HIPAA and Privacy Act Training
Challenge Exam Questions and
Answers | Latest Version | 2025/2026 |
Correct & Verified
Which best describes a HIPAA “covered entity”?
A. Any company in the U.S.
✔✔B. Healthcare providers, health plans, and healthcare clearinghouses
C. Only federal agencies
D. Only state governments
What does “right to access” under HIPAA mean?
A. Patients can demand free Wi-Fi
✔✔B. Patients can view and obtain copies of their medical records
C. Patients can control employee schedules
D. Patients can own the hospital
What should staff do when accessing PHI electronically?
A. Use shared login credentials
1
,✔✔B. Log out or lock screens when not in use
C. Save passwords on sticky notes
D. Use unsecured devices
Which of these is an appropriate safeguard for laptops containing PHI?
A. Leaving them unattended in public
✔✔B. Encrypting the hard drive
C. Sharing passwords with coworkers
D. Disabling antivirus software
What does HIPAA stand for?
A. Health Insurance Portability and Access Act
✔✔B. Health Insurance Portability and Accountability Act
C. Health Information Privacy and Accountability Act
D. Health Information Portability and Access Agreement
Which type of information is considered Protected Health Information (PHI)?
A. A patient’s favorite color
2
, B. A patient’s work schedule
✔✔C. A patient’s medical record number
D. A patient’s favorite restaurant
Which of the following is NOT an identifier under HIPAA?
A. Social Security Number
✔✔B. Favorite TV show
C. Date of birth
D. Address
The Privacy Rule primarily protects what?
A. Hospital financial records
✔✔B. Individually identifiable health information
C. Employee work hours
D. Facility maintenance reports
Which of the following entities must comply with HIPAA regulations?
A. A neighborhood restaurant
3
Challenge Exam Questions and
Answers | Latest Version | 2025/2026 |
Correct & Verified
Which best describes a HIPAA “covered entity”?
A. Any company in the U.S.
✔✔B. Healthcare providers, health plans, and healthcare clearinghouses
C. Only federal agencies
D. Only state governments
What does “right to access” under HIPAA mean?
A. Patients can demand free Wi-Fi
✔✔B. Patients can view and obtain copies of their medical records
C. Patients can control employee schedules
D. Patients can own the hospital
What should staff do when accessing PHI electronically?
A. Use shared login credentials
1
,✔✔B. Log out or lock screens when not in use
C. Save passwords on sticky notes
D. Use unsecured devices
Which of these is an appropriate safeguard for laptops containing PHI?
A. Leaving them unattended in public
✔✔B. Encrypting the hard drive
C. Sharing passwords with coworkers
D. Disabling antivirus software
What does HIPAA stand for?
A. Health Insurance Portability and Access Act
✔✔B. Health Insurance Portability and Accountability Act
C. Health Information Privacy and Accountability Act
D. Health Information Portability and Access Agreement
Which type of information is considered Protected Health Information (PHI)?
A. A patient’s favorite color
2
, B. A patient’s work schedule
✔✔C. A patient’s medical record number
D. A patient’s favorite restaurant
Which of the following is NOT an identifier under HIPAA?
A. Social Security Number
✔✔B. Favorite TV show
C. Date of birth
D. Address
The Privacy Rule primarily protects what?
A. Hospital financial records
✔✔B. Individually identifiable health information
C. Employee work hours
D. Facility maintenance reports
Which of the following entities must comply with HIPAA regulations?
A. A neighborhood restaurant
3
