Completely free
No account walls, no upsell
Free exam prep for every test — 20,000+ exam pages and 2.4M+ practice questions.
Open free CHPC prep resources ↗Exam facts & prep options
Certified in Healthcare Privacy Compliance (CHPC)
The Certified in Healthcare Privacy Compliance (CHPC) is a professional certification exam developed and managed by the Compliance Certification Board (CCB), the certification body established in 1999 whose Board of Directors is appointed by the Society of Corporate Compliance and Ethics & Health Care Compliance Association (SCCE & HCCA). It is a two-hour, 120-question multiple-choice exam (100 scored, 20 unscored pretest) covering healthcare privacy compliance (HIPAA Privacy and Security, FERPA, GINA, breach response, privacy program oversight), delivered as a computer-based test at PSI testing centers, as a remotely proctored online test, or on paper at select SCCE/HCCA events. The minimum passing score is set by the Angoff method; the credential is valid for two years and renewed with 40 CCB CEUs and a renewal fee.
Official exam siteJump to prep options ↓
Questions120 multiple-choice questions, of which 100 are scored and 20 are unscored pretest items
Testing time2 hours of testing time; the exam program terminates if the two-hour limit is exceeded
ScoringPass/fail determined by raw score (number of correct answers) on the 100 scored questions; minimum passing score set by the Angoff method — no fixed passing percentage is published; content-area sub-scores are reported for information only and do not affect the pass/fail decision
Exam feeUSD 350 exam application fee for SCCE or HCCA members / USD 450 for non-members; USD 75 re-exam/rescheduling fee; USD 25 duplicate score report; USD 25 score verification; renewal fee USD 145 member / USD 265 non-member plus USD 50 monthly renewal extension (two-month maximum)
Prep options
Study resources for CHPC
Independent prep
Courses and study resources
Exam overview
What to know before choosing your prep
- Who runs it
- CCB
- Category
- Healthcare Compliance & Privacy
- Current version
- Current specification; no public version label (single current CHPC exam per the 2025 CHPC Candidate Handbook Detailed Content Outline; initial base form passing point approved by October 2019, future passing points established through pre-equating)
- Where it applies
- United States — national
- Exam languages
- English
- Score scale
- Raw score out of the 100 scored questions, reported with raw scores by major content category; no scaled score
- Testing provider
- PSI Services, Inc. (PSI testing centers, remote proctoring, scoring, and score reporting under contract to CCB)
- Format
- Computer-based test at PSI testing centers (by appointment), or computer-based Remote Proctored Test from a location of the candidate's choosing, or paper-and-pencil following an SCCE or HCCA event; CBT/RPT delivered one question per screen with review/bookmark capability; a practice exam precedes the timed CBT exam
- Availability
- By appointment: PSI U.S. testing centers schedule Monday through Saturday as early as five business days after PSI's confirmation; remote proctored tests any day of the week as early as two business days after confirmation; paper-and-pencil administrations only following select SCCE/HCCA events; not offered on most federally recognized U.S. holidays
- Results
- Remote Proctored and U.S. CBT candidates in most instances receive pass/fail results immediately after completing the exam (detailed score report from PSI by mail within ten business days if not received on site); international CBT and remote candidates receive the PSI score report by mail within ten business days; paper-and-pencil candidates receive results within 4-6 weeks
- Credential validity
- CHPC certification is valid for two years from the month the exam was passed; renewed with 40 CCB CEUs (minimum 20 from live training) plus the renewal fee, or by retaking the current form of the exam
- Remote testing
- Available
Exam structure
Single 120-item multiple-choice exam (100 scored) across seven scored content areas: Privacy Standards, Policies, and Procedures (13 items); Privacy Compliance Program Oversight (25); Screening/Evaluation of Employees, Physicians, Vendors and Other Agents (7); Communication, Education and Training on Privacy Issues (12); Privacy Monitoring, Auditing, and Internal Reporting Systems (16); Discipline for Non-Compliance (10); Investigations and Remedial Measures (17); plus unscored pretest items; items span recall and application cognitive levels
Where rules vary
U.S. healthcare compliance credential: the exam content is built on U.S. healthcare privacy law and regulation (HIPAA Privacy and Security, HITECH, FERPA, GINA, OIG, OCR, FTC) and the credential is uniform nationwide; PSI international testing centers exist for delivery, but the body of knowledge tested is U.S. law
Eligibility
Eligibility requires ALL of: (1) professional experience — at least one year in a full-time compliance position or 1,500 hours of direct compliance job duties earned in the two years preceding application (job duties must relate to the Detailed Content Outline), or completion of a CCB-accredited university compliance certificate program within set time limits; and (2) 20 CCB-approved CEUs earned within the 12 months before the exam date, including a minimum of 10 from live trainings; SCCE/HCCA membership is NOT required
Retake policy
Failed candidates retest by submitting a re-exam application with fresh 20 CEUs earned within 12 months of the anticipated retesting date; a candidate who fails two exam attempts within a 180-day period must wait 180 days from the most recent exam date before reapplying; re-exam/rescheduling fee USD 75 (based on CEUs on file), otherwise the full exam application fee applies