HIPAA and GDPR Cloud Compliance Essentials

1. What must a cloud provider do to remain HIPAA compliant when storing patient data?

Use encryption and access controls

Maintain audit logs

Conduct risk assessments

All of the above

Submit

7. Cloud providers can access patient data without restrictions if they are HIPAA-certified. True or False?

True

False

8. A Data Protection Impact Assessment (DPIA) is required under GDPR for high-risk processing. True or False?

True

False

9. HIPAA applies only to healthcare providers. True or False?

True

False

10. Under GDPR, consent must be obtained before processing personal data. True or False?

True

False

11. Which regulation primarily protects health information privacy in the United States?

HIPAA

GDPR

PCI DSS

SOC 2

12. GDPR requires organizations to notify authorities of data breaches within how many days?

24 hours

48 hours

72 hours

30 days

13. Which HIPAA component addresses the secure transmission of health information?

Security Rule

Privacy Rule

Breach Notification Rule

Administrative Procedures

14. Under GDPR, what is the default data retention period before deletion?

Organizations determine it

30 days

1 year

5 years

15. HIPAA requires covered entities to implement which type of safeguard?

Administrative safeguards only

Physical safeguards only

Administrative, physical, and technical safeguards

Encryption safeguards only

16. What is the maximum fine for GDPR violations?

$50,000

€10 million or 2% of revenue

€20 million or 4% of revenue

$1 million

17. Which entity must sign a Business Associate Agreement (BAA) when handling HIPAA-protected health information?

Cloud service providers

Data processors

Covered entities

All of the above

18. Under GDPR, individuals have the right to request deletion of their personal data. What is this right called?

Right to access

Right to be forgotten

Right to rectification

Right to portability

19. What is the primary purpose of HIPAA's Privacy Rule?

Prevent data breaches

Protect patient health information

Encrypt all data

Audit cloud providers

20. GDPR applies to organizations processing personal data of residents in which region?

North America

European Union

Asia Pacific

Latin America

Cloud+ HIPAA and GDPR Cloud Compliance Basics Quiz

1. What must a cloud provider do to remain HIPAA compliant when storing patient data?

2.

What first name or nickname would you like us to use?

2. Cloud providers storing HIPAA data must implement ______ to protect information in transit and at rest.

3. GDPR defines ______ as any information relating to an identified or identifiable natural person.

4. The HIPAA ______ Rule requires notification of breaches affecting more than 500 residents.

5. Under GDPR, a ______ is responsible for overseeing data protection compliance in an organization.

6. HIPAA's minimum necessary principle requires using only the ______ amount of protected health information needed.

7. Cloud providers can access patient data without restrictions if they are HIPAA-certified. True or False?

8. A Data Protection Impact Assessment (DPIA) is required under GDPR for high-risk processing. True or False?

9. HIPAA applies only to healthcare providers. True or False?

10. Under GDPR, consent must be obtained before processing personal data. True or False?

11. Which regulation primarily protects health information privacy in the United States?

12. GDPR requires organizations to notify authorities of data breaches within how many days?

13. Which HIPAA component addresses the secure transmission of health information?

14. Under GDPR, what is the default data retention period before deletion?

15. HIPAA requires covered entities to implement which type of safeguard?

16. What is the maximum fine for GDPR violations?

17. Which entity must sign a Business Associate Agreement (BAA) when handling HIPAA-protected health information?

18. Under GDPR, individuals have the right to request deletion of their personal data. What is this right called?

19. What is the primary purpose of HIPAA's Privacy Rule?

20. GDPR applies to organizations processing personal data of residents in which region?