Ethics and Confidentiality Flashcards
7 cards from real CAC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Ethics and Confidentiality flashcards as text
Under HIPAA, within what maximum timeframe must an acupuncturist notify affected patients after discovering a breach of unsecured PHI?
Answer: 60 days
The HIPAA Breach Notification Rule requires individual notice without unreasonable delay and no later than 60 calendar days after discovery.
A patient requests a copy of their acupuncture treatment records. Under HIPAA, how long does the practice generally have to respond?
Answer: 30 days, with one possible 30-day extension
HIPAA requires action on access requests within 30 days, extendable once by 30 days with written notice.
Which principle requires an acupuncturist to disclose only the PHI needed to accomplish the purpose of a disclosure?
Answer: Minimum necessary standard
The minimum necessary standard limits uses and disclosures of PHI to what is reasonably needed for the purpose.
A billing company that processes claims for an acupuncture clinic and accesses PHI must sign what document?
Answer: Business Associate Agreement
Vendors that handle PHI on a covered entity's behalf are business associates and require a Business Associate Agreement.
A patient pays in full out of pocket and asks that the visit not be disclosed to their health plan. What must the acupuncturist do?
Answer: Agree to the restriction, as HIPAA requires it in this case
HIPAA requires providers to honor restrictions on disclosures to a health plan for services paid in full out of pocket.
Which of the following is the BEST example of valid informed consent before acupuncture?
Answer: The practitioner explains risks, benefits, and alternatives and the competent patient agrees
Valid informed consent requires disclosure of risks, benefits, and alternatives to a competent patient who voluntarily agrees.
An acupuncturist receives a referral fee from a supplement company for each patient sent to buy its products. This is best described as:
Answer: An ethical conflict of interest that should be avoided
Receiving compensation for steering patients creates a conflict of interest that compromises professional judgment.