HIPAA Lessons 5 & 6 – Healthcare Compliance – 2026 – Study and Training Guide
The general rule is that if a state law is less protective of the individual, then it takes precedence
over HIPAA. Conversely, if a state law is more protective of the individual than HIPAA, then
HIPAA takes precedence. - correct answer ✔✔ False
To find out more about your state's medical privacy laws and how they interact with HIPAA, you
can contact - correct answer ✔✔ Your local Department of Health and Human Services
Select all of the common areas that state laws may interact with HIPAA - correct answer ✔✔
Breach notification requirements
Substance abuse
Patient consent
Sensitive Diagnosis
Consumer protections/opt-ins
Mental health
Under Texas HB 300, any organization conducting business in Texas that owns or licenses
computerized data that includes SPI (Sensitive Personal Information) not just PHI must notify
Texas residents if their information was breached - correct answer ✔✔ True
Each of the following are ways that Texas HB 300 expands individual privacy protections beyond
HIPAA EXCEPT: - correct answer ✔✔ Expands the definition of HIPAA Minimum Necessary
Disclosure
Each of the following are ways that California Confidentiality of Medical Information Act (CMIA)
expands individual privacy protections beyond HIPAA EXCEPT: - correct answer ✔✔ Expanding
scope of privacy to non-medical related information
The general rule is that if a state law is less protective of the individual, then it takes precedence
over HIPAA. Conversely, if a state law is more protective of the individual than HIPAA, then
HIPAA takes precedence. - correct answer ✔✔ False
To find out more about your state's medical privacy laws and how they interact with HIPAA, you
can contact - correct answer ✔✔ Your local Department of Health and Human Services
Select all of the common areas that state laws may interact with HIPAA - correct answer ✔✔
Breach notification requirements
Substance abuse
Patient consent
Sensitive Diagnosis
Consumer protections/opt-ins
Mental health
Under Texas HB 300, any organization conducting business in Texas that owns or licenses
computerized data that includes SPI (Sensitive Personal Information) not just PHI must notify
Texas residents if their information was breached - correct answer ✔✔ True
Each of the following are ways that Texas HB 300 expands individual privacy protections beyond
HIPAA EXCEPT: - correct answer ✔✔ Expands the definition of HIPAA Minimum Necessary
Disclosure
Each of the following are ways that California Confidentiality of Medical Information Act (CMIA)
expands individual privacy protections beyond HIPAA EXCEPT: - correct answer ✔✔ Expanding
scope of privacy to non-medical related information
