Community QuestionSeen on 6 CBTs

A covered entity may use or disclose PHI without an authorization, or documentation of a waiver or an alteration of authorization, for all of the following EXCEPT:

Community-sourced. Answers may be wrong or out of date. Always verify with your official training portal before submitting. Not affiliated with any branch, agency, or vendor. Details.
Answer

Data that does not cross state lines when disclosed by the covered entity.

5 of 6 indexed CBT versions give this answer·Answer index rebuilt Aug 16, 2026

The indexed versions don't agree on this one

This question appears on 6 CBT versions we've indexed, and they don't all give the same answer. Exam editions change and answer keys get re-cut, so more than one of these was correct on the test it came from. Here is each of them, and how many versions give it.

5 of 6 versionsmost versions

Data that does not cross state lines when disclosed by the covered entity.

Citi Hipaa Training · Hipaa Authorization Has Which Of The Following Characteristics · Hipaa Recruiting Into Research · +2 more

1 of 6 version

An organizational IRB or Privacy Board, privacy official ("Privacy Officer"), or security official ("Security Officer"), depending on the issue.

The Hipaa Minimum Necessary Standard Applies Citi

Know which one your test keyed? One click. No account needed.