CMOM-Practice Management Institute
2025/2026 Exam Questions with 100%
Correct Answers | Latest Update
HIPPA REGULATION: Privacy Overview - 🧠ANSWER ✔✔There are three
major areas addressed in the Privacy Regulation: 1. Use and disclosure of
PHI, 2. Patient rights 3. Security administrative and physical
Business Associates - 🧠ANSWER ✔✔can be held directly accountable by
federal or state authority for failure to comply with HIPAA statutory or
regulations. ex. IT techs, Janitors, Cleaning Services, Vendors, Collection
agencies, Consultants and Billing Services.
Entities - 🧠ANSWER ✔✔ex. doctors, hospitals, pharmacy
Breach - 🧠ANSWER ✔✔unauthorized acquisition access, use or disclosure
of protected health information, ex. ALGH issue on breach where health
info was spread with no consents from patients.
1
COPYRIGHT©JOSHCLAY 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
,What is NOT considered a breach? - 🧠ANSWER ✔✔1. Where an
authorized person who received the health info. cannot reasonably have
been able to retain it.
2. If an unintentional acquisition, access, or use occurs within the scope of
employ. and info doesn't go any further.
3. If it is an inadvertent disclosure that occurs within a facility, and the
information does not go any further.
Tiered Increase in Civil Monetary Penalties - 🧠ANSWER ✔✔HIPPA
violation at $50,000 per violation and an annual maximum of $1.5million.
What are examples that could not result in HIPPA violation by DHHS? -
🧠ANSWER ✔✔-Overheard phone or nursing station conversation
-Joint treatment areas
-Sign-in sheets
-Calling names in reception areas
-Hospital rounds
Solutions would be to speak quietly, cubicles, curtains, dividers, asking
patients to step back, or closing doors.
2
COPYRIGHT©JOSHCLAY 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
, Health Information (PHI) - 🧠ANSWER ✔✔Any info. whether oral or
recorded in any form or medium that is created or received by a health care
provider, health, plan public health authority, employer, life insurer, school
or university, or health care clearinghouse, and related to the past, present
or future physical or mental health or condition.
Individual Identifiable Health Information (IIHI) - 🧠ANSWER ✔✔Information
that is a subset of health information, including demographic, information
collected from an individual.
Identifiers - 🧠ANSWER ✔✔-Email address
-Social Security number
-Medical record number
-Vehicle identifier
-Full face photograph
The Notice of Privacy Practices should be... - 🧠ANSWER ✔✔In a written
language, tape, or video that the patient understands, be clearly posted in
the practice or facility, and if applicable, on the practice website.
3
COPYRIGHT©JOSHCLAY 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
2025/2026 Exam Questions with 100%
Correct Answers | Latest Update
HIPPA REGULATION: Privacy Overview - 🧠ANSWER ✔✔There are three
major areas addressed in the Privacy Regulation: 1. Use and disclosure of
PHI, 2. Patient rights 3. Security administrative and physical
Business Associates - 🧠ANSWER ✔✔can be held directly accountable by
federal or state authority for failure to comply with HIPAA statutory or
regulations. ex. IT techs, Janitors, Cleaning Services, Vendors, Collection
agencies, Consultants and Billing Services.
Entities - 🧠ANSWER ✔✔ex. doctors, hospitals, pharmacy
Breach - 🧠ANSWER ✔✔unauthorized acquisition access, use or disclosure
of protected health information, ex. ALGH issue on breach where health
info was spread with no consents from patients.
1
COPYRIGHT©JOSHCLAY 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
,What is NOT considered a breach? - 🧠ANSWER ✔✔1. Where an
authorized person who received the health info. cannot reasonably have
been able to retain it.
2. If an unintentional acquisition, access, or use occurs within the scope of
employ. and info doesn't go any further.
3. If it is an inadvertent disclosure that occurs within a facility, and the
information does not go any further.
Tiered Increase in Civil Monetary Penalties - 🧠ANSWER ✔✔HIPPA
violation at $50,000 per violation and an annual maximum of $1.5million.
What are examples that could not result in HIPPA violation by DHHS? -
🧠ANSWER ✔✔-Overheard phone or nursing station conversation
-Joint treatment areas
-Sign-in sheets
-Calling names in reception areas
-Hospital rounds
Solutions would be to speak quietly, cubicles, curtains, dividers, asking
patients to step back, or closing doors.
2
COPYRIGHT©JOSHCLAY 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
, Health Information (PHI) - 🧠ANSWER ✔✔Any info. whether oral or
recorded in any form or medium that is created or received by a health care
provider, health, plan public health authority, employer, life insurer, school
or university, or health care clearinghouse, and related to the past, present
or future physical or mental health or condition.
Individual Identifiable Health Information (IIHI) - 🧠ANSWER ✔✔Information
that is a subset of health information, including demographic, information
collected from an individual.
Identifiers - 🧠ANSWER ✔✔-Email address
-Social Security number
-Medical record number
-Vehicle identifier
-Full face photograph
The Notice of Privacy Practices should be... - 🧠ANSWER ✔✔In a written
language, tape, or video that the patient understands, be clearly posted in
the practice or facility, and if applicable, on the practice website.
3
COPYRIGHT©JOSHCLAY 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
