CHPC Exam Study Set 1 Question and answers correctly solved
2025
1. A new privacy officer is D. Privacy Act
reviewing an organization's
current policy on patient
requests for amendments. Which
of the following is the MOST critical
to the evaluation process?
A. effective and revision dates
of the policy
B. accurate description of
the regulatory
requirements
C. nature of complaints
related to the policy
D. description of the form letters
used to respond to requests
2. As part of due diligence on
Business Associates, a privacy
officer would be MOST concerned
with confirming that they
conduct:
A. criminal background checks.
B. credit history checks.
C. provider credentialing checks.
D. health screening checks.
3. Data breach response training
is required by which of the
following regulations?
A. HITECH
B. GLBA
C. FMLA
1/
17
,CHPC Exam Study Set 1 Question and answers correctly solved
2025
B. accurate description of the
regulatory requirements
A. criminal background
checks.
A. HITECH
4.
2/
17
, CHPC Exam Study Set 1 Question and answers correctly solved
2025
A business associate has it is
contacted an organization's discovered
privacy officer to alert him that that the
some of the patient Institutional
information that they hold in Review
relation to the BAA may have Board (IRB)
been breached. An employee has not been
took a laptop that contained reviewing
patient information from the
several vendors and misplaced it informed
at an airport. They are not 100% consents or
sure that information from the authorizatio
organization was on the laptop. ns
Which of the following is the completed
MOST appropriate response by the by research
privacy officer? subjects.
A. Rely on the business Which of the
associate to conduct any following
needed notifications. should a
B. Notify each individual whose privacy
PHI has been possibly officer do
disclosed. FIRST?
C. Determine if the breach A. Report the
involved more than 500 issue to
OHRP.
individuals.
B. Report the
D. Assure that all
issue to
notifications occur no later the OCR.
than 90 days after
discovery.
5. During an internal investigation,
3/
17
2025
1. A new privacy officer is D. Privacy Act
reviewing an organization's
current policy on patient
requests for amendments. Which
of the following is the MOST critical
to the evaluation process?
A. effective and revision dates
of the policy
B. accurate description of
the regulatory
requirements
C. nature of complaints
related to the policy
D. description of the form letters
used to respond to requests
2. As part of due diligence on
Business Associates, a privacy
officer would be MOST concerned
with confirming that they
conduct:
A. criminal background checks.
B. credit history checks.
C. provider credentialing checks.
D. health screening checks.
3. Data breach response training
is required by which of the
following regulations?
A. HITECH
B. GLBA
C. FMLA
1/
17
,CHPC Exam Study Set 1 Question and answers correctly solved
2025
B. accurate description of the
regulatory requirements
A. criminal background
checks.
A. HITECH
4.
2/
17
, CHPC Exam Study Set 1 Question and answers correctly solved
2025
A business associate has it is
contacted an organization's discovered
privacy officer to alert him that that the
some of the patient Institutional
information that they hold in Review
relation to the BAA may have Board (IRB)
been breached. An employee has not been
took a laptop that contained reviewing
patient information from the
several vendors and misplaced it informed
at an airport. They are not 100% consents or
sure that information from the authorizatio
organization was on the laptop. ns
Which of the following is the completed
MOST appropriate response by the by research
privacy officer? subjects.
A. Rely on the business Which of the
associate to conduct any following
needed notifications. should a
B. Notify each individual whose privacy
PHI has been possibly officer do
disclosed. FIRST?
C. Determine if the breach A. Report the
involved more than 500 issue to
OHRP.
individuals.
B. Report the
D. Assure that all
issue to
notifications occur no later the OCR.
than 90 days after
discovery.
5. During an internal investigation,
3/
17
