Certified Public Procurement Officer (CPPO) Practice Test

How long must a HIPAA covered entity generally retain documentation required by the Privacy Rule?

Two years from creation Three years from the end of the calendar year Six years from creation or the date last in effect, whichever is later Indefinitely in every case

Correct Answer:

Six years from creation or the date last in effect, whichever is later

Explanation:

HIPAA Privacy Rule documentation generally must be retained for six years from the date of creation or the date it last was in effect, whichever is later. This HIPAA documentation rule is distinct from state medical-record retention laws.

Access more questions from this quiz

Continue to Certified Public Procurement Officer (CPPO) Practice Test for more practice questions and the full quiz experience.

Access More Questions