Page | 1
IL MPJE EXAM 2 EXAM 2025 BRAND NEW
ACTUAL EXAM WITH ANSWERS.
What are examples of health care regulations? - correct answer -
For legal or auditing services, accreditation, formulary
development, disclosures to law enforcement, adverse event
reporting, compliance with prescription drug monitoring program
requirements
When would you need written authorization of the patient? -
correct answer -Any other use or disclosure of PHI (e.g., other
than for TPO) requires the specific written authorization of the
patient
What is described in the authorization form? - correct answer -
Authorization form must describe specific use for the PHI, who will
receive it, and whether the CE will be paid in connection with
disclosing it.
What are requirements for written authorization? - correct answer
-o Required for non-TPO disclosures
o Must be in writing
, Page | 2
o Must be separate from acknowledgment of Notice of Privacy
Practices
If the patient declines to sign the authorization form, can the
pharmacy refuse treatment? - correct answer -No
How long is the authorization be maintained for? - correct answer
-6 years
Authorization is required for what following types of
uses/disclosures? - correct answer -• Marketing - communication
about product or service that encourages recipient to purchase or
use the product or service
• Fundraising - when raising funds for entity other than itself
• Employment determinations (pre-employment physicals/drug
screens)
• Pre-enrollment underwriting
• Psychotherapy notes
• Any other non-TPO purpose
, Page | 3
What are the exceptions to authorization- authorization is not
required for certain types of non TPO uses or disclosures? -
correct answer -• Fundraising - may use or disclose demographic
information and dates of health care when raising funds for itself
• Face-to-face encounters
• Communications involving promotional gifts of nominal value
• Communications involving treatment, provider's services, DSM,
or coordination of care
• Communications concerning general health issues
What are the exceptions where authorization is not required and
CE and BA may (but is not required) to disclose PHI? - correct
answer -• Uses or disclosures required by law
• To public health officials authorized by law to prevent or control
disease, investigate
child abuse or neglect, or to FDA
• Adverse event reporting
• Facilitation of product recalls
• Post-marketing surveillance
• Response to court order, subpoena, discovery request, or other
lawful purpose
What must authorizations contain? - correct answer -• Right to
revoke authorization
, Page | 4
• Patient's signature and date of signature and expiration date
• Description of information to be used or disclosed
• Name or type of entity receiving the information
• Notification that once the information is used or disclosed
pursuant to authorization, it
can be re-disclosed and may no longer be protected
• Descriptions of each use or disclosure
What is the minimum necessary standard? - correct answer -o CE
or BA must make reasonable efforts to limit use or disclosure of
PHI to the minimum necessary to accomplish the intended
purpose of the use of the information.
o For use and disclosure on a routine and recurring basis,
provider must establish protocols that state what information is
necessary for that purpose
o For non-routine requests, must allow for individual review of the
request to determine minimum amount of information used or
disclosed to meet the purpose
o Not applicable to TPO
What is the notice of privacy practices? - correct answer -o In
order to use or disclose PHI without the patient's specific written
authorization,
IL MPJE EXAM 2 EXAM 2025 BRAND NEW
ACTUAL EXAM WITH ANSWERS.
What are examples of health care regulations? - correct answer -
For legal or auditing services, accreditation, formulary
development, disclosures to law enforcement, adverse event
reporting, compliance with prescription drug monitoring program
requirements
When would you need written authorization of the patient? -
correct answer -Any other use or disclosure of PHI (e.g., other
than for TPO) requires the specific written authorization of the
patient
What is described in the authorization form? - correct answer -
Authorization form must describe specific use for the PHI, who will
receive it, and whether the CE will be paid in connection with
disclosing it.
What are requirements for written authorization? - correct answer
-o Required for non-TPO disclosures
o Must be in writing
, Page | 2
o Must be separate from acknowledgment of Notice of Privacy
Practices
If the patient declines to sign the authorization form, can the
pharmacy refuse treatment? - correct answer -No
How long is the authorization be maintained for? - correct answer
-6 years
Authorization is required for what following types of
uses/disclosures? - correct answer -• Marketing - communication
about product or service that encourages recipient to purchase or
use the product or service
• Fundraising - when raising funds for entity other than itself
• Employment determinations (pre-employment physicals/drug
screens)
• Pre-enrollment underwriting
• Psychotherapy notes
• Any other non-TPO purpose
, Page | 3
What are the exceptions to authorization- authorization is not
required for certain types of non TPO uses or disclosures? -
correct answer -• Fundraising - may use or disclose demographic
information and dates of health care when raising funds for itself
• Face-to-face encounters
• Communications involving promotional gifts of nominal value
• Communications involving treatment, provider's services, DSM,
or coordination of care
• Communications concerning general health issues
What are the exceptions where authorization is not required and
CE and BA may (but is not required) to disclose PHI? - correct
answer -• Uses or disclosures required by law
• To public health officials authorized by law to prevent or control
disease, investigate
child abuse or neglect, or to FDA
• Adverse event reporting
• Facilitation of product recalls
• Post-marketing surveillance
• Response to court order, subpoena, discovery request, or other
lawful purpose
What must authorizations contain? - correct answer -• Right to
revoke authorization
, Page | 4
• Patient's signature and date of signature and expiration date
• Description of information to be used or disclosed
• Name or type of entity receiving the information
• Notification that once the information is used or disclosed
pursuant to authorization, it
can be re-disclosed and may no longer be protected
• Descriptions of each use or disclosure
What is the minimum necessary standard? - correct answer -o CE
or BA must make reasonable efforts to limit use or disclosure of
PHI to the minimum necessary to accomplish the intended
purpose of the use of the information.
o For use and disclosure on a routine and recurring basis,
provider must establish protocols that state what information is
necessary for that purpose
o For non-routine requests, must allow for individual review of the
request to determine minimum amount of information used or
disclosed to meet the purpose
o Not applicable to TPO
What is the notice of privacy practices? - correct answer -o In
order to use or disclose PHI without the patient's specific written
authorization,
