HIPAA Study Guide 2026
Everything you need to pass the HIPAA exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 HIPAA Exam Format at a Glance
📚 HIPAA Topics to Study (99)
✍️ Sample HIPAA Questions & Answers
1. Which entity type is subject to 42 CFR Part 2 but would NOT automatically be a HIPAA covered entity?
A federally assisted SUD counseling program that doesn't bill electronically or transmit health information electronically is subject to Part 2 but may not meet HIPAA's definition of a covered entity.
2. A hospital migrates to a new EHR system. What HIPAA requirement applies to PHI stored in the old system?
HIPAA requires that PHI be retained per applicable state and federal retention laws, and disposed of securely when retention periods expire.
3. A covered entity discovers that a business associate has experienced a breach of PHI. Who is primarily responsible for notifying affected individuals?
Under the HIPAA Breach Notification Rule, the covered entity bears primary responsibility for notifying affected individuals, even when the breach occurred at a business associate.
4. What is the annual cap on civil monetary penalties for identical violations under a single HIPAA provision?
The annual cap per identical violation category is $1.5 million, adjusted periodically for inflation (currently approximately $1.919 million).
5. A covered entity's employee discovers that a family member is a patient at their organization. Under HIPAA, what is the employee's obligation?
Workforce members may not access PHI of patients they are not involved in treating — 'snooping' on family members' records is a HIPAA violation even with good intentions.
6. Which of the following is NOT a factor OCR considers when determining the amount of a civil monetary penalty?
OCR considers factors such as harm, number of individuals affected, and financial condition, but political affiliation is not a relevant factor.
🎯 Free HIPAA Practice Tests
📖 HIPAA Guides & Articles
- What Is ePHI in HIPAA? Electronic Protected Health Information Explained
- HIPAA Privacy Rule Compliance: What It Means, Who It Covers, and How to Stay Protected
- My Responsibility Under HIPAA: A Complete Guide to Healthcare Privacy Obligations
- Power of Attorney and HIPAA: What You Need to Know About Health Information Access
- Is Most Video Conferencing Software HIPAA Compliant? What Healthcare Providers Must Know
- HIPAA and Bloodborne Pathogens Certified for Medical Couriers: Complete Training Guide
- HIPAA SMS: Complete Guide to Texting Patient Information Compliantly
- HIPAA Privacy Violations: What They Are, How They Happen, and What Comes Next