CRIS TEST EXAM 2025 QUESTIONS AND
ANSWERS
Who owns the medical record?
A. The patient
B. The physician
C. The health care facility
D. The federal government under HIPAA - ANS C. The health care facility
The tool most often used to gather a complete medical record is the:
A. Conditions of Admission
B. Notice of Privacy Practices
C. Master Patient Index
D. Information Management Plan - ANS C. Master Patient Index
The Purpose(s) of the medical record is/are:
A. To assist in further research and education
B. To assist in protecting the legal rights of the patient and the healthcare facility
1
C. To provide analysis, study and evaluate care given to the patient
Page
@COPYRIGHT BRAINBARTER 2025/2026
, D. All of the above - ANS D. All of the above
Which of the following may be considered an improper disclosure of protected health
information?
A. Releasing records to a requester for legal purposes without a signed patient authorization
B. Accidentally releasing the wrong patient's records to a requester
C. Releasing dates of service to a requester if the treatment dates are not authorized
D. All of the above - ANS D. All of the above
Which of the following is not required on a HIPAA compliant authorization?
A. Name or class of the healthcare provider who is disclosing records
B. Information to be disclosed
C. Fees associated with the disclosure
D. Expiration date of even - ANS C. Fees associated with the disclosure
A patient presents to the HIM Department requesting information about a recent biopsy. The
patient says he wants to know details about the procedure and specifics regarding the
specimen removed. The patient should be advised to request a copy of the:
A. Entire record
B. Operative and Pathology Report
C. History and Physical
D. None of the above - ANS B. Operative and Pathology Report
Some attorneys send a courtesy deposition letter prior to issuing a subpeona. Can you disclose
2
information without patient authorization if you have the deposition letter prior to the
Page
receiving the subpoena?
@COPYRIGHT BRAINBARTER 2025/2026
, A. Yes
B. No - ANS B. No
A provider may put all the elements of a valid authorization on one form to cover HIPAA,
chemical dependency, HIV and genetic testing information.
A. True
B. False - ANS A. True
If a patient completes an authorization form, can they simply put "at the request of the patient"
as a disclosure purpose?
A. Yes
B. No - ANS A. Yes
With a court order (signed by a judge), is an authorization signed by the patient or personal
representative generally required?
A. Yes
B. No - ANS B. No
Which of the following does not have access to a patient's health information without
authorization?
A. Nursing Unit- patient was readmitted to facility
B. Medical Staff Physician not treating the patient or consulting - she reviews because patient is
a former patient
3
Page
C. Quality Management Employee - reviews for performance improvement data
@COPYRIGHT BRAINBARTER 2025/2026
ANSWERS
Who owns the medical record?
A. The patient
B. The physician
C. The health care facility
D. The federal government under HIPAA - ANS C. The health care facility
The tool most often used to gather a complete medical record is the:
A. Conditions of Admission
B. Notice of Privacy Practices
C. Master Patient Index
D. Information Management Plan - ANS C. Master Patient Index
The Purpose(s) of the medical record is/are:
A. To assist in further research and education
B. To assist in protecting the legal rights of the patient and the healthcare facility
1
C. To provide analysis, study and evaluate care given to the patient
Page
@COPYRIGHT BRAINBARTER 2025/2026
, D. All of the above - ANS D. All of the above
Which of the following may be considered an improper disclosure of protected health
information?
A. Releasing records to a requester for legal purposes without a signed patient authorization
B. Accidentally releasing the wrong patient's records to a requester
C. Releasing dates of service to a requester if the treatment dates are not authorized
D. All of the above - ANS D. All of the above
Which of the following is not required on a HIPAA compliant authorization?
A. Name or class of the healthcare provider who is disclosing records
B. Information to be disclosed
C. Fees associated with the disclosure
D. Expiration date of even - ANS C. Fees associated with the disclosure
A patient presents to the HIM Department requesting information about a recent biopsy. The
patient says he wants to know details about the procedure and specifics regarding the
specimen removed. The patient should be advised to request a copy of the:
A. Entire record
B. Operative and Pathology Report
C. History and Physical
D. None of the above - ANS B. Operative and Pathology Report
Some attorneys send a courtesy deposition letter prior to issuing a subpeona. Can you disclose
2
information without patient authorization if you have the deposition letter prior to the
Page
receiving the subpoena?
@COPYRIGHT BRAINBARTER 2025/2026
, A. Yes
B. No - ANS B. No
A provider may put all the elements of a valid authorization on one form to cover HIPAA,
chemical dependency, HIV and genetic testing information.
A. True
B. False - ANS A. True
If a patient completes an authorization form, can they simply put "at the request of the patient"
as a disclosure purpose?
A. Yes
B. No - ANS A. Yes
With a court order (signed by a judge), is an authorization signed by the patient or personal
representative generally required?
A. Yes
B. No - ANS B. No
Which of the following does not have access to a patient's health information without
authorization?
A. Nursing Unit- patient was readmitted to facility
B. Medical Staff Physician not treating the patient or consulting - she reviews because patient is
a former patient
3
Page
C. Quality Management Employee - reviews for performance improvement data
@COPYRIGHT BRAINBARTER 2025/2026
