HCCA CHC/CHPC COMPLIANCE FINAL
EXAM 2026/2027 QUESTIONS AND
ANSWERS LATEST UPDATE THIS YEAR
- JUST RELEASED
1. Which element of an effective compliance program is primarily addressed by the ‘Upjohn
Warning’?
A. Internal Investigations
B. Auditing and Monitoring
C. Disciplinary Standards
D. Lines of Communication
Answer: A
Conceptual Explanation: The Upjohn Warning is a notice given by company lawyers to
employees during an internal investigation, clarifying that the lawyer represents the
company and not the individual employee.
2. Under the False Claims Act, what does the term ‘Scienter’ refer to?
A. Knowledge of falsity, including deliberate ignorance or reckless disregard
B. The specific intent to defraud the government
C. The financial harm suffered by the government
,D. The identity of the whistleblower
Answer: A
Conceptual Explanation: The False Claims Act does not require proof of specific intent to
defraud; it defines ‘knowing’ to include actual knowledge, deliberate ignorance, or reckless
disregard for the truth.
3. Which of the following is a ‘strict liability’ statute, meaning intent is not required to prove
a violation?
A. Anti-Kickback Statute
B. False Claims Act
C. Stark Law
D. Civil Monetary Penalties Law
Answer: C
Conceptual Explanation: The Stark Law (Physician Self-Referral Law) is a strict liability
statute, meaning that if a financial relationship exists and no exception applies, the law is
violated regardless of intent.
4. According to the HIPAA Breach Notification Rule, what is the maximum timeframe for
notifying affected individuals of a breach of unsecured PHI?
A. 30 days from discovery
B. 60 days from the occurrence
, C. 60 days from discovery
D. 90 days from discovery
Answer: C
Conceptual Explanation: HITECH requires covered entities to notify affected individuals
without unreasonable delay and in no case later than 60 calendar days following the
discovery of a breach.
5. Which Anti-Kickback Statute safe harbor requires that the aggregate compensation be set
in advance and not exceed fair market value?
A. All of the above
B. Personal Services and Management Contracts
C. Equipment Rental
D. Space Rental
Answer: A
Conceptual Explanation: The Space Rental, Equipment Rental, and Personal Services safe
harbors all require written agreements, terms of at least one year, and compensation set in
advance at fair market value.
6. Under the HIPAA Security Rule, which is an example of an ‘Addressable’ implementation
specification?
A. Encryption and Decryption
EXAM 2026/2027 QUESTIONS AND
ANSWERS LATEST UPDATE THIS YEAR
- JUST RELEASED
1. Which element of an effective compliance program is primarily addressed by the ‘Upjohn
Warning’?
A. Internal Investigations
B. Auditing and Monitoring
C. Disciplinary Standards
D. Lines of Communication
Answer: A
Conceptual Explanation: The Upjohn Warning is a notice given by company lawyers to
employees during an internal investigation, clarifying that the lawyer represents the
company and not the individual employee.
2. Under the False Claims Act, what does the term ‘Scienter’ refer to?
A. Knowledge of falsity, including deliberate ignorance or reckless disregard
B. The specific intent to defraud the government
C. The financial harm suffered by the government
,D. The identity of the whistleblower
Answer: A
Conceptual Explanation: The False Claims Act does not require proof of specific intent to
defraud; it defines ‘knowing’ to include actual knowledge, deliberate ignorance, or reckless
disregard for the truth.
3. Which of the following is a ‘strict liability’ statute, meaning intent is not required to prove
a violation?
A. Anti-Kickback Statute
B. False Claims Act
C. Stark Law
D. Civil Monetary Penalties Law
Answer: C
Conceptual Explanation: The Stark Law (Physician Self-Referral Law) is a strict liability
statute, meaning that if a financial relationship exists and no exception applies, the law is
violated regardless of intent.
4. According to the HIPAA Breach Notification Rule, what is the maximum timeframe for
notifying affected individuals of a breach of unsecured PHI?
A. 30 days from discovery
B. 60 days from the occurrence
, C. 60 days from discovery
D. 90 days from discovery
Answer: C
Conceptual Explanation: HITECH requires covered entities to notify affected individuals
without unreasonable delay and in no case later than 60 calendar days following the
discovery of a breach.
5. Which Anti-Kickback Statute safe harbor requires that the aggregate compensation be set
in advance and not exceed fair market value?
A. All of the above
B. Personal Services and Management Contracts
C. Equipment Rental
D. Space Rental
Answer: A
Conceptual Explanation: The Space Rental, Equipment Rental, and Personal Services safe
harbors all require written agreements, terms of at least one year, and compensation set in
advance at fair market value.
6. Under the HIPAA Security Rule, which is an example of an ‘Addressable’ implementation
specification?
A. Encryption and Decryption
