Medical Law, Ethics, and Compliance Practice Questions

Front

Which scenario best demonstrates compliance with HIPAA’s minimum necessary standard when releasing PHI to an insurer? Options: Providing full progress notes and lab histories, Transmitting all demographics and employment data, Sharing only diagnosis, dates, and billing codes, Sending entire chart including psychotherapy notes

Back

Sharing only diagnosis, dates, and billing codes

Front

A patient requests an amendment to a lab result. What is the appropriate administrative action?

Back

Review, log request, and append clarification

Front

An employee accesses a neighbor’s record out of curiosity. What HIPAA penalty category most likely applies?

Back

Willful neglect not corrected

Front

Which action best safeguards electronic PHI in a clinical workstation area? Options: Disable screensavers entirely, Use screen savers with password lock, Keep the monitor always on, Share one login for faster access

Back

Use screen savers with password lock

Front

The Patient’s Bill of Rights includes the right to ______ a medical treatment.

Back

refuse

Front

Which consent type is most appropriate for routine venipuncture in an ambulatory clinic? Options: Waived consent due to emergency, Express written consent on legal form, Implied consent by patient cooperation, Informed consent after full disclosure

Back

Implied consent by patient cooperation

Front

A clinic experiences a mobile device theft containing PHI. Which immediate step aligns with security safeguards?

Back

Activate remote wipe and change credentials

Front

Which policy best meets storage and retention requirements for medical records? Options: Destroy records after one year routinely, Permanent retention of all paper files, Follow state retention schedules and secure storage, Convert to photos and store on personal phones

Back

Follow state retention schedules and secure storage

Front

A medical assistant notices a medication error. What is the correct incident reporting action?

Back

File an incident report promptly

Front

Which statement correctly distinguishes OSHA from TJC in a healthcare setting? Options: OSHA sets workplace safety rules; TJC accredits quality standards, OSHA oversees consent law; TJC regulates malpractice, OSHA defines HIPAA privacy; TJC enforces data encryption, OSHA accredits hospitals; TJC manages employment law

Back

OSHA sets workplace safety rules; TJC accredits quality standards