Certified Public Procurement Officer (CPPO) Practice Test

Access More Questions

A FERPA-covered university student receives care at the university's campus health clinic. The clinic's records on that student are generally governed by which federal privacy framework?

HIPAA only, because the clinic provides health care FERPA, because student education or treatment records are excluded from HIPAA PHI The FTC Health Breach Notification Rule only GLBA only

Correct Answer:

FERPA, because student education or treatment records are excluded from HIPAA PHI

Explanation:

Health records maintained by a FERPA-covered postsecondary institution about its student patients are generally education records or treatment records under FERPA and are excluded from the HIPAA definition of PHI. HIPAA may still apply to records of nonstudent patients if the institution is a covered entity.

Access more questions from this quiz

Continue to Certified Public Procurement Officer (CPPO) Practice Test for more practice questions and the full quiz experience.

Access More Questions