AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/hipaa-operations-training

A hospital uses real charts to review how well its nurses perform. Which HIPAA category is that?

Health care operations.

Start playing free

  1. Health care operations ✔
  2. Treatment
  3. Research that needs authorization

Why: Health care operations include quality improvement, reviewing staff competence and performance, and supervised training programs. They're permitted without the patient's authorization.

Huh, didn't know that: If gaining generalizable knowledge is the main goal, the activity is research, not quality improvement.

The dad joke
Whiteboards are remarkable.
Like this card?
Play the game

References

Answer: Health care operations. Health care operations include quality improvement, reviewing staff competence and performance, and supervised training programs. They're permitted without the patient's authorization.

  1. 45 CFR 164.501 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.501
    Reviewing the competence or qualifications of health care professionals, evaluating practitioner and provider performance
    Checked 2026-10-10.
  2. 45 CFR 164.501 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.501
    provided that the obtaining of generalizable knowledge is not the primary purpose of any studies
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Healthcare Privacy (HIPAA)Does HIPAA protect patient information that is spoken out loud, or only paper and computer records?Healthcare Privacy (HIPAA)A hospital's HR office keeps Dana's pre-hire physical in Dana's personnel file, as the employer. Is that file PHI?Healthcare Privacy (HIPAA)For how long after a person dies must a covered entity keep protecting that person's health information?

That's stuff everyone should know.