Legal, Ethical & Regulatory Compliance Flashcards
7 cards from real CTP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Legal, Ethical & Regulatory Compliance flashcards as text
Which ethical principle is MOST directly implicated when a telehealth provider fails to disclose limitations of remote diagnosis?
Answer: Informed consent / Autonomy
Failing to disclose limitations of remote diagnosis violates informed consent, which is rooted in the ethical principle of patient autonomy.
When a minor patient seeks confidential reproductive health services via telehealth, which framework primarily governs disclosure to parents?
Answer: State minor consent laws
State minor consent laws determine whether minors may consent to certain services confidentially and whether parents can access those records.
A telehealth organization uses a patient's de-identified data for a research study without IRB approval. Which framework is most likely violated?
Answer: The Common Rule (45 CFR Part 46) and research ethics standards
The Common Rule requires IRB oversight for human subjects research, even when data appears de-identified, depending on how identifiability is assessed.
Under HIPAA, which of the following constitutes a permissible disclosure of PHI without patient authorization?
Answer: Disclosure for treatment, payment, or healthcare operations (TPO)
HIPAA permits disclosure of PHI without patient authorization for treatment, payment, and healthcare operations (TPO) purposes.
Which of the following is a key feature of the Interstate Medical Licensure Compact (IMLC)?
Answer: It streamlines the process for physicians to obtain licenses in multiple member states
The IMLC is an agreement among member states that expedites the licensing process for physicians seeking licenses in multiple states, but does not replace individual state licenses.
A telehealth provider suspects a patient is experiencing domestic violence. What is the provider's ethical obligation?
Answer: Assess safety, provide resources, and follow mandatory reporting laws applicable in the patient's jurisdiction
Providers must assess patient safety, offer resources, and comply with jurisdiction-specific mandatory reporting laws while maintaining the therapeutic relationship.
Which standard governs the security of electronic protected health information (ePHI) in transit during a telehealth session?
Answer: HIPAA Security Rule — Transmission Security standard
The HIPAA Security Rule's Transmission Security standard requires safeguards (such as encryption) to protect ePHI during electronic transmission.