HCCA - CHPC Exam Prep | Questions with 100% Verified Answers | Latest Update 2026/2027

HCCA - CHPC Exam Prep | Questions with 100% Verified
Answers | Latest Update 2026/2027
Question: What date did HIPAA became law
Answer: 1996


Question: What is the purpose of HIPAA?
Answer: 1. Protect individuals' PHI
2. Promote high quality healthcare
3. Protect the public's health and well being


Question: HIPAA resides in what CFR section
Answer: 45 CFR sections 164.102 through 164.534


Question: Identify the four sections in the CFR by location and topic
Answer: Section One: 164.102 - 164.318 and 164.530 - 164-534 Organizational Requirements
Section Two: 164.500 - 164.514 Use and Disclosure of Information
Section Three: 164.520 - 164.528 Individual's Rights and Penalties
Section Four: Interaction with the HIPAA Security Rule


Question: How do you determine if organization is a CE
Answer: compare the functions of the entity to the three principal types of "covered entities"
(CE)


Question: What are the different types of CEs
Answer: - Provider
- Health Plan
- Clearing House
- Other Types


Question: How is a Provider defined
Answer: Supports medical or health services such as SNFs, home health, hospitals, physician
clinics, etc that transmit in electronic form


Question: Does a provider need a standing facility to be considered a CE
Answer: No, a provider does not need a standing facility to be considered a CE


Question: What is a Health Plan
Answer: (1) A healthcare organization that provides or pays the cost of medical care
(2) Includes Medicaid, Medicare, and self funded plans

,Question: What is a Clearinghouse
Answer: (1) processes health information from a nonstandard data elements of health
information
into standard data
elements
(2) includes billing services, health information systems, etc
(3) does NOT include Third Party Administrations ( TPAs)


Question: What are the three Organizational Arrangements
Answer: Organized Health Care Arrangement (OHCA)
Affiliated Covered Entities (ACE)
Hybrid Covered Entity (HCE)


Question: What is a Hybrid Covered Entity (HCE)
Answer: single covered entity with non-health care components


Question: What is an Organized Health Care Arrangement (OHCA)?
Answer: clinically integrated care setting where individuals receive health care from more
than
one covered entity


Question: What is an Affiliated Covered Entity (ACE)?
Answer: (1) legally separate covered entities that share common control or common
ownership
(2) choose to designate themselves as one affiliated CE for the purposes of complying
with the HIPAA Privacy standard


Question: What must a Affiliated Entity agree to?
Answer: Be treated as a single CE. Must agree to follow a standard policy and procedure


Question: What is a Business Associate?
Answer: (1) Separate entity working on behalf of the CE providing Treatment, Payment, and
Healthcare Operations (TPO) and/or associated activities requiring access and/or will
create, receive, maintain, and/or transmit PHI
(2) Must have a business associate agreement


Question: Who is allowed to access PHI?
Answer: (1) Workforce: employees, volunteers, trainees, and others under control of the CE
(2) Business Associates: Separate entity working on behalf of the CE providing
Treatment,
Payment, and Healthcare Operations (TPO) and/or associated activities requiring
access
and/or use of PHI

, Question: What is an example of a BA?
Answer: claims processing
data analysis
billing
benefit management
quality assurance
quality improvement
practice management
legal
actuarial
accounting
accreditation
other administrative services


Question: What has been the main complaint with holding a BA accountable under the 2000
Privacy Rule?
Answer: - lack of penalties for non-compliance
- federal penalties could only be levied against the CE


Question: Which new regulation corrected shortcomings of the HIPAA 2000 regulation
concerning BAs?
Answer: Health Information Technology
for Economic and Clinical Health (HITECH)


Question: Who is responsible for privacy and security of BAs?
Answer: The CE has legal liability for violations, and possible penalties for the BA.


Question: What is Health Information?
Answer: any information, whether oral or recorded in any form or medium, that is created or
received by a health care provider, health plan, public health authority, employer, life
insurer, school or university, or health care clearinghouse, and relates to the past,
present, or future physical or mental health or condition of an individual. This
includes the
provision of health care to an individual, or the past, present, or future payment for
the
provision of health care to an individual.