CRIS TEST EXAM QUESTIONS AND
ANSWERS 2026/2027 UPDATE
Who owns the medical record?
A. The patient
B. The physician
C. The health care facility
D. The federal government under HIPAA - ANSWER C. The health care facility
The tool most often used to gather a complete medical record is the:
A. Conditions of Admission
B. Notice of Privacy Practices
C. Master Patient Index
D. Information Management Plan - ANSWER C. Master Patient Index
The Purpose(s) of the medical record is/are:
A. To assist in further research and education
B. To assist in protecting the legal rights of the patient and the healthcare facility
C. To provide analysis, study and evaluate care given to the patient
D. All of the above - ANSWER D. All of the above
,Which of the following may be considered an improper disclosure of protected
health information?
A. Releasing records to a requester for legal purposes without a signed patient
authorization
B. Accidentally releasing the wrong patient's records to a requester
C. Releasing dates of service to a requester if the treatment dates are not authorized
D. All of the above - ANSWER D. All of the above
Which of the following is not required on a HIPAA compliant authorization?
A. Name or class of the healthcare provider who is disclosing records
B. Information to be disclosed
C. Fees associated with the disclosure
D. Expiration date of even - ANSWER C. Fees associated with the disclosure
A patient presents to the HIM Department requesting information about a recent
biopsy. The patient says he wants to know details about the procedure and
specifics regarding the specimen removed. The patient should be advised to
request a copy of the:
A. Entire record
B. Operative and Pathology Report
C. History and Physical
D. None of the above - ANSWER B. Operative and Pathology Report
,Some attorneys send a courtesy deposition letter prior to issuing a subpeona. Can
you disclose information without patient authorization if you have the deposition
letter prior to the receiving the subpoena?
A. Yes
B. No - ANSWER B. No
A provider may put all the elements of a valid authorization on one form to cover
HIPAA, chemical dependency, HIV and genetic testing information.
A. True
B. False - ANSWER A. True
If a patient completes an authorization form, can they simply put "at the request of
the patient" as a disclosure purpose?
A. Yes
B. No - ANSWER A. Yes
With a court order (signed by a judge), is an authorization signed by the patient or
personal representative generally required?
A. Yes
B. No - ANSWER B. No
, Which of the following does not have access to a patient's health information
without authorization?
A. Nursing Unit- patient was readmitted to facility
B. Medical Staff Physician not treating the patient or consulting - she reviews
because patient is a former patient
C. Quality Management Employee - reviews for performance improvement data
D. Risk Management - reviews for a threatened lawsuit - ANSWER B. Medical
Staff Physician not treating the patient or consulting - she reviews because
patient is a former patient
The PRO or QIO (Peer Review Organization or Quality Improvement
Organization) who is contracted with CMS (Centers for Medicare & Medicaid
Services) requests copies of medical records. Are they allowed to receive copies
without an authorization for a patient with schizophrenia (mental health
condition?)
A. Yes
B. No - ANSWER A. Yes
What is the difference between a request and a patient's authorization?
A. There is no difference
B. The request is verbal and the authorization is in writing
C. The request is in writing and asks that records be disclosed; the authorization is
the patient's written permission to do so - ANSWER C. The request is in
writing and asks that records be disclosed; the authorization is the patient's
written permission to do so
ANSWERS 2026/2027 UPDATE
Who owns the medical record?
A. The patient
B. The physician
C. The health care facility
D. The federal government under HIPAA - ANSWER C. The health care facility
The tool most often used to gather a complete medical record is the:
A. Conditions of Admission
B. Notice of Privacy Practices
C. Master Patient Index
D. Information Management Plan - ANSWER C. Master Patient Index
The Purpose(s) of the medical record is/are:
A. To assist in further research and education
B. To assist in protecting the legal rights of the patient and the healthcare facility
C. To provide analysis, study and evaluate care given to the patient
D. All of the above - ANSWER D. All of the above
,Which of the following may be considered an improper disclosure of protected
health information?
A. Releasing records to a requester for legal purposes without a signed patient
authorization
B. Accidentally releasing the wrong patient's records to a requester
C. Releasing dates of service to a requester if the treatment dates are not authorized
D. All of the above - ANSWER D. All of the above
Which of the following is not required on a HIPAA compliant authorization?
A. Name or class of the healthcare provider who is disclosing records
B. Information to be disclosed
C. Fees associated with the disclosure
D. Expiration date of even - ANSWER C. Fees associated with the disclosure
A patient presents to the HIM Department requesting information about a recent
biopsy. The patient says he wants to know details about the procedure and
specifics regarding the specimen removed. The patient should be advised to
request a copy of the:
A. Entire record
B. Operative and Pathology Report
C. History and Physical
D. None of the above - ANSWER B. Operative and Pathology Report
,Some attorneys send a courtesy deposition letter prior to issuing a subpeona. Can
you disclose information without patient authorization if you have the deposition
letter prior to the receiving the subpoena?
A. Yes
B. No - ANSWER B. No
A provider may put all the elements of a valid authorization on one form to cover
HIPAA, chemical dependency, HIV and genetic testing information.
A. True
B. False - ANSWER A. True
If a patient completes an authorization form, can they simply put "at the request of
the patient" as a disclosure purpose?
A. Yes
B. No - ANSWER A. Yes
With a court order (signed by a judge), is an authorization signed by the patient or
personal representative generally required?
A. Yes
B. No - ANSWER B. No
, Which of the following does not have access to a patient's health information
without authorization?
A. Nursing Unit- patient was readmitted to facility
B. Medical Staff Physician not treating the patient or consulting - she reviews
because patient is a former patient
C. Quality Management Employee - reviews for performance improvement data
D. Risk Management - reviews for a threatened lawsuit - ANSWER B. Medical
Staff Physician not treating the patient or consulting - she reviews because
patient is a former patient
The PRO or QIO (Peer Review Organization or Quality Improvement
Organization) who is contracted with CMS (Centers for Medicare & Medicaid
Services) requests copies of medical records. Are they allowed to receive copies
without an authorization for a patient with schizophrenia (mental health
condition?)
A. Yes
B. No - ANSWER A. Yes
What is the difference between a request and a patient's authorization?
A. There is no difference
B. The request is verbal and the authorization is in writing
C. The request is in writing and asks that records be disclosed; the authorization is
the patient's written permission to do so - ANSWER C. The request is in
writing and asks that records be disclosed; the authorization is the patient's
written permission to do so
