DWC: HIPPA/ HIPAA and Privacy Act Training (1.5 hrs)
(DHA-US001)| Updated RATED A+ | 2026
This course provides an overview of two cri-cal privacy laws - the Health Insurance Portability
and Accountability Act (HIPAA) of 1996 and the Privacy Act of 1974 - and discusses how these
laws are applicable to the Military Health System (MHS). This training provides high-level
regulatory standards that apply the same to opera-ons staff, clinical staff, and senior
management. It is divided into five modules followed by end-of-module exams. Module 1
provides a general overview of HIPAA,
Once health informa on has been de-iden fied, which of the following is true
there are no restric ons on its use or disclosure
HIPAA is an acronym for
Health Insurance Portability and Accountability Act of 1996
To de-iden fy health informa on you must remove at least
all of the above and many more
The types of organiza ons that HIPAA applies to are known as
covered en es
A covered en ty can be the business associate of another covered en ty.
True
Persons or organiza ons, who are not members of a covered en ty's workforce, that perform
certain func ons on behalf of, or provide services to, a covered en ty that involve the use of
health informa on are known as
business associates
Under HIPAA, the acronym PHI stands for
protected health informa on
The designa on of a Privacy Officer by a covered en ty is op onal.
False
Which of the following are administra ve requirements that covered en es must implement
, all of the above
In order to be a covered en ty, a health care provider must electronically transmit health
informa on in connec on with certain HIPAA transac ons.
True
There are two methods to de-iden fy health informa on: a formal determina on by a qualified
sta s cian, or by the removal of specified iden fiers.
True
Prior to HIPAA, no generally accepted standards or requirements for protec ng health
informa on existed in the health care industry.
True
Which one of these groups is NOT typically covered under HIPAA
health spas
HIPAA is
Federal legisla on
An authoriza on is NOT required under which circumstance:
All of the above
How many categories of Public Interest and Benefit Ac vi es disclosures are there
Twelve
A covered en ty MUST disclose protected health informa on in only these two situa ons.
To an individual who requests access and to U.S. Health and Human Services pursuant to an
inves ga on
A covered en ty may not use or disclose protected health informa on EXCEPT in these two
situa ons
As the individual authorizes in wri ng and as the Privacy rule permits
An individual must first sign an authoriza on to obtain access to his or her own PHI
False
Under the "Minimum Necessary" standard, a covered en ty must:
(DHA-US001)| Updated RATED A+ | 2026
This course provides an overview of two cri-cal privacy laws - the Health Insurance Portability
and Accountability Act (HIPAA) of 1996 and the Privacy Act of 1974 - and discusses how these
laws are applicable to the Military Health System (MHS). This training provides high-level
regulatory standards that apply the same to opera-ons staff, clinical staff, and senior
management. It is divided into five modules followed by end-of-module exams. Module 1
provides a general overview of HIPAA,
Once health informa on has been de-iden fied, which of the following is true
there are no restric ons on its use or disclosure
HIPAA is an acronym for
Health Insurance Portability and Accountability Act of 1996
To de-iden fy health informa on you must remove at least
all of the above and many more
The types of organiza ons that HIPAA applies to are known as
covered en es
A covered en ty can be the business associate of another covered en ty.
True
Persons or organiza ons, who are not members of a covered en ty's workforce, that perform
certain func ons on behalf of, or provide services to, a covered en ty that involve the use of
health informa on are known as
business associates
Under HIPAA, the acronym PHI stands for
protected health informa on
The designa on of a Privacy Officer by a covered en ty is op onal.
False
Which of the following are administra ve requirements that covered en es must implement
, all of the above
In order to be a covered en ty, a health care provider must electronically transmit health
informa on in connec on with certain HIPAA transac ons.
True
There are two methods to de-iden fy health informa on: a formal determina on by a qualified
sta s cian, or by the removal of specified iden fiers.
True
Prior to HIPAA, no generally accepted standards or requirements for protec ng health
informa on existed in the health care industry.
True
Which one of these groups is NOT typically covered under HIPAA
health spas
HIPAA is
Federal legisla on
An authoriza on is NOT required under which circumstance:
All of the above
How many categories of Public Interest and Benefit Ac vi es disclosures are there
Twelve
A covered en ty MUST disclose protected health informa on in only these two situa ons.
To an individual who requests access and to U.S. Health and Human Services pursuant to an
inves ga on
A covered en ty may not use or disclose protected health informa on EXCEPT in these two
situa ons
As the individual authorizes in wri ng and as the Privacy rule permits
An individual must first sign an authoriza on to obtain access to his or her own PHI
False
Under the "Minimum Necessary" standard, a covered en ty must:
