HCCA CHC 2026 CORE EXAMS TEST QUESTIONS AND
ANSWERS GUARANTEE A+
✔✔What are other HIPAA Entities - ✔✔Hybrid, Business Associate
Organized Health Care Arrangement
Affiliated Covered Entity
✔✔What is a Hybrid Entity? - ✔✔single legal entity, where
only some of its divisions or programs meet the
CE definitions and is typical of large entities
✔✔What is Organized Health Care Arrangement (OHCA)? - ✔✔clinically integrated
care setting where individuals receive health care from more than one health care
provider.
✔✔What is Affiliated Covered Entity? - ✔✔legally distinct entities that share common
control or common ownership and choose to designate themselves as one affiliated CE
for the purposes of complying with the HIPAA Privacy standard
✔✔What must a Affiliated Entity agree to? - ✔✔Be treated as a single CE. Must agree
to follow a standard policy and procedure
✔✔What is a Business Associate? - ✔✔- CE to either get "assurances" for privacy and
security standards from their business partners or to include a BA amendment to a
contract.
- where a separate legal entity uses or discloses Individually Identifiable Information on
behalf of the CE.
✔✔What are examples of a BA? - ✔✔claims processing
data analysis
billing
benefit management
quality assurance
quality improvement
practice management
legal
actuarial
accounting
accreditation
other administrative services
✔✔What has been the main complaint with holding a BA accountable under the 2000
Privacy Rule? - ✔✔- lack of penalties for non-compliance
- federal penalties could only be levied against the CE
, ✔✔Which new regulation corrected shot comings of the HIPAA 2000 regulation
concerning BAs? - ✔✔Health Information Technology
for Economic and Clinical Health (HITECH)
✔✔Who is know responsible for privacy and security of BAs? - ✔✔The Business
Associate, legal liability for violations, and possible penalties, flow directly to the entity
that violates.
✔✔What nine transaction are used to determine if a organization is a CE? - ✔✔• Health
claims or equivalent encounter
information
• Health claims attachments
• Enrollment and disenrollment in a health plan
• Eligibility for a health plan
• Health care payment and remittance advice
• Health plan premium payments
• First report of injury
• Health claim status
• Referral certification and authorization
✔✔What format must information be to determine if it is covered? - ✔✔any format -
electronic or papaer
✔✔What is Information? - ✔✔every piece of
information your entity has in its possession or
has access too.
✔✔What is Health Information? - ✔✔any information, whether oral or recorded in any
form or medium, that is created or received by a health care provider, health plan, public
health authority, employer, life insurer, school or university, or health care
clearinghouse, and relates to the past, present, or future physical or mental health or
condition of an individual. This includes the provision of health care to an individual, or
the past, present, or future payment for the provision of health care to an individual.
✔✔What is Individually Identifiable Health Information
(IIHI)? - ✔✔information that is a subset
of health information, including demographic
information collected from an individual
that is created or received by a health care
provider, health plan, employer, or health care
clearinghouse, and relates to the past, present,
or future physical or mental health condition of
an individual, the provision of health care to an
individual, or the past, present, or future payment
ANSWERS GUARANTEE A+
✔✔What are other HIPAA Entities - ✔✔Hybrid, Business Associate
Organized Health Care Arrangement
Affiliated Covered Entity
✔✔What is a Hybrid Entity? - ✔✔single legal entity, where
only some of its divisions or programs meet the
CE definitions and is typical of large entities
✔✔What is Organized Health Care Arrangement (OHCA)? - ✔✔clinically integrated
care setting where individuals receive health care from more than one health care
provider.
✔✔What is Affiliated Covered Entity? - ✔✔legally distinct entities that share common
control or common ownership and choose to designate themselves as one affiliated CE
for the purposes of complying with the HIPAA Privacy standard
✔✔What must a Affiliated Entity agree to? - ✔✔Be treated as a single CE. Must agree
to follow a standard policy and procedure
✔✔What is a Business Associate? - ✔✔- CE to either get "assurances" for privacy and
security standards from their business partners or to include a BA amendment to a
contract.
- where a separate legal entity uses or discloses Individually Identifiable Information on
behalf of the CE.
✔✔What are examples of a BA? - ✔✔claims processing
data analysis
billing
benefit management
quality assurance
quality improvement
practice management
legal
actuarial
accounting
accreditation
other administrative services
✔✔What has been the main complaint with holding a BA accountable under the 2000
Privacy Rule? - ✔✔- lack of penalties for non-compliance
- federal penalties could only be levied against the CE
, ✔✔Which new regulation corrected shot comings of the HIPAA 2000 regulation
concerning BAs? - ✔✔Health Information Technology
for Economic and Clinical Health (HITECH)
✔✔Who is know responsible for privacy and security of BAs? - ✔✔The Business
Associate, legal liability for violations, and possible penalties, flow directly to the entity
that violates.
✔✔What nine transaction are used to determine if a organization is a CE? - ✔✔• Health
claims or equivalent encounter
information
• Health claims attachments
• Enrollment and disenrollment in a health plan
• Eligibility for a health plan
• Health care payment and remittance advice
• Health plan premium payments
• First report of injury
• Health claim status
• Referral certification and authorization
✔✔What format must information be to determine if it is covered? - ✔✔any format -
electronic or papaer
✔✔What is Information? - ✔✔every piece of
information your entity has in its possession or
has access too.
✔✔What is Health Information? - ✔✔any information, whether oral or recorded in any
form or medium, that is created or received by a health care provider, health plan, public
health authority, employer, life insurer, school or university, or health care
clearinghouse, and relates to the past, present, or future physical or mental health or
condition of an individual. This includes the provision of health care to an individual, or
the past, present, or future payment for the provision of health care to an individual.
✔✔What is Individually Identifiable Health Information
(IIHI)? - ✔✔information that is a subset
of health information, including demographic
information collected from an individual
that is created or received by a health care
provider, health plan, employer, or health care
clearinghouse, and relates to the past, present,
or future physical or mental health condition of
an individual, the provision of health care to an
individual, or the past, present, or future payment
