Free AAMA HIPAA and Scope of Practice Questions and Answers 1 — Questions and Answers
Question 1: Which of the following actions by a medical assistant is a violation of the HIPAA Privacy Rule?
- Using a password-protected computer to access the EHR.
- Discussing a patient's diagnosis with a coworker in the hallway. (Correct answer)
- Calling a patient by their first name in the waiting room.
- Shredding documents containing patient information.
Correct answer: Discussing a patient's diagnosis with a coworker in the hallway.
Discussing a patient's diagnosis in a public area like a hallway, where the conversation can be overheard by unauthorized individuals, is a clear violation of HIPAA. Protected Health Information (PHI) must be kept confidential and should only be discussed in private, secure settings. This action fails to safeguard the patient's private medical information.
Question 2: Which of the following tasks is outside the scope of practice for a medical assistant?
- Administering an intramuscular injection ordered by the provider.
- Performing a routine venipuncture.
- Interpreting a patient's laboratory results. (Correct answer)
- Taking and recording a patient's vital signs.
Correct answer: Interpreting a patient's laboratory results.
Interpreting laboratory results and explaining them to a patient is a task that requires the clinical judgment of a licensed provider, such as a physician or nurse practitioner. While a medical assistant can report normal values or relay the provider's interpretation, they cannot independently analyze and explain the meaning of results. Performing this task would be practicing medicine without a license.
Question 3: The legal doctrine 'Respondeat Superior' means which of the following?
- The thing speaks for itself.
- Let the master answer. (Correct answer)
- Something for something.
- First, do no harm.
Correct answer: Let the master answer.
'Respondeat Superior' is a Latin term that means 'let the master answer.' In a medical context, this legal doctrine holds an employer or provider legally responsible for the wrongful acts of an employee or agent, if such acts occur within the scope of the employment or agency. For example, a physician may be held liable for a medical assistant's negligence.
Question 4: Before a provider performs an invasive procedure, the medical assistant should ensure that which of the following is in the patient's chart?
- A copy of the patient's insurance card
- A signed informed consent form (Correct answer)
- The patient's complete social history
- An Advance Beneficiary Notice (ABN)
Correct answer: A signed informed consent form
Informed consent is a process where a patient is given information about a procedure, including its risks, benefits, and alternatives, and then voluntarily agrees to it. For invasive procedures, this consent must be documented on a signed consent form. It is a critical part of the medical assistant's role to ensure this documentation is complete before the procedure begins.
Question 5: A patient's right to refuse treatment is an example of which ethical principle?
- Beneficence
- Justice
- Autonomy (Correct answer)
- Nonmaleficence
Correct answer: Autonomy
Autonomy is the ethical principle that recognizes the right of individuals to make their own decisions about their medical care, free from coercion. This includes the right to accept or refuse any recommended treatment, even if it is life-sustaining. Respecting a patient's autonomy is a cornerstone of modern medical ethics.
Question 6: A medical assistant receives a phone call from a patient's spouse asking for the results of their partner's recent blood tests. What is the most appropriate response?
- Provide the results since they are married.
- State that a signed release from the patient is required first. (Correct answer)
- Ask the spouse to answer security questions about the patient.
- Tell the spouse the results are normal but provide no details.
Correct answer: State that a signed release from the patient is required first.
According to HIPAA, a patient's health information cannot be released to anyone, including family members, without the patient's explicit written consent. The most appropriate and secure response is to inform the spouse that a signed release of information form is required from the patient before any information can be shared. This protects the patient's privacy and ensures the practice remains compliant with federal law.
Which of the following actions by a medical assistant is a violation of the HIPAA Privacy Rule?