Regulatory Compliance & Legal Framework Flashcards
7 cards from real CMAS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Compliance & Legal Framework flashcards as text
Under the Anti-Kickback Statute, which of the following arrangements is MOST likely to be considered a safe harbor?
Answer: A rental agreement between a hospital and a physician at fair market value for legitimate space
Safe harbors under the Anti-Kickback Statute include space rental agreements set at fair market value that are not based on referral volume.
The Stark Law primarily governs which type of prohibited conduct in healthcare?
Answer: Physicians self-referring patients to entities in which they have a financial relationship for designated health services
The Stark Law (Physician Self-Referral Law) prohibits physicians from referring Medicare/Medicaid patients to entities where the physician or an immediate family member has a financial relationship, unless an exception applies.
A covered entity under HIPAA discovers a breach affecting 600 patients. Which notification steps are required?
Answer: Notify affected individuals and the HHS Secretary; media notice required if over 500 in one state
Breaches affecting 500 or more individuals in a single state require notification to affected individuals, the HHS Secretary, and prominent local media outlets.
Which federal law requires employers to maintain a safe and healthful workplace, including exposure controls for bloodborne pathogens in medical settings?
Answer: OSHA
OSHA (Occupational Safety and Health Administration) enforces workplace safety standards, including the Bloodborne Pathogens Standard applicable to healthcare settings.
Under CLIA (Clinical Laboratory Improvement Amendments), laboratories performing moderate-complexity testing must meet which requirement?
Answer: Must meet personnel, quality control, and proficiency testing standards
Moderate-complexity labs under CLIA must comply with specific personnel qualifications, quality control procedures, and proficiency testing requirements.
The HITECH Act expanded HIPAA enforcement by:
Answer: Extending HIPAA Privacy and Security Rules to business associates and increasing penalty tiers
HITECH directly extended HIPAA obligations to business associates and introduced a tiered civil monetary penalty structure based on culpability.
A medical administrative specialist receives a subpoena duces tecum for a patient's records. What is the appropriate action?
Answer: Consult with the healthcare provider or legal counsel before releasing records, as a court order may be required
A subpoena duces tecum requires careful review; legal counsel should be consulted to determine whether patient authorization or a court order is needed before releasing protected health information.