ACTUAL Questions and CORRECT
Answers
A covered entity is training its workforce on the HIPAA Privacy Rule. It has scheduled all of its
paid employees to attend training sessions. This covered entity has scheduled everyone that
needs to receive training. - CORRECT ANSWER - False
The HIPAA Security Rule applies to all types of PHI, including information disclosed verbally. -
CORRECT ANSWER - False
To be PHI, information must directly name the individual that the information is about. -
CORRECT ANSWER - False
When a request is received for an MRI report, only the written report should be sent and not the
images, orders and any notes that mention the reason for the MRI - CORRECT
ANSWER - True
A limited data set does not receive HIPAA Privacy Rule protection. - CORRECT
ANSWER - False
Covered entities consist only of healthcare providers, health plans, and healthcare
clearinghouses. - CORRECT ANSWER - True
Preemption requires compliance with state law when a federal law and state law conflict with
one another - CORRECT ANSWER - False
Drug and alcohol abuse treatment records received protection under federal law prior to the
HIPAA Privacy Rule. - CORRECT ANSWER - True