Domain 7 of the certified clinical medical assistant exam tests your knowledge of patient privacy, informed consent, and professional boundaries. You must know how to handle sensitive health data and navigate legal scenarios in the clinic. Use our NHA CCMA practice questions and CCMA practice test to master these ethical standards.
Question 1
74 of 150. A medical assistant is removing sutures for a patient who becomes highly anxious. The patient verbally withdraws their consent halfway through the procedure. The assistant completes the suture removal anyway to prevent a potential site infection. Which legal charge is the assistant risking?
- A) Criminal healthcare billing fraud
- B) Civil tort of battery✓
- C) Civil tort of assault
- D) Criminal act of abuse
💡 Key Takeaway
Continuing a physical procedure after a patient withdraws consent is the tort of battery.
Show rationale
The assistant is risking a charge for the civil tort of battery. Even though the assistant had good intentions to prevent infection, continuing to physically touch the patient and remove sutures after consent is explicitly withdrawn constitutes unauthorized touching. This is not assault because the issue is the actual physical contact, not just a threat that caused fear. It is not criminal healthcare billing fraud because there is no financial deception or intentional misrepresentation of services for money. It is not a criminal act of abuse because the action was meant to be therapeutic rather than maliciously harmful, though it remains a civil violation. Patients have the right to halt procedures at any time.
Question 2
94 of 150. A clinic is implementing a new smartphone application interface to allow patients to download their health data directly to their personal devices. Which legislation primarily drives this specific initiative?
- A) Meet the interoperability requirements mandated by the 21st Century CURES Act.✓
- B) Satisfy the dependent coverage mandates established by the Affordable Care Act.
- C) Comply with the breach notification rules outlined in the HITECH Act.
- D) Fulfill the essential health benefits standards required by federal healthcare law.
💡 Key Takeaway
The 21st Century CURES Act mandates interoperability, allowing patients to easily access data via smartphone applications.
Show rationale
The 21st Century CURES Act strongly emphasizes interoperability and patient access to electronic health information. Implementing a new smartphone application interface to let patients download their health data directly complies with this mandate by preventing information blocking. The Affordable Care Act (Option B) and essential health benefits (Option D) relate to insurance coverage and preventive care, not software interfaces. The HITECH Act (Option C) focuses on initial EHR adoption and breach notifications, whereas the CURES Act specifically drives modern app-based data sharing and seamless interoperability.
Question 3
132 of 150. A medical assistant administers the wrong vaccine dosage to a pediatric patient while working under the direct supervision of a physician. The physician is subsequently sued for the error. Which legal doctrine holds the physician liable?
- A) This situation illustrates the doctrine of res ipsa loquitur.
- B) This situation illustrates the doctrine of respondeat superior.✓
- C) This situation illustrates the doctrine of contributory negligence.
- D) This situation illustrates the doctrine of comparative negligence.
💡 Key Takeaway
Respondeat superior holds employers legally responsible for the negligent acts of their employees performed within their scope.
Show rationale
The legal doctrine of respondeat superior translates to "let the master answer." This principle means that an employer or supervising physician is legally responsible for the actions of their employees when those actions occur within the scope of their employment. Option B is correct because the physician is held liable for the assistant's dosing error. Option A is incorrect because res ipsa loquitur means "the thing speaks for itself" and applies to obvious negligence like retained surgical instruments, not vicarious liability. Option C is incorrect because contributory negligence refers to the patient's own actions contributing to their injury, which did not happen here. Option D is incorrect because comparative negligence involves weighing the shared fault between the plaintiff and defendant, rather than an employer's vicarious liability for staff.
Question 4
137 of 150. A medical assistant finds several expired fentanyl patches (Schedule II) in the clinic's secure medication cabinet. The clinic manager asks the MA to assist with the disposal of these controlled substances before the upcoming weekend.
- A) Flush the expired patches down the clinic's biohazard sink drain.
- B) Place the expired patches directly into the red sharps container.
- C) Transfer the patches to a local pharmacy for immediate destruction.
- D) Destroy the patches with two witnesses and submit DEA Form 41.✓
💡 Key Takeaway
Destroying expired controlled substances requires two authorized witnesses and the completion of DEA Form 41.
Show rationale
The DEA strictly regulates the disposal of controlled substances to prevent diversion. Expired Schedule II medications must be destroyed beyond reclamation, requiring two authorized witnesses and the completion of DEA Form 41. Option D correctly identifies this legal protocol. Option A is incorrect because flushing medications violates environmental guidelines and DEA rules. Option B is incorrect because sharps containers are for needles, and placing intact patches there risks diversion. Option C is incorrect because clinics cannot arbitrarily transfer controlled substances without proper reverse distributor documentation.
Question 5
146 of 150. A medical assistant is working in the clinic when a coworker asks to check a neighbor's chart within the electronic health record system to send a get-well card. Which of the following actions should the assistant take?
- A) Access the record briefly to find the room number.
- B) Refuse the request because audit trails track all access.✓
- C) Request the provider to open the patient chart instead.
- D) Print the demographic page directly for the coworker now.
💡 Key Takeaway
Audit trails track all electronic health record access to prevent unauthorized viewing of protected health information.
Show rationale
The correct action is to refuse the request because audit trails automatically log every user who opens a chart. Accessing a record without a direct clinical or administrative need is a HIPAA violation. Option A is incorrect because briefly viewing the chart still generates an audit log and breaches confidentiality. Option C is incorrect because asking the provider to commit the breach does not resolve the ethical and legal issue. Option D is incorrect because printing demographic information is still an unauthorized disclosure of electronic protected health information. Medical assistants must always protect patient privacy and rely on established security protocols rather than fulfilling informal requests.
Question 6
13 of 150. A pediatric patient with divorced parents with joint legal custody needs a non-emergent diagnostic procedure. The father signs consent in the office, but the mother calls to refuse the procedure before it begins. What is the most appropriate action for the medical assistant?
- A) Proceed since the father signed the consent form first.
- B) Cancel the procedure until both parents sign the form.
- C) Defer to the mother as the primary custodial parent.
- D) Notify the provider to halt treatment until resolution occurs.✓
💡 Key Takeaway
When parents with joint legal custody disagree on non-emergent care, treatment must be paused until they reach an agreement.
Show rationale
When parents share joint legal custody, both have an equal right to make medical decisions for their child. If they explicitly disagree, the medical assistant must notify the provider to halt non-emergent treatment until the parents reach an agreement or obtain a court directive. Option A is incorrect because one parent's consent does not override the other's explicit refusal when legal custody is shared. Option B is wrong because routine consent usually requires only one signature; requiring both is not standard practice unless a dispute is already known. Option C is incorrect because legal custody, not primary physical caregiver status, dictates medical decision-making authority.
Question 7
22 of 150. A caregiver brings in an adult patient with a severe intellectual disability for a routine vaccination, claiming to be the legal guardian. Which action must the medical assistant take before administering the injection?
- A) Proceed with the vaccination based on the caregiver verbal consent.
- B) Require a signed letter from the patient primary care provider.
- C) Request a copy of the court appointed guardianship order document.✓
- D) Ask the patient to sign the consent form with witnesses.
💡 Key Takeaway
Legal guardianship must be verified through official court documentation before providing care.
Show rationale
When a caregiver claims legal authority over an adult with a severe intellectual disability, the medical assistant must obtain the official court appointed guardianship order to verify this status before proceeding with care. Option C is correct because this legal document must be scanned into the patient's medical record to prove the caregiver has the right to consent to the routine vaccination. Option A is incorrect because verbal claims are legally insufficient for establishing guardianship or obtaining informed consent. Option B is incorrect as primary care providers do not have the legal jurisdiction to grant guardianship; only a judge can do so. Option D is incorrect because a patient with severe cognitive impairment lacks the legal capacity to understand and sign an informed consent form, even with witnesses present.
Question 8
23 of 150. A patient who was just administered a narcotic analgesic for severe pain presents the consent form to the medical assistant and says they are ready to sign for an upcoming biopsy. Which of the following is the most appropriate action?
- A) Guide the patient to sign the consent form.
- B) Ask a family member to witness the signature.
- C) Document the patient signed the document voluntarily.
- D) Inform the provider the patient cannot legally sign.✓
💡 Key Takeaway
Patients cannot provide valid informed consent if they are under the influence of mind-altering medications.
Show rationale
For informed consent to be legally valid, the patient must be competent and of sound mind at the time of signing. Because the patient was just given a medication that alters mental status, they are temporarily legally incompetent to provide valid consent. Option D is correct because the assistant must halt the process and alert the provider. Option A and Option C are incorrect because any signature obtained under the influence of narcotics is invalid and considered coercive. Option B is incorrect because a family member cannot simply witness a compromised patient's signature; they would need to be a designated legal proxy signing on the patient's behalf.
Question 9
122 of 150. A 45-year-old patient presents for routine lab work. As the medical assistant prepares the venipuncture site, the patient pulls their arm away and states they do not want the blood drawn. The assistant proceeds to insert the needle anyway to complete the ordered test. Which legal tort has the assistant committed?
- A) Battery by unauthorized touching✓
- B) Assault by creating apprehension
- C) Negligence by breaching duty
- D) Malpractice by causing injury
💡 Key Takeaway
Performing any physical procedure after a patient refuses consent constitutes battery.
Show rationale
The assistant committed battery because they intentionally touched the patient without permission. Even though the blood draw was ordered by a provider, the patient explicitly withdrew consent by pulling away and refusing. Proceeding with the physical puncture is an unauthorized touching. This is not assault because assault involves creating the fear of harm rather than the actual physical contact itself. It is not negligence or malpractice because those involve a failure to meet the standard of care that results in accidental injury, whereas this was an intentional tort. Medical assistants must always respect a patient's right to refuse treatment at any time to avoid civil liabilities.
Question 10
136 of 150. A medical assistant discovers that a provider routinely alters patient diagnosis codes to justify ordering expensive, medically unnecessary diagnostic imaging. The assistant knows this practice directly violates federal billing statutes. How should this specific legal violation be classified?
- A) Civil tort of negligence
- B) Civil tort of malpractice
- C) Criminal act of battery
- D) Criminal act of fraud✓
💡 Key Takeaway
Intentionally altering diagnosis codes for financial gain violates federal criminal fraud statutes.
Show rationale
Altering diagnosis codes to justify unnecessary procedures is a criminal act of fraud. Fraud involves intentional deception for financial gain, which violates federal laws like the False Claims Act and can result in severe criminal penalties including prison time. This is not a civil tort of negligence or malpractice, because those involve unintentional errors or a failure to meet the standard of care that results in patient injury, rather than deliberate financial deception. It is not a criminal act of battery because there is no unauthorized physical contact mentioned in the scenario. Medical assistants who notice intentional upcoding or false billing must recognize it as criminal behavior and report it through the proper compliance channels.
Question 11
147 of 150. A medical assistant fails to wipe up a known liquid spill in the clinic hallway. Shortly after, an elderly patient slips and sustains a fractured radius. How is the assistant's specific legal breach classified?
- A) The assistant committed an act of nonfeasance.✓
- B) The assistant committed an act of malfeasance.
- C) The assistant committed an act of misfeasance.
- D) The assistant committed an act of defamation.
💡 Key Takeaway
Nonfeasance is a form of negligence characterized by the failure to perform an act that should have been done.
Show rationale
In tort law, negligence can be categorized by the type of action or inaction. Nonfeasance is the failure to perform an act that should have been performed, such as ignoring a safety hazard like a spill. Option A is correct because the assistant failed to act when duty required it. Option B is incorrect because malfeasance refers to performing an act that is wholly illegal or wrongful, which does not fit a simple failure to clean a floor. Option C is incorrect because misfeasance involves performing a lawful act improperly, whereas this scenario describes a complete omission of action. Option D is incorrect because defamation involves damaging a person's reputation through false statements, which is entirely unrelated to a physical injury caused by a slip and fall.
Question 12
59 of 150. A patient requests an estimate of out-of-pocket costs for an elective minor surgical procedure prior to signing the consent form. How should the medical assistant respond?
- A) Advise the patient that billing will mail the invoice.
- B) Provide the requested financial details before obtaining signatures.✓
- C) Instruct the patient to contact their insurance provider directly.
- D) Explain that medical necessity overrides any financial considerations.
💡 Key Takeaway
Patients have the right to financial transparency before consenting to treatment.
Show rationale
The Patient's Bill of Rights guarantees financial transparency, meaning patients are entitled to know the expected costs of care before agreeing to it. Option B correctly supports the patient's right to make an informed financial decision. Option A dismisses the patient's immediate request and violates their right to prior disclosure. Option C improperly shifts the entire burden to the patient when the clinic should provide the procedural cost estimate. Option D is incorrect because patients can still choose to decline medically necessary care based on cost considerations.
Question 13
65 of 150. A 16-year-old female who is legally married arrives at the clinic and presents for an asthma evaluation. She is alone and asks to complete her own intake paperwork. How should the medical assistant handle the consent process?
- A) Allow the patient to sign her own consent form.✓
- B) Require her husband to sign the medical consent form.
- C) Contact her biological parents to obtain legal medical consent.
- D) Request a judge's emancipation order before providing any treatment.
💡 Key Takeaway
Minors who are legally married are automatically emancipated and can consent to their own medical treatment.
Show rationale
Minors who are legally married are considered emancipated and have the legal right to consent to their own medical care, just like an adult. The medical assistant should allow her to sign her own consent form. Option B is incorrect because a spouse does not need to sign a consent form for a competent adult or an emancipated minor. Option C is wrong because marriage legally severs the requirement for parental medical consent. Option D is incorrect because a valid marriage certificate is sufficient proof of emancipation in this context; a separate court order from a judge is not required for married minors to receive medical care.
Question 14
103 of 150. A medical assistant is reviewing archived files to determine which can be purged. The assistant encounters the chart of a 16-year-old patient who was last seen five years ago for a minor injury. Which of the following actions should the assistant take regarding this specific medical record?
- A) Purge the file using a cross-cut shredding method.
- B) Retain the file until past the age of majority.✓
- C) Transfer the file to a standard recycling receptacle.
- D) Delete the file since five years have fully passed.
💡 Key Takeaway
Medical records for minors must be retained until they reach the age of majority plus the statute of limitations.
Show rationale
When managing records for minors, you must hold onto them until the patient reaches the age of majority plus the state's statute of limitations. Option B is correct because a 16-year-old has not yet reached adulthood, meaning the retention clock extends further than it would for an adult. Options A and D are incorrect because destroying the file prematurely violates medical records law and leaves the clinic legally vulnerable. Option C is incorrect because standard recycling does not protect patient privacy and is never an acceptable disposal method for health information.
Question 15
110 of 150. A patient explicitly refuses a routine blood draw during an annual physical. The medical assistant tells the patient it is mandatory and proceeds to perform the venipuncture anyway. Which legal violation has the assistant committed?
- A) The assistant committed the tort of medical negligence.
- B) The assistant committed the intentional tort of assault.
- C) The assistant committed the intentional tort of battery.✓
- D) The assistant committed the tort of patient abandonment.
💡 Key Takeaway
Performing a physical procedure on a patient who has explicitly refused consent constitutes the intentional tort of battery.
Show rationale
Patients have the right to refuse treatment at any time. When the assistant performed the venipuncture after the patient explicitly refused, they committed battery, which is the intentional, unconsented physical contact with another person. Therefore, Option C is correct. Option A is incorrect because negligence involves an unintentional breach of the standard of care, whereas this was a deliberate action. Option B is incorrect because assault refers to the threat or perceived threat of bodily harm, not the actual physical contact itself. Option D is incorrect because patient abandonment involves a provider terminating care without proper notice or a suitable replacement, which does not apply to forcing a procedure on a patient who is currently in the clinic.