HIPAA practice test for emts and first responders
Free HIPAA practice test for EMTs and first responders.
Every shift puts you in front of PHI: radio reports to the receiving ED, handoffs at the ambulance bay, officers asking questions at a scene, and run reports that follow the patient. This free practice test uses the situations EMS crews actually face, so you can find your gaps before a supervisor, an auditor, or a complaint does. Answer the questions and get your score instantly.
This version mixes EMS-specific scenarios, including radio traffic, scene privacy, hospital handoffs, and law enforcement requests, with core HIPAA questions every workforce member should know.
Question basis: federal HIPAA rules and HHS/OCR guidance. State privacy laws and your organization's policies may be stricter.
Free practice test
Start the HIPAA practice test for emts and first responders
20 multiple-choice questions across the Privacy Rule, Security Rule, breach notification, business associates, and real workplace scenarios. You see whether each answer is right as you go. At the end you unlock your scored results, full explanations, and a short study plan.
This practice test helps you study. It is not a substitute for completing the HIPAA course, passing its graded assessment, and earning a dated certificate.
Sample questions
HIPAA quiz questions and answers for emts and first responders
Scene and Radio
You are transporting a chest pain patient and need to give the receiving ED a radio report on an open channel that scanner hobbyists can monitor. What does HIPAA say about this?
- Radio reports violate HIPAA because anyone with a scanner might hear them
- You must get the patient's verbal authorization before keying up
- The report is a permitted treatment disclosure; use reasonable safeguards, like limiting identifiers over the open channel
- Only the receiving physician is legally allowed to hear the report
Show answer
Correct answer: The report is a permitted treatment disclosure; use reasonable safeguards, like limiting identifiers over the open channel
Disclosures to the receiving hospital for treatment are permitted without authorization. Because open channels can be monitored, reasonable safeguards like using unit numbers and clinical details instead of names keep any overheard traffic in incidental disclosure territory.
Scene and Radio
While you load a patient into the ambulance, a neighbor approaches and asks what happened and whether the patient is going to be okay. What should you do?
- Politely decline to share any patient information and continue care
- Share the patient's general condition since the neighbor is clearly concerned
- Confirm only which hospital you are transporting to
- Take the neighbor's number and promise an update after the call
Show answer
Correct answer: Politely decline to share any patient information and continue care
A bystander is not involved in the patient's care, so telling them anything about the patient's condition or destination is a disclosure the patient has not agreed to. Declining politely protects the patient without escalating the scene.
Scene and Radio
Your patient is unresponsive after a suspected stroke. The patient's spouse is on scene, asking what is happening and where you are taking them. How should you handle this under HIPAA?
- Say nothing until the patient regains capacity and consents
- Use professional judgment and share information directly relevant to the spouse's involvement when it is in the patient's best interest
- Share the patient's complete medical history since they are married
- Tell the spouse to submit a written records request to your agency
Show answer
Correct answer: Use professional judgment and share information directly relevant to the spouse's involvement when it is in the patient's best interest
When a patient cannot agree or object, HIPAA lets you use professional judgment to share information with family members involved in the patient's care if it appears to be in the patient's best interest. Telling the spouse what is happening and the destination fits squarely within that permission.
PHI Basics
Which of the following is protected health information (PHI) under HIPAA?
- A patient's first name stored next to their appointment diagnosis
- A hospital's published main phone number
- A fully de-identified research dataset with no identifiers
- A generic brochure about flu season
Show answer
Correct answer: A patient's first name stored next to their appointment diagnosis
PHI is individually identifiable health information transmitted or maintained by a covered entity or business associate, subject to the exclusions in 45 CFR 160.103. A name tied to a diagnosis identifies the person and reveals health information, so it qualifies.
PHI Basics
Which set of data points are all HIPAA identifiers that can make health information individually identifiable?
- Favorite color, shoe size, and zodiac sign
- Full name, medical record number, and email address
- Weather, traffic data, and store hours
- Stock prices, exchange rates, and tax brackets
Show answer
Correct answer: Full name, medical record number, and email address
HIPAA lists 18 identifiers including names, medical record numbers, and email addresses. When any of these are linked to health information, the data becomes PHI.
FAQ
HIPAA questions emts and first responders actually ask
Does HIPAA apply to EMS agencies, fire-based EMS, and volunteer squads?
Yes, in most cases. An ambulance service becomes a HIPAA covered entity when it bills electronically for transports, which nearly every agency that bills Medicare or insurance does. Fire departments that run EMS are typically covered for the healthcare side of their operations, and volunteers count as workforce members just like paid staff. If your agency is covered, everyone who touches patient information needs training.
Are radio reports to the receiving hospital a HIPAA violation?
No. Giving a patient report to the receiving ED is a treatment disclosure, which HIPAA permits without patient authorization. Because open radio channels can be monitored by scanners, agencies apply reasonable safeguards, such as using unit numbers and clinical details instead of patient names. If someone overhears a report despite those safeguards, it is an incidental disclosure, not a violation.
What can we tell police officers at a scene?
HIPAA permits certain law enforcement disclosures without authorization, such as information required by state law (like mandatory gunshot wound reports), limited identifying details to help locate a suspect or missing person, and alerting police to a crime you encounter during an emergency response. It does not let you hand over a complete run report just because an officer asks. Full records generally require a court order, subpoena, patient authorization, or another specific legal basis, so route those requests through your agency's process.
Do bystanders filming a scene violate HIPAA?
No. HIPAA only regulates covered entities, business associates, and their workforce members, so members of the public filming from a sidewalk are outside the rule. Your crew is a different story: photos, videos, or social media posts by responders about a call can be impermissible disclosures even without a name. Crews should still use reasonable safeguards on scene, like positioning the stretcher or a sheet to limit exposure where practical.
Keep going
HIPAA resources for emts and first responders
Guide
HIPAA Training for EMTs and Paramedics
Role-based HIPAA certification covering dispatch communication, mobile charting, transport handoffs, and scene-level privacy safeguards.
Read moreGuide
HIPAA Mobile Device Policy
How to secure the tablets, phones, and ePCR devices your crews carry in the rig every shift.
Read moreGuide
HIPAA Breach Notification Guide
What happens after PHI is lost or exposed, including deadlines and who must be notified.
Read moreWant the broadest version? Take the general HIPAA practice test with the full 40-question pool.
From practice to proof