BHA4006
Health Care Regulation &
Compliance
MIDTERM READINESS EXAM
GUIDE
Q&S
©2024/2025
,1. Which regulation primarily governs the use and
disclosure of Protected Health Information (PHI) in the
United States?
- A) HIPAA
- B) HITECH
- C) ACA
- D) OSHA
Correct Answer: A) HIPAA
Rationale: The Health Insurance Portability and
Accountability Act (HIPAA) establishes national standards
for protecting sensitive patient health information.
2. The Stark Law primarily addresses issues related to:
- A) Patient privacy
- B) Fraud and abuse
- C) Physician self-referral
- D) Health insurance coverage
Correct Answer: C) Physician self-referral
Rationale: The Stark Law prohibits physician self-
referrals, particularly when the referral is made to entities
with which the physician has a financial relationship.
3. Which of the following is a key provision of the
Affordable Care Act (ACA)?
- A) Mandatory reporting of adverse drug events
- B) Expansion of Medicaid eligibility
- C) Establishment of Accountable Care Organizations
(ACOs)
- D) All of the above
Correct Answer: D) All of the above
Rationale: The ACA encompasses a wide range of
©2024/2025
, provisions aimed at improving health care delivery and
expanding coverage.
### Fill-in-the-Blank Questions
4. The purpose of the __________ is to provide a secure
national electronic network for exchanging health
information.
Correct Answer: Health Information Exchange (HIE)
Rationale: HIEs allow for the seamless exchange of
health information across different health care
organizations.
5. In the event of a data breach affecting PHI, health care
organizations are required to notify affected individuals
within __________ days.
Correct Answer: 60 days
Rationale: HIPAA requires covered entities to notify
individuals within 60 days following a breach of their
unsecured PHI.
6. The __________ is responsible for enforcing the
Emergency Medical Treatment and Labor Act (EMTALA).
Correct Answer: Centers for Medicare & Medicaid
Services (CMS)
Rationale: CMS oversees compliance with EMTALA,
which requires hospitals to provide emergency treatment
regardless of a patient's ability to pay.
### True/False Questions
7. True or False: The Health Care Quality Improvement
Act (HCQIA) provides immunity to health care providers
©2024/2025
Health Care Regulation &
Compliance
MIDTERM READINESS EXAM
GUIDE
Q&S
©2024/2025
,1. Which regulation primarily governs the use and
disclosure of Protected Health Information (PHI) in the
United States?
- A) HIPAA
- B) HITECH
- C) ACA
- D) OSHA
Correct Answer: A) HIPAA
Rationale: The Health Insurance Portability and
Accountability Act (HIPAA) establishes national standards
for protecting sensitive patient health information.
2. The Stark Law primarily addresses issues related to:
- A) Patient privacy
- B) Fraud and abuse
- C) Physician self-referral
- D) Health insurance coverage
Correct Answer: C) Physician self-referral
Rationale: The Stark Law prohibits physician self-
referrals, particularly when the referral is made to entities
with which the physician has a financial relationship.
3. Which of the following is a key provision of the
Affordable Care Act (ACA)?
- A) Mandatory reporting of adverse drug events
- B) Expansion of Medicaid eligibility
- C) Establishment of Accountable Care Organizations
(ACOs)
- D) All of the above
Correct Answer: D) All of the above
Rationale: The ACA encompasses a wide range of
©2024/2025
, provisions aimed at improving health care delivery and
expanding coverage.
### Fill-in-the-Blank Questions
4. The purpose of the __________ is to provide a secure
national electronic network for exchanging health
information.
Correct Answer: Health Information Exchange (HIE)
Rationale: HIEs allow for the seamless exchange of
health information across different health care
organizations.
5. In the event of a data breach affecting PHI, health care
organizations are required to notify affected individuals
within __________ days.
Correct Answer: 60 days
Rationale: HIPAA requires covered entities to notify
individuals within 60 days following a breach of their
unsecured PHI.
6. The __________ is responsible for enforcing the
Emergency Medical Treatment and Labor Act (EMTALA).
Correct Answer: Centers for Medicare & Medicaid
Services (CMS)
Rationale: CMS oversees compliance with EMTALA,
which requires hospitals to provide emergency treatment
regardless of a patient's ability to pay.
### True/False Questions
7. True or False: The Health Care Quality Improvement
Act (HCQIA) provides immunity to health care providers
©2024/2025
