CRIS TEST
Comprehensive Resource To Help You Ace 2026-2027
Exams Includes Frequently Tested Questions With
ELABORATED 100% Correct COMPLETE SOLUTIONS
Guaranteed Pass First Attempt!! Current Update!!
1. A 17 year old girl was seen at an abortion clinic where she had an abortion. Later the
next day she develops complications and goes to the emergency room to seek further
care. Her mother requests copies of her medical records. Since the patient is still a
minor, Mom signs the release form. Why or why not is mom entitled to these records? -
Correct Answer: The mom is not entitled to receive copies of the medical records.
Some states have specific laws that protect minors seeking abortions. The minor would
need to sign the authorization form in order for the mother to be able to access the
records.
2. The police request a copy of a patient's medical record who was involved in a traffic
collision. The patient has given consent to the police for these records. The medical
report shows that the patient had been drinking. Why or why not are these records
protected? - Correct Answer: Yes, the records may be released, since the patient
gave consent to release the records to the police.
3. A patient presents to the HIM Department requesting information about a recent biopsy.
The patient says he wants to know details about the procedure and specifics regarding
the specimen removed. The patient should be advised to request a copy of the? -
Correct Answer: Operative and Pathology Report
4. Some attorneys send a courtesy deposition letter prior to issuing a subpoena. Can you
disclose information without patient authorization if you have the deposition letter prior
to receiving the subpoena? - Correct Answer: NO
,5. If a patient completes an authorization form, can they simply put "at the request of the
patient" as a disclosure purpose? - Correct Answer: YES
6. With a court order (signed by a judge), is an authorization signed by the patient or
personal representative generally required? - Correct Answer: NO
7. The PRO or QIO (Peer Review Organization or Quality Improvement Organization) who is
contracted with CMS (Centers for Medicare & Medicaid Services) requests copies of
medical records. Are they allowed to receive copies without authorization for a patient
with schizophrenia (mental health condition? - Correct Answer: YES
8. What is the difference between a request and a patient's authorization? - Correct
Answer: The request is in writing and asks that records be disclosed; the authorization is
the patient's written permission to do so
9. If there is a breach of health information, which of the following enforcement legal
actions may be taken? - Correct Answer: Civil Action and Criminal Action
10. Dr. Grant and Dr. Palmer work at the same hospital. Dr. Grant is the only physician
treating Dr. Palmer's son, Jerry, who is 18 years old and able to sign for himself. Dr.
Palmer fills out an authorization form and asks to review his son's records. He is a well-
known physician at the hospital. Does he have a right to access the medical record
without an authorization signed by Jerry, the patient? - Correct Answer: NO
11. A woman calls to tell you she has received a bill for outpatient services (she has already
spoken to the billing department) but was never a patient at the facility. She suspects
someone has fraudulently used her name and insurance information. She requests a
copy of the record "out of curiosity." You should tell her? - Correct Answer: You will
speak to the appropriate manager about correcting the situation so that the record does
not appear under her name, but you cannot release health information related to
another person without the consent of the patient
,12. You receive a request and authorization for a deceased patient. The authorization is
signed by the patient's cousin, and a Durable Power of Attorney authorizing the cousin
to make healthcare decisions is attached. You review the record and see that the
patient's marital status was listed as "Married" at the time of his last visit. What should
you do? - Correct Answer: Reject the request because a DPOA expires when the
patient dies, and the right to authorize the disclosure of records defaults back to the
executor of the estate or others per state law
13. What is a Court Order for healthcare records? - Correct Answer: A legal document
signed by a judge directing the disclosure of health records without the patient's
authorization.
14. Fees charged to a patient for copies of PHI under HIPAA cannot include: - Correct
Answer: Retrieval or handling fees
15. A nurse who works in the hospital comes in the HIM department to request copies of
the medical record of her mother-in-law, who now resides in a local nursing home. The
nurse tells you she has power of attorney and needs the records for personal reasons.
How do you proceed? - Correct Answer: You request a copy of the power of attorney
to make sure that this includes power of attorney for medical care. Then you follow the
appropriate disclosure procedure
16. A female patient died at your hospital. Your state law specifies that in the case of a
deceased patient, all of the following individuals have equal access to the patient's
records: Executor of the Estate, Administrator of the Will, Surviving Spouse, Surviving
Parents, and Surviving Children. She was a widow with two children, Billy and Samantha.
Both daughters admitted their mother into the hospital and are listed in the record as
next of kin. Beth is the executor of the will. Billy calls you, explaining that the sisters are
in the midst of an argument concerning their mother's will. She asks you to prepare a
copy of the records for her (she offers to come in to sign the form) and also asks that you
deny such release to his sister, Samantha. What should you tell Billy: - Correct
, Answer: To bring proof of his identity for the records before he picks them up and That
Samantha has a right to receive a copy of the records as executor and as a surviving
child.
17. HIPAA requires that a valid authorization include an expiration date or event such as "on
settlement of the case." - Correct Answer: True
18. What does an Insurance Adjuster primarily do? - Correct Answer: Process claims for
benefits related to accidental injuries.
19. You receive a request from a PRO/QIO that is auditing records for compliance with
Medicare regulations. There is no authorization attached. You review the chart and note
that the patient is HIV positive. What should you do? - Correct Answer: Disclose the
records because PRO/QIO audits are exempt from HIPAA under the TPO exceptions
20. You receive a request and a valid authorization from an attorney. The request letter asks
for any and all records from 6/1/24 to present. When you review the authorization, you
see that it authorizes the release of accident records from 6/1/25 to present. You review
the chart, and you note that the patient was treated only once for accident related
injuries on 6/2/24, but has been seen several times for unrelated illnesses from 6/1/25
to the present. What should you do? - Correct Answer: Return the request as an NRS
because there are no accident records for the dates specified on the authorization
Many health records are now digitized and can be easily accessed and shared. This is possible
because of improvements in technology and rules about how information is handled. In 2016, a
law called the 21st Century Cures Act made it the standard practice to_______________. This
law allowed the Secretary of Health and Human Services to decide what activities are
acceptable and what is considered blocking information - Correct Answer: Share health
information electronically in healthcare
How can you determine whether to apply HIPAA or state laws regarding PHI? - Correct
Answer: If the state law provides greater protection for PHI than HIPAA, state law will apply
Comprehensive Resource To Help You Ace 2026-2027
Exams Includes Frequently Tested Questions With
ELABORATED 100% Correct COMPLETE SOLUTIONS
Guaranteed Pass First Attempt!! Current Update!!
1. A 17 year old girl was seen at an abortion clinic where she had an abortion. Later the
next day she develops complications and goes to the emergency room to seek further
care. Her mother requests copies of her medical records. Since the patient is still a
minor, Mom signs the release form. Why or why not is mom entitled to these records? -
Correct Answer: The mom is not entitled to receive copies of the medical records.
Some states have specific laws that protect minors seeking abortions. The minor would
need to sign the authorization form in order for the mother to be able to access the
records.
2. The police request a copy of a patient's medical record who was involved in a traffic
collision. The patient has given consent to the police for these records. The medical
report shows that the patient had been drinking. Why or why not are these records
protected? - Correct Answer: Yes, the records may be released, since the patient
gave consent to release the records to the police.
3. A patient presents to the HIM Department requesting information about a recent biopsy.
The patient says he wants to know details about the procedure and specifics regarding
the specimen removed. The patient should be advised to request a copy of the? -
Correct Answer: Operative and Pathology Report
4. Some attorneys send a courtesy deposition letter prior to issuing a subpoena. Can you
disclose information without patient authorization if you have the deposition letter prior
to receiving the subpoena? - Correct Answer: NO
,5. If a patient completes an authorization form, can they simply put "at the request of the
patient" as a disclosure purpose? - Correct Answer: YES
6. With a court order (signed by a judge), is an authorization signed by the patient or
personal representative generally required? - Correct Answer: NO
7. The PRO or QIO (Peer Review Organization or Quality Improvement Organization) who is
contracted with CMS (Centers for Medicare & Medicaid Services) requests copies of
medical records. Are they allowed to receive copies without authorization for a patient
with schizophrenia (mental health condition? - Correct Answer: YES
8. What is the difference between a request and a patient's authorization? - Correct
Answer: The request is in writing and asks that records be disclosed; the authorization is
the patient's written permission to do so
9. If there is a breach of health information, which of the following enforcement legal
actions may be taken? - Correct Answer: Civil Action and Criminal Action
10. Dr. Grant and Dr. Palmer work at the same hospital. Dr. Grant is the only physician
treating Dr. Palmer's son, Jerry, who is 18 years old and able to sign for himself. Dr.
Palmer fills out an authorization form and asks to review his son's records. He is a well-
known physician at the hospital. Does he have a right to access the medical record
without an authorization signed by Jerry, the patient? - Correct Answer: NO
11. A woman calls to tell you she has received a bill for outpatient services (she has already
spoken to the billing department) but was never a patient at the facility. She suspects
someone has fraudulently used her name and insurance information. She requests a
copy of the record "out of curiosity." You should tell her? - Correct Answer: You will
speak to the appropriate manager about correcting the situation so that the record does
not appear under her name, but you cannot release health information related to
another person without the consent of the patient
,12. You receive a request and authorization for a deceased patient. The authorization is
signed by the patient's cousin, and a Durable Power of Attorney authorizing the cousin
to make healthcare decisions is attached. You review the record and see that the
patient's marital status was listed as "Married" at the time of his last visit. What should
you do? - Correct Answer: Reject the request because a DPOA expires when the
patient dies, and the right to authorize the disclosure of records defaults back to the
executor of the estate or others per state law
13. What is a Court Order for healthcare records? - Correct Answer: A legal document
signed by a judge directing the disclosure of health records without the patient's
authorization.
14. Fees charged to a patient for copies of PHI under HIPAA cannot include: - Correct
Answer: Retrieval or handling fees
15. A nurse who works in the hospital comes in the HIM department to request copies of
the medical record of her mother-in-law, who now resides in a local nursing home. The
nurse tells you she has power of attorney and needs the records for personal reasons.
How do you proceed? - Correct Answer: You request a copy of the power of attorney
to make sure that this includes power of attorney for medical care. Then you follow the
appropriate disclosure procedure
16. A female patient died at your hospital. Your state law specifies that in the case of a
deceased patient, all of the following individuals have equal access to the patient's
records: Executor of the Estate, Administrator of the Will, Surviving Spouse, Surviving
Parents, and Surviving Children. She was a widow with two children, Billy and Samantha.
Both daughters admitted their mother into the hospital and are listed in the record as
next of kin. Beth is the executor of the will. Billy calls you, explaining that the sisters are
in the midst of an argument concerning their mother's will. She asks you to prepare a
copy of the records for her (she offers to come in to sign the form) and also asks that you
deny such release to his sister, Samantha. What should you tell Billy: - Correct
, Answer: To bring proof of his identity for the records before he picks them up and That
Samantha has a right to receive a copy of the records as executor and as a surviving
child.
17. HIPAA requires that a valid authorization include an expiration date or event such as "on
settlement of the case." - Correct Answer: True
18. What does an Insurance Adjuster primarily do? - Correct Answer: Process claims for
benefits related to accidental injuries.
19. You receive a request from a PRO/QIO that is auditing records for compliance with
Medicare regulations. There is no authorization attached. You review the chart and note
that the patient is HIV positive. What should you do? - Correct Answer: Disclose the
records because PRO/QIO audits are exempt from HIPAA under the TPO exceptions
20. You receive a request and a valid authorization from an attorney. The request letter asks
for any and all records from 6/1/24 to present. When you review the authorization, you
see that it authorizes the release of accident records from 6/1/25 to present. You review
the chart, and you note that the patient was treated only once for accident related
injuries on 6/2/24, but has been seen several times for unrelated illnesses from 6/1/25
to the present. What should you do? - Correct Answer: Return the request as an NRS
because there are no accident records for the dates specified on the authorization
Many health records are now digitized and can be easily accessed and shared. This is possible
because of improvements in technology and rules about how information is handled. In 2016, a
law called the 21st Century Cures Act made it the standard practice to_______________. This
law allowed the Secretary of Health and Human Services to decide what activities are
acceptable and what is considered blocking information - Correct Answer: Share health
information electronically in healthcare
How can you determine whether to apply HIPAA or state laws regarding PHI? - Correct
Answer: If the state law provides greater protection for PHI than HIPAA, state law will apply
