Legal, Ethical & Regulatory Compliance Flashcards
7 cards from real CTP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Legal, Ethical & Regulatory Compliance flashcards as text
A patient in State A consults a telehealth provider licensed only in State B. Which legal principle most directly governs this situation?
Answer: The provider's state licensing requirements apply to where the patient is located
Most states require providers to be licensed in the state where the patient is physically located at the time of the telehealth visit.
Under the Ryan Haight Online Pharmacy Consumer Protection Act, what is generally required before prescribing controlled substances via telehealth?
Answer: At least one in-person medical evaluation
The Ryan Haight Act requires at least one in-person evaluation before a practitioner may prescribe controlled substances via the internet or telehealth.
Which federal agency enforces HIPAA Privacy and Security Rules for healthcare providers?
Answer: Office for Civil Rights (OCR) within HHS
The HHS Office for Civil Rights (OCR) is responsible for enforcing HIPAA Privacy and Security Rules.
A telehealth provider wants to record a session for quality improvement. What is the FIRST required step?
Answer: Obtain informed consent from the patient before recording
Patient informed consent must be obtained before recording any telehealth session, as recording without consent may violate wiretapping and privacy laws.
Which of the following best describes 'practice drift' in a telehealth compliance context?
Answer: A provider gradually expanding services beyond their licensed scope of practice
Practice drift refers to a clinician gradually expanding services beyond their licensed or credentialed scope, which is a compliance and liability risk in telehealth.
Under the ADA, what obligation do telehealth platforms generally have regarding patients with disabilities?
Answer: Provide reasonable accommodations such as captioning or ASL interpreters
The Americans with Disabilities Act requires telehealth providers to offer reasonable accommodations, such as captioning or sign language interpretation, to ensure accessible care.
A telehealth platform stores patient records on a third-party cloud server. Which HIPAA agreement is mandatory?
Answer: Business Associate Agreement (BAA)
A Business Associate Agreement (BAA) is required under HIPAA whenever a covered entity shares PHI with a third-party vendor or cloud service provider.