Community QuestionSeen on 6 CBTs

If you're unsure about the particulars of HIPAA research requirements at your organization or have questions, you can usually consult with:

Community-sourced. Answers may be wrong or out of date. Always verify with your official training portal before submitting. Not affiliated with any branch, agency, or vendor. Details.
Answer

An organizational IRB or Privacy Board, privacy official ("Privacy Officer"), or security official ("Security Officer"), depending on the issue.

2 of 6 indexed CBT versions give this answer·Answer index rebuilt Aug 16, 2026

The indexed versions don't agree on this one

This question appears on 6 CBT versions we've indexed, and they don't all give the same answer. Exam editions change and answer keys get re-cut, so more than one of these was correct on the test it came from. Here is each of them, and how many versions give it.

2 of 6 versionsmost versions

An organizational IRB or Privacy Board, privacy official ("Privacy Officer"), or security official ("Security Officer"), depending on the issue.

Citi Hipaa Training · Ucla Hipaa Training

2 of 6 versions

An organizational IRB or Privacy Board, privacy officer ("Privacy Officer"), or privacy official ("Privacy Official"), depending on the issue.

Hipaa Recruiting Into Research · The Hipaa Minimum Necessary Standard Applies

1 of 6 version

No, they are not engaged because they are only informing the subjects and not consenting or performing any research procedures, or receiving or sharing any private, identifiable information.

Hipaa Authorization Has Which Of The Following Characteristics

1 of 6 version

For all human subjects research that uses PHI without an authorization from the data subject, except for limited data sets.

The Hipaa Minimum Necessary Standard Applies Citi

Know which one your test keyed? One click. No account needed.