Healthcare Laws & Ethics Flashcards
7 cards from real CMAS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Healthcare Laws & Ethics flashcards as text
Under HITECH Act provisions, a covered entity must notify affected individuals of a PHI breach within:
Answer: 60 calendar days of discovery
The HITECH Act requires covered entities to notify affected individuals of a breach without unreasonable delay and no later than 60 calendar days after discovery.
Which scenario represents a violation of patient confidentiality by a medical administrative specialist?
Answer: Discussing a patient's diagnosis in a crowded waiting room
Discussing identifiable patient information in a public area where others can overhear violates HIPAA's confidentiality requirements.
A patient who has been fully informed of the risks, benefits, and alternatives of a procedure and voluntarily agrees to it has provided:
Answer: Informed consent
Informed consent requires full disclosure of risks, benefits, and alternatives, followed by the patient's voluntary agreement to proceed.
The Anti-Kickback Statute prohibits offering, paying, soliciting, or receiving anything of value to induce or reward referrals of items or services covered by:
Answer: Federal healthcare programs such as Medicare and Medicaid
The Anti-Kickback Statute applies specifically to referrals for items or services reimbursable by federal healthcare programs like Medicare and Medicaid.
A patient's right to make decisions about their own healthcare, including the right to refuse treatment, is an example of which bioethical principle?
Answer: Autonomy
Autonomy is the ethical principle recognizing an individual's right to make their own informed healthcare decisions, including refusal of treatment.
When a deceased patient's records are requested by their executor, the covered entity should:
Answer: verify the executor's legal authority and follow state law and HIPAA's 50-year post-death rule
HIPAA protects PHI of deceased individuals for 50 years after death; release to an authorized representative such as a legal executor is permitted following verification.
Which of the following best describes 'fraud' in the healthcare billing context?
Answer: Intentional misrepresentation to obtain unauthorized payment
Healthcare fraud involves intentional misrepresentation or deception — such as upcoding or billing for services not rendered — to obtain payment fraudulently.