requirements of 45 CFR 164.504(e)

C. Written authorization from every patient whose records will be transcribed

D. A verbal assurance of confidentiality from the vendor's owner

Source: 45 CFR 164.504(e)

A billing clerk needs to verify a patient's insurance eligibility before submitting a claim. Under the minimum necessary standard, the clerk should access:

A. The patient's complete medical record, including psychotherapy notes

B. Only the insurance and demographic information needed to confirm eligibility

C. Every prior visit note regardless of relevance to billing

D. Records for all household members on the same insurance policy

Source: 45 CFR 164.502(b)

Which disclosure is EXEMPT from the minimum necessary standard?

A. A disclosure to a consulting specialist for treatment purposes

B. A fundraising mailing sent to a broad patient list

C. A routine internal compliance audit

D. A researcher's request for a full data set with no data use agreement

Source: 45 CFR 164.502(b)(2)

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (SC) practice test?

32 questions total, split into 3 full papers of 32 each with no repeats across papers.

What topics does the HIPAA General Workforce Compliance (SC) test cover?

32 domains, with the heaviest weight on Covered Entity Definition (3%), Business Associate Definition (3%), and Business Associate Agreement (3%).

Where do CertQuestUSA's HIPAA General Workforce Compliance (SC) questions come from?

Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.

Is there a free diagnostic for HIPAA General Workforce Compliance (SC)?

Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.