HIPAA Exam Questions – Healthcare Compliance – 2026 – Study and Practice
Guide
AOD - correct answer ✔✔ ACCOUNTING AND DISCLOSURE
CE - correct answer ✔✔ COVERED ENTITY: transmits health information in electronic form in
connection with a transaction covered by HIPAA. The covered entity may be (1) a health
insurance carrier (2) a health care clearinghouse through which claims are submitted (3) a
health care provider such as the primary care physician
CMS - correct answer ✔✔ CENTERS FOR MEDICARE AND MEDICAID: previously known as the
Health Care Financing Administration (HCFA) enforces the insurance portability and transaction
and code set requirements of HIPAA
DIRECTORY - correct answer ✔✔ DAILY LIST OF PATIENTS THAT ARE IN THE HOSPITAL
ePHI - correct answer ✔✔ ELECTRONIC PROTECTED HEALTH INFORMATION
FPO OR PO - correct answer ✔✔ FACILITY PRIVACY OFFICER: Oversee the HIPAA related
functions. This person helps the provider remain in compliance by setting policies and
procedures (P & P)
IIHI - correct answer ✔✔ INDIVIDUALLY IDENTIFIABLE HEALTH INFORMATION: is any part of an
individual's health information, including demographic information (e.g. address, date of birth)
collected from the individual
MIP - correct answer ✔✔ MEDICAL INSURANCE PROVIDER
, NPP - correct answer ✔✔ NOTICE OF PRIVACY PRACTICES. This is the paper given to each
patient yearly or each new patient that explains how medical records and information is kept
private in the facility. The patient signs one copy that he/she is in receipt of this document.
OCR - correct answer ✔✔ OFFICE OF CIVIL RIGHTS: will enforce privacy standards
OHCA - correct answer ✔✔ ORGANIZED HEALTH CARE ARRANGEMENT
OIG - correct answer ✔✔ OFFICE OF INSPECTOR GENERAL
P & P - correct answer ✔✔ POLICIES AND PROCEDURES: These are the rules for the facility to
follow in regards to HIPAA
PHI - correct answer ✔✔ PROTECTED HEALTH INFORMATION: is any data that identifies an
individual and describes his/her health status, age, sex, ethnicity, or other demographic
characteristics, whether or not that information is stored or transmitted electronically.
TPO - correct answer ✔✔ TREATMENT, PAYMENT, HEALH CARE OPERATIONS
Compliance - correct answer ✔✔ In health the health care industry is the process of meeting
regulations, recommendations, and expectations of federal and state agencies that pay for
health care services and regulate the industry
E-health information management - correct answer ✔✔ All transactions in which health care
information is accessed, processed, stored, and transferred using electronic technologies
What rights do patients have regarding requesting medical records? - correct answer ✔✔
Patients have the legal right to request (1) access and amendments to their health records, (2)
an accounting of those who have received their health information, and (3) restrictions on who
can access their health records
Guide
AOD - correct answer ✔✔ ACCOUNTING AND DISCLOSURE
CE - correct answer ✔✔ COVERED ENTITY: transmits health information in electronic form in
connection with a transaction covered by HIPAA. The covered entity may be (1) a health
insurance carrier (2) a health care clearinghouse through which claims are submitted (3) a
health care provider such as the primary care physician
CMS - correct answer ✔✔ CENTERS FOR MEDICARE AND MEDICAID: previously known as the
Health Care Financing Administration (HCFA) enforces the insurance portability and transaction
and code set requirements of HIPAA
DIRECTORY - correct answer ✔✔ DAILY LIST OF PATIENTS THAT ARE IN THE HOSPITAL
ePHI - correct answer ✔✔ ELECTRONIC PROTECTED HEALTH INFORMATION
FPO OR PO - correct answer ✔✔ FACILITY PRIVACY OFFICER: Oversee the HIPAA related
functions. This person helps the provider remain in compliance by setting policies and
procedures (P & P)
IIHI - correct answer ✔✔ INDIVIDUALLY IDENTIFIABLE HEALTH INFORMATION: is any part of an
individual's health information, including demographic information (e.g. address, date of birth)
collected from the individual
MIP - correct answer ✔✔ MEDICAL INSURANCE PROVIDER
, NPP - correct answer ✔✔ NOTICE OF PRIVACY PRACTICES. This is the paper given to each
patient yearly or each new patient that explains how medical records and information is kept
private in the facility. The patient signs one copy that he/she is in receipt of this document.
OCR - correct answer ✔✔ OFFICE OF CIVIL RIGHTS: will enforce privacy standards
OHCA - correct answer ✔✔ ORGANIZED HEALTH CARE ARRANGEMENT
OIG - correct answer ✔✔ OFFICE OF INSPECTOR GENERAL
P & P - correct answer ✔✔ POLICIES AND PROCEDURES: These are the rules for the facility to
follow in regards to HIPAA
PHI - correct answer ✔✔ PROTECTED HEALTH INFORMATION: is any data that identifies an
individual and describes his/her health status, age, sex, ethnicity, or other demographic
characteristics, whether or not that information is stored or transmitted electronically.
TPO - correct answer ✔✔ TREATMENT, PAYMENT, HEALH CARE OPERATIONS
Compliance - correct answer ✔✔ In health the health care industry is the process of meeting
regulations, recommendations, and expectations of federal and state agencies that pay for
health care services and regulate the industry
E-health information management - correct answer ✔✔ All transactions in which health care
information is accessed, processed, stored, and transferred using electronic technologies
What rights do patients have regarding requesting medical records? - correct answer ✔✔
Patients have the legal right to request (1) access and amendments to their health records, (2)
an accounting of those who have received their health information, and (3) restrictions on who
can access their health records
