CCHP Governance and Administration 3 — Questions and Answers
Question 1: A health services administrator discovers that a custody officer has been reading patient medical records without authorization. The FIRST action should be:
- Immediately terminate the officer's employment
- Report the breach to the privacy officer and initiate a formal HIPAA breach assessment (Correct answer)
- Warn the officer verbally and monitor for repeat occurrences
- Notify all affected patients by certified mail within 24 hours
Correct answer: Report the breach to the privacy officer and initiate a formal HIPAA breach assessment
A potential HIPAA breach requires immediate escalation to the privacy officer to conduct a risk assessment before determining notification obligations.
Question 2: In correctional health care, a 'responsible health authority' (RHA) is best described as:
- The state department of corrections secretary who oversees all prisons
- The individual or entity responsible for health care delivery and accountable to the facility administration (Correct answer)
- The federal judge overseeing a consent decree related to health care
- The medical director who holds clinical authority over all providers
Correct answer: The individual or entity responsible for health care delivery and accountable to the facility administration
NCCHC defines the responsible health authority as the entity or person accountable for health care program operations at a facility.
Question 3: Which of the following BEST describes the purpose of a Memorandum of Understanding (MOU) between a correctional facility and a local hospital?
- To transfer legal liability from the correctional facility to the hospital for all patient care
- To define roles, responsibilities, and procedures for transferring inmates requiring higher-level care (Correct answer)
- To establish a billing arrangement for indigent care provided to inmates
- To satisfy HIPAA requirements for sharing patient information with outside providers
Correct answer: To define roles, responsibilities, and procedures for transferring inmates requiring higher-level care
An MOU formalizes the working relationship and procedures between the correctional facility and the hospital, ensuring smooth coordination for off-site care.
Question 4: A correctional facility's quality improvement program should primarily focus on:
- Documenting compliance with accreditation standards for surveyors
- Systematically identifying, measuring, and improving patient care outcomes and processes (Correct answer)
- Protecting the facility from litigation by documenting policy adherence
- Reducing costs through elimination of unnecessary clinical services
Correct answer: Systematically identifying, measuring, and improving patient care outcomes and processes
QI programs are designed to systematically assess and improve the quality and safety of health care delivery, not primarily for documentation or legal protection.
Question 5: When a vendor proposes a telemedicine contract for specialty services, the health administrator's conflict of interest policy requires disclosure if the administrator:
- Has previously worked in telemedicine administration at any point in their career
- Has a financial interest in the vendor company or a close personal relationship with its principals (Correct answer)
- Believes telemedicine is clinically inferior to in-person specialty care
- Supervised the vendor's staff during a prior correctional health contract
Correct answer: Has a financial interest in the vendor company or a close personal relationship with its principals
Conflict of interest policies require disclosure of financial interests or significant personal relationships that could impair objective decision-making.
Question 6: Which staffing model element is MOST critical to ensuring continuity of health care in a correctional facility operating 24 hours a day?
- Having a physician on-site at all times
- Establishing clear on-call protocols and after-hours emergency response procedures (Correct answer)
- Ensuring all nursing staff hold CCHP certification
- Contracting with a private vendor for all clinical services
Correct answer: Establishing clear on-call protocols and after-hours emergency response procedures
Round-the-clock operations require robust on-call and emergency response protocols so that health needs arising outside regular hours receive timely attention.
Question 7: A state legislature passes a law prohibiting correctional facilities from providing gender-affirming care. A health administrator's MOST appropriate response is to:
- Implement the law immediately without review
- Consult with legal counsel to understand the law's scope and any potential conflicts with constitutional obligations (Correct answer)
- Continue current practices until a court explicitly orders compliance
- Publicly oppose the law and refuse to implement it
Correct answer: Consult with legal counsel to understand the law's scope and any potential conflicts with constitutional obligations
When new legislation potentially conflicts with constitutional health care obligations, the administrator must work with legal counsel to navigate compliance while protecting patient rights.
A health services administrator discovers that a custody officer has been reading patient medical records without authorization.
The FIRST action should be: