HIPAA General Workforce Compliance (WV)

First published: September 5, 2026Last verified: September 5, 2026Reviewed by the CertQuestUSA team

TL;DR

HIPAA General Workforce Compliance (WV): a 105-question practice bank for the real HIPAA / Healthcare Compliance standard, 3 full papers of 105 questions each with no repeats, every question citing the real regulation it comes from.

Where these questions come from

Every question in this bank cites a real source -- primarily 45 CFR (100%) of this exam's citations.

Not sure where you stand? Take the free diagnostic — 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.

Start diagnostic

3

full papers, no repeats

105

questions per paper

105

questions in the bank

What this exam covers

Accounting of Disclosures5%
Administrative Safeguards5%
Authorization Requirements5%
Breach Definition5%
Breach Notification - Large Breaches5%
Breach Notification Timing5%
Breach Risk Assessment5%
Business Associate Agreements5%
Covered Entities & Business Associates5%
De-identification5%
Marketing and Sale of PHI5%
Minimum Necessary Standard5%
Notice of Privacy Practices5%
Patient Right of Access5%
Patient Right to Amend5%
Permitted Uses and Disclosures5%
Definition of Protected Health Information5%
Physical Safeguards5%
Right to Request Restrictions5%
Technical Safeguards5%
Workforce Training & Sanctions5%

5 real sample questions

HIPAA permits a covered entity to use or disclose PHI without patient authorization for which purpose?

A. Selling the data to a marketing firm

B. Treatment, payment, and health care operations (TPO)

C. Posting patient photos on social media for promotion

D. Sharing records with a patient's employer for hiring decisions

Source: 45 CFR 164.506

Under the Safe Harbor method of de-identification, how many categories of identifiers must be removed?

A. 5

B. 18

C. 50

D. There is no fixed number

Source: 45 CFR 164.514

A covered entity generally may disclose PHI to a business associate only if:

A. It has obtained a signed business associate agreement (BAA) that satisfies the required elements

B. It verbally reminds the vendor to be careful

C. The vendor is a large, well-known company

D. No agreement is needed if the vendor promises confidentiality informally

Source: 45 CFR 164.502(e)

A face-to-face communication made by a provider to a patient about a product or service, even if it promotes that product, is:

A. Automatically defined as marketing requiring authorization

B. Excepted from the marketing authorization requirement

C. Prohibited entirely under HIPAA

D. Only allowed if payment is received from a third party

Source: 45 CFR 164.508(a)(3)

Transmission security safeguards address:

A. Protecting PHI transmitted over electronic communications networks, including guarding against unauthorized access

B. Only the physical shipping of paper mail

C. Employee commuting arrangements

D. Marketing email design

Source: 45 CFR 164.312(e)

Frequently asked questions

How many questions are on the CertQuestUSA HIPAA General Workforce Compliance (WV) practice test?

105 questions total, split into 3 full papers of 105 each with no repeats across papers.

What topics does the HIPAA General Workforce Compliance (WV) test cover?

21 domains, with the heaviest weight on Workforce Training & Sanctions (5%), Accounting of Disclosures (5%), and Administrative Safeguards (5%).

Where do CertQuestUSA's HIPAA General Workforce Compliance (WV) questions come from?

Primarily 45 CFR (100%) of this bank's citations -- computed directly from this exam's own question sources, not a generic description.

Is there a free diagnostic for HIPAA General Workforce Compliance (WV)?

Yes -- 10 real questions across the exam's domains, no sign-up required, with a domain-by-domain breakdown at the end.