HIPAA True/False Questions and
Answers | Latest Version | 2025/2026 |
Correct & Verified
HIPAA protects all types of patient information, including paper, electronic, and verbal.
✔✔True
Employees can access PHI of friends or family members without authorization.
✔✔False
Patients have the right to request restrictions on how their PHI is used.
✔✔True
PHI can be shared in public areas if no one is listening.
✔✔False
Covered entities include healthcare providers, health plans, and healthcare clearinghouses.
✔✔True
1
, De-identified information is no longer considered PHI.
✔✔True
PHI can be used for marketing purposes without patient consent.
✔✔False
HIPAA training must be conducted at hiring and at least annually thereafter.
✔✔True
Employees should immediately report suspected HIPAA violations.
✔✔True
Passwords and encryption are examples of technical safeguards.
✔✔True
Patients cannot revoke authorization to share their PHI once given.
✔✔False
2
Answers | Latest Version | 2025/2026 |
Correct & Verified
HIPAA protects all types of patient information, including paper, electronic, and verbal.
✔✔True
Employees can access PHI of friends or family members without authorization.
✔✔False
Patients have the right to request restrictions on how their PHI is used.
✔✔True
PHI can be shared in public areas if no one is listening.
✔✔False
Covered entities include healthcare providers, health plans, and healthcare clearinghouses.
✔✔True
1
, De-identified information is no longer considered PHI.
✔✔True
PHI can be used for marketing purposes without patient consent.
✔✔False
HIPAA training must be conducted at hiring and at least annually thereafter.
✔✔True
Employees should immediately report suspected HIPAA violations.
✔✔True
Passwords and encryption are examples of technical safeguards.
✔✔True
Patients cannot revoke authorization to share their PHI once given.
✔✔False
2
