HIPAA practice test for telehealth and remote workers
Free HIPAA practice test for telehealth and remote workers.
You chart from a spare bedroom, take video visits over home Wi-Fi, and field patient calls while a smart speaker listens from the kitchen counter. Working remotely does not shrink your HIPAA obligations, it moves them into your house. These scenarios test whether your home setup, your devices, and your virtual visit habits would hold up to scrutiny.
This practice test mixes nine telehealth and remote work scenarios with core HIPAA questions every workforce member should be able to answer.
Question basis: federal HIPAA rules and HHS/OCR guidance. State privacy laws and your organization's policies may be stricter.
Free practice test
Start the HIPAA practice test for telehealth and remote workers
20 multiple-choice questions across the Privacy Rule, Security Rule, breach notification, business associates, and real workplace scenarios. You see whether each answer is right as you go. At the end you unlock your scored results, full explanations, and a short study plan.
This practice test helps you study. It is not a substitute for completing the HIPAA course, passing its graded assessment, and earning a dated certificate.
Sample questions
HIPAA quiz questions and answers for telehealth and remote workers
Home Office Setup
You deliver video visits from a spare room at home. Mid-session, a family member walks in behind you while the patient's chart is open and the audio is playing on speakers. What should your standard setup be?
- Nothing needs to change, because family members do not count as unauthorized people under HIPAA
- Stop offering telehealth from home, since HIPAA prohibits virtual care outside a clinic
- Work in a private space with the door closed, use headphones, and position your screen away from doorways and windows
- Continue as usual but ask patients to avoid mentioning anything sensitive on video
Show answer
Correct answer: Work in a private space with the door closed, use headphones, and position your screen away from doorways and windows
Reasonable safeguards travel with you. Household members are not part of your workforce and have no right to see or hear PHI, so a private room, headphones, and a shielded screen are the baseline for virtual care at home. HIPAA does not ban home-based telehealth, it expects you to protect it.
Virtual Visits
A longtime patient asks to hold their next virtual session over a public livestream app because it is already installed on their phone. How should you respond?
- Agree, since patient convenience overrides platform rules
- Decline and use your organization's approved telehealth platform, because public-facing video apps are not appropriate for patient care
- Agree if the patient signs a waiver accepting the risk
- Agree but keep the session short to limit exposure
Show answer
Correct answer: Decline and use your organization's approved telehealth platform, because public-facing video apps are not appropriate for patient care
Telehealth should run on non-public-facing platforms the organization has vetted, typically with a BAA in place with the vendor. Public livestream and social video tools broadcast rather than protect, and a patient's willingness does not turn an insecure public channel into a compliant way to deliver care.
Devices and Connections
Your home internet goes out an hour before your telehealth shift, so you move to a coffee shop to keep your appointments. Which precaution matters most for HIPAA?
- Sit near the window so your video quality looks professional
- Join the shop's open Wi-Fi directly, since the telehealth platform handles all security on its own
- Reschedule every visit, because HIPAA bans clinical work outside your home
- Connect through your organization's VPN or another approved secure connection, wear headphones, and shield your screen from other customers
Show answer
Correct answer: Connect through your organization's VPN or another approved secure connection, wear headphones, and shield your screen from other customers
Public networks and public spaces add interception and observation risks. The Security Rule expects transmission security and workstation safeguards wherever you work, so an encrypted approved connection plus headphones and a shielded screen is the minimum, and your remote work policy may restrict public locations further.
PHI Basics
Which of the following is protected health information (PHI) under HIPAA?
- A patient's first name stored next to their appointment diagnosis
- A hospital's published main phone number
- A fully de-identified research dataset with no identifiers
- A generic brochure about flu season
Show answer
Correct answer: A patient's first name stored next to their appointment diagnosis
PHI is individually identifiable health information transmitted or maintained by a covered entity or business associate, subject to the exclusions in 45 CFR 160.103. A name tied to a diagnosis identifies the person and reveals health information, so it qualifies.
PHI Basics
Which set of data points are all HIPAA identifiers that can make health information individually identifiable?
- Favorite color, shoe size, and zodiac sign
- Full name, medical record number, and email address
- Weather, traffic data, and store hours
- Stock prices, exchange rates, and tax brackets
Show answer
Correct answer: Full name, medical record number, and email address
HIPAA lists 18 identifiers including names, medical record numbers, and email addresses. When any of these are linked to health information, the data becomes PHI.
FAQ
HIPAA questions telehealth and remote workers actually ask
Can I still run telehealth visits over FaceTime, Skype, or a free consumer video app?
The COVID-era enforcement discretion that tolerated everyday consumer video apps ended in 2023, so normal HIPAA rules apply again. Virtual care should run on a non-public-facing platform your organization has vetted, with safeguards like encryption and access controls, and the vendor should sign a business associate agreement. Public-facing tools that broadcast, such as livestream features on social apps, were never acceptable for telehealth and still are not. When in doubt, use the platform your organization has approved.
Do I need a VPN to access patient records from home?
HIPAA does not name a specific technology, but the Security Rule requires protecting electronic PHI in transit and controlling who can access it. For most remote workers that translates into a company VPN or another encrypted, approved connection, plus unique logins and multi-factor authentication. Your organization's remote work policy defines the exact setup, and connecting to the EHR over open public Wi-Fi without those protections is the kind of gap the rule exists to prevent.
Is it a HIPAA problem that my family is home while I do telehealth visits?
Sharing a house with family is fine; letting them see or hear patient information is not. Household members are not part of your workforce, so the goal is reasonable safeguards: a private room with the door closed, headphones during visits and calls, a screen positioned away from doorways, and a locked device whenever you step away. If someone can casually overhear a session or read your screen, your setup needs to change.
Can I print patient documents on my home printer?
It depends on your organization's policy, and many remote work policies restrict or prohibit it because loose paper at home is hard to secure and hard to destroy properly. If printing is permitted, the pages carry the same obligations as paper charts in a clinic: locked storage away from household members and destruction by shredding or another approved method. Household trash or recycling is never an acceptable way to dispose of patient information.
Keep going
HIPAA resources for telehealth and remote workers
Guide
Telehealth HIPAA Compliance
Secure telehealth sessions, approved platforms, and digital PHI handling for virtual care teams.
Read moreGuide
HIPAA for Remote Work
Remote workforce safeguards for devices, VPNs, and home office security.
Read moreGuide
HIPAA Training for Virtual Assistants
Remote-first HIPAA training for virtual assistants and administrative contractors.
Read moreWant the broadest version? Take the general HIPAA practice test with the full 40-question pool.
From practice to proof