1|Page | © copyright 2024/2025 | Grade A+
CPMA EXAM Med Records and
Documentation guidelines
Questions and Answers (100% Pass)
HIPAA was made into law in what year?
a. 1992
b. 1994
c. 1996
d. 1998
✓ c. August 21, 1996
What standard addresses the use and disclosure of individuals' health
information—called "protected health information" or PHI.
a. Security Rule
b. HIPAA
c. Privacy Rule
d. minimum necessary
✓ c. Privacy Rule addresses how an individuals PHI may be used.
Covered entities under HIPAAs Privacy rule include?
Master01 | October, 2024/2025 | Latest update
, 1|Page | © copyright 2024/2025 | Grade A+
a. an employer based and maintained health plan with 50 or less employees
b. health care clearinghouses
c. Government-funded community health centers
d. all of the above.
✓ b. health care clearinghouses along with Health plans and health care
providers
When does the Privacy Rule permit use and disclosure of specific PHI without
an individuals authorization or permission?
a. Health oversight activities
b. worker's compensation
c. research
d. all of the above
✓ d. all of the above; There are 12 national priority purposes total.
PHI where certain specified direct identifiers have been removed is called?
a. minimum necessary
b. limited data set
c. confidential health data set
d. minimum PHI data
Master01 | October, 2024/2025 | Latest update
CPMA EXAM Med Records and
Documentation guidelines
Questions and Answers (100% Pass)
HIPAA was made into law in what year?
a. 1992
b. 1994
c. 1996
d. 1998
✓ c. August 21, 1996
What standard addresses the use and disclosure of individuals' health
information—called "protected health information" or PHI.
a. Security Rule
b. HIPAA
c. Privacy Rule
d. minimum necessary
✓ c. Privacy Rule addresses how an individuals PHI may be used.
Covered entities under HIPAAs Privacy rule include?
Master01 | October, 2024/2025 | Latest update
, 1|Page | © copyright 2024/2025 | Grade A+
a. an employer based and maintained health plan with 50 or less employees
b. health care clearinghouses
c. Government-funded community health centers
d. all of the above.
✓ b. health care clearinghouses along with Health plans and health care
providers
When does the Privacy Rule permit use and disclosure of specific PHI without
an individuals authorization or permission?
a. Health oversight activities
b. worker's compensation
c. research
d. all of the above
✓ d. all of the above; There are 12 national priority purposes total.
PHI where certain specified direct identifiers have been removed is called?
a. minimum necessary
b. limited data set
c. confidential health data set
d. minimum PHI data
Master01 | October, 2024/2025 | Latest update
