Regulatory Compliance & Legal Framework Flashcards
7 cards from real CMAS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Compliance & Legal Framework flashcards as text
Which federal act established the legal framework for electronic health record (EHR) adoption and created the 'Meaningful Use' incentive program?
Answer: HITECH Act (2009) as part of ARRA
The Health Information Technology for Economic and Clinical Health (HITECH) Act, enacted as part of the American Recovery and Reinvestment Act of 2009, established Meaningful Use incentives for EHR adoption.
A patient requests an amendment to their medical record because they believe information is inaccurate. Under HIPAA, the covered entity:
Answer: May deny the request but must document the denial and allow the patient to submit a statement of disagreement
HIPAA gives patients the right to request amendments; covered entities may deny the request if the record is accurate and complete, but must provide a written denial and allow a statement of disagreement.
Under the Medicare Conditions of Participation (CoPs), hospitals must complete a medical record for each patient within how many days of discharge?
Answer: 30 days
CMS Conditions of Participation require hospitals to complete medical records within 30 days following a patient's discharge.
Which of the following best describes the purpose of a Business Associate Agreement (BAA) under HIPAA?
Answer: It establishes the permitted uses of PHI by a vendor and holds the vendor accountable for safeguarding it
A BAA is a contract that outlines how a business associate may use PHI, requires appropriate safeguards, and allocates compliance responsibilities between the covered entity and the vendor.
The legal concept of 'statute of limitations' in medical malpractice cases refers to:
Answer: The time period within which a patient must file a malpractice lawsuit or lose the right to do so
The statute of limitations sets the legal deadline for filing a malpractice claim; if the patient does not file within this period, the claim is barred regardless of its merits.
When a healthcare provider terminates the physician-patient relationship, which action is essential to avoid charges of patient abandonment?
Answer: Providing written notice, continuing care for a reasonable transition period, and assisting with referrals
Proper termination requires written notice to the patient, continued care for a reasonable period (commonly 30 days), and assistance with finding alternative care to avoid patient abandonment claims.
Under HIPAA's Security Rule, which category of safeguards addresses physical measures such as facility access controls and workstation security?
Answer: Physical safeguards
The HIPAA Security Rule's physical safeguards category covers tangible protections such as facility access controls, workstation use policies, and device and media controls.