CHPS Study Guide 2026
Everything you need to pass the CHPS exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 CHPS Exam Format at a Glance
📚 CHPS Topics to Study (33)
✍️ Sample CHPS Questions & Answers
1. Under HIPAA, which of the following is NOT considered Protected Health Information (PHI)?
Data that meets the Safe Harbor de-identification standard (removing 18 specified identifiers) is no longer PHI and is not subject to HIPAA protections.
2. The Workforce Security standard under the HIPAA Security Rule's Administrative Safeguards requires covered entities to:
Workforce Security requires policies ensuring appropriate ePHI access for those who need it while preventing unauthorized access by those who do not, covering authorization, supervision, and termination procedures.
3. What is the HIPAA standard for de-identification using the Expert Determination method?
Expert Determination requires a qualified statistical or scientific expert to certify that the risk of re-identification is very small using generally accepted principles.
4. What does the Evaluation standard under the HIPAA Security Rule's Administrative Safeguards require a covered entity to perform?
The Evaluation standard requires covered entities to periodically assess how well their security policies and procedures meet the Security Rule requirements, particularly after operational or environmental changes.
5. Under HIPAA, which of the following statements about the Right of Access is TRUE?
Covered entities may charge a reasonable, cost-based fee for providing copies of PHI, covering labor, supplies, and postage, but may not profit from access requests.
6. Under the HIPAA Security Rule's Physical Safeguards, what does the Workstation Use standard require?
The Workstation Use standard requires policies defining proper workstation functions and the physical environment of workstations that access ePHI, such as positioning screens away from unauthorized viewers.