MPJE HIPAA and Practice Standards Practice Questions
Security of patient health information is a Domain 1 subdomain in both outlines. The federal HIPAA Privacy Rule sets the floor; state confidentiality laws can be stricter.
120 questions in 2 hours 30 minutes across all four MPJE domains, with an explanation and citation for every answer.
Or try the free hipaa, privacy and practice standards drillA neighbor arrives to pick up a homebound patient's filled prescription; the patient is not present. Under the HIPAA Privacy Rule, which statement is correct?
Federal rules the exam tests
- A covered entity makes reasonable efforts to limit uses and disclosures of protected health information to the minimum necessary. 45 CFR 164.502(b)
- A covered entity acts on a patient’s request for access to their records no later than 30 days after receiving it. 45 CFR 164.524(b)(2)
- Protected health information may be disclosed for treatment, payment and health care operations without the patient’s authorization. 45 CFR 164.506

Federal law sets the floor. Where a state rule is stricter, the state rule applies, and state MPJEs test it.
Free hipaa, privacy and practice standards drillTen questions, each explained with the regulation or statute behind the answer. The first attempt is free with a free account.Then sit all 120 questions under the clock
120 questions in 2 hours 30 minutes across all four MPJE domains, with an explanation and citation for every answer.
Or try the free hipaa, privacy and practice standards drillCommon questions
Is a pharmacy a HIPAA covered entity?
A pharmacy that transmits health information electronically in a standard transaction, such as an insurance claim, is a covered health care provider under HIPAA.
More MPJE guides
Original independent practice; rules quoted from the current eCFR and U.S. Code. MPJE is a registered trademark of NABP. Not affiliated with or endorsed by NABP.