Regulatory Compliance & Legal Framework Flashcards
7 cards from real CMC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Compliance & Legal Framework flashcards as text
A nurse discovers that a colleague accessed a cardiac patient's records without a clinical need. The appropriate first action is to:
Answer: Report the incident through the hospital's privacy compliance officer or established reporting channel
Unauthorized access to PHI must be reported to the privacy compliance officer per HIPAA breach response procedures.
Under CMS Conditions of Participation, a hospital's cardiac surgery program must maintain quality improvement activities including:
Answer: Peer review of outcomes data and mortality review
CMS CoPs require ongoing quality assessment and performance improvement activities including peer review of clinical outcomes.
A pharmaceutical representative offers a cardiologist tickets to a sporting event in exchange for prescribing their anticoagulant. This violates:
Answer: The Anti-Kickback Statute
The Anti-Kickback Statute prohibits offering or accepting remuneration to induce referrals or prescriptions for federally reimbursable services.
Which consent doctrine requires that a cardiologist disclose information that a reasonable patient would want to know before agreeing to cardiac catheterization?
Answer: The patient-centered (reasonable patient) standard
The patient-centered standard focuses on what a reasonable patient would need to know to make an informed decision, not just what physicians typically disclose.
A hospital receives a subpoena for a cardiac patient's medical records in a malpractice case. Under HIPAA, the hospital may disclose the records:
Answer: Pursuant to the subpoena if proper legal procedures are followed, such as a qualified protective order
HIPAA permits disclosure in response to legal proceedings if the request meets specific procedural requirements including a qualified protective order.
Sentinel event reporting to The Joint Commission is:
Answer: Voluntary but encouraged, with a root cause analysis required if reported
TJC sentinel event reporting is voluntary, but accredited organizations must complete a root cause analysis if they choose to report.
A cardiac patient wishes to be resuscitated but their family insists on a DNR order. The legally and ethically correct action is to:
Answer: Honor the patient's wishes if they have decision-making capacity
A competent patient's autonomous decision to be resuscitated supersedes family preferences; patient autonomy is the legal and ethical standard.