Font size
WorksheetsMedical Law, Ethics, and Compliance Practice Questions
Total questions: 27
Worksheet time: 15mins
Which scenario best demonstrates compliance with HIPAA’s minimum necessary standard when releasing PHI to an insurer?
Providing full progress notes and lab histories
Transmitting all demographics and employment data
Sharing only diagnosis, dates, and billing codes
Sending entire chart including psychotherapy notes
A patient requests an amendment to a lab result. What is the appropriate administrative action?
Delete the result and reissue corrected value
Alter the original result immediately
Deny all amendments by policy
Review, log request, and append clarification
Match each protected identifier under HIPAA to its category.
Email address
Contact information
Social Security number
Government-issued identifier
Phone number
Contact information
An employee accesses a neighbor’s record out of curiosity. What HIPAA penalty category most likely applies?
Willful neglect not corrected
Willful neglect corrected promptly
Reasonable cause without willful neglect
Unknown and unavoidable circumstance
Which action best safeguards electronic PHI in a clinical workstation area?
Disable screensavers entirely
Use screen savers with password lock
Keep the monitor always on
Share one login for faster access
Fill in the blank: The Patient’s Bill of Rights includes the right to (a) a medical treatment.
Which consent type is most appropriate for routine venipuncture in an ambulatory clinic?
Waived consent due to emergency
Express written consent on legal form
Implied consent by patient cooperation
Informed consent after full disclosure
A clinic experiences a mobile device theft containing PHI. Which immediate step aligns with security safeguards?
Wait until end of quarter to assess risk
Activate remote wipe and change credentials
Notify OSHA for workplace safety evaluation
Post a sign about lost property procedures
Match each reportable situation to the appropriate agency or authority.
Child abuse suspicion
Child protective services
Communicable disease case
Public health department
Gunshot wound treatment
Law enforcement
Which policy best meets storage and retention requirements for medical records?
Destroy records after one year routinely
Permanent retention of all paper files
Follow state retention schedules and secure storage
Convert to photos and store on personal phones
A medical assistant notices a medication error. What is the correct incident reporting action?
File an incident report promptly
Delete the entry from the chart
Wait for physician to discover it
Inform patient only and move on
Which statement correctly distinguishes OSHA from TJC in a healthcare setting?
OSHA sets workplace safety rules; TJC accredits quality standards
OSHA oversees consent law; TJC regulates malpractice
OSHA defines HIPAA privacy; TJC enforces data encryption
OSHA accredits hospitals; TJC manages employment law
A patient requests to see their record and obtain a second opinion. Which right applies?
Right to medical record ownership
Right to access and seek a second opinion
Right to peer-to-peer information sharing
Right to professional code of ethics
Within legal scope of practice, which administrative task is appropriate for a medical assistant?
Diagnosing and prescribing medications
Explaining billing codes and scheduling
Approving surgical consent documents
Interpreting imaging results clinically
Which scenario requires mandatory reporting even without patient consent?
Request for record transfer to a specialist
Patient asking for lab clarification
Routine insurance claim submission
Suspected elder abuse in long-term care
Match each HIPAA Privacy or Security safeguard with its example.
Access control
Unique user IDs and role-based permissions
Data transmission security
Encrypted email for PHI, secure portals
Workstation security
Screen visors and auto-lock timers
Audit controls
Logs tracking access and changes
Is it allowed for Jack's son to obtain a copy of his father's medical chart from Dr. Adams without any formal procedure?
Yes, immediate family members have the legal right to view charts
Yes, but only if Jack Thompson is made aware and signs a release form
No, only the healthcare team can have access to the chart
Yes, if the son gets a letter from a lawyer requesting the chart
A living will is an example of
Advance directives
HIPAA
Informed consent
A constitutional right
Is a DNR tattoo considered an acceptable document for DNR status?
Yes
No
If the tattoo includes a signature
As long as it is not X'd out
Patient autonomy refers to a patient's right to
Make medical decisions on behalf of loved ones
Receive emergency care anywhere
Make a grievance
Make choices impacting their own health
A doctor should take into account a patient's lifestyle and personal health goals when providing treatment options.
True
False
What is the purpose of record retention policies?
To increase productivity and efficiency
To reduce storage costs
The purpose of record retention policies is to ensure compliance, mitigate legal risks, facilitate audits, and ensure the availability of necessary information.
To improve data security
The purpose of professional codes of ethics:
Healthcare organizations policy and it should be followed
To control behavior of members
To increase the level of competence and standard of care within the group
To earn more money from the patients
You have a patient who has stopped breathing and has no signs of circulation. You notice a medical alert bracelet indicating the patient is a registered organ donor. This patient will be able to provide ________ consent.
informed
implied
expressed
competent
