Medical law, ethics, and HIPAA are heavily tested on the NHA CCMA exam. Practice the confidentiality, consent, scope-of-practice, and liability scenarios below — every question has a full rationale.
Question 1
A medical assistant is conducting an internal monthly chart audit and discovers several unsigned laboratory results attached to patient encounters from three weeks ago. The patients were notified of normal results by phone.
- A) Route the results to the provider for immediate electronic signature.✓
- B) Document the phone call and close the open encounters permanently.
- C) Delete the unsigned lab results and request a new transmission.
- D) Sign the laboratory results on behalf of the attending provider.
Show rationale
During an internal audit, finding unsigned laboratory results requires routing them to the provider. Only the provider can legally sign off on diagnostic reports to confirm they reviewed the data, even if results are normal and patients were notified. Option B is incorrect because closing the encounter without a provider signature violates compliance standards. Option C is inappropriate as deleting medical records is illegal and destroys clinical history. Option D is incorrect because medical assistants cannot sign diagnostic reports on behalf of a provider, which falls outside their scope of practice.
Question 2
A CCMA is preparing transfer documents for a 78-year-old patient moving to a skilled nursing facility today. The patient has a complex history including recent medication changes. Which action ensures continuity of care?
- A) Send only the original demographic forms to the receiving facility.
- B) Transmit the updated medication list and recent discharge summary.✓
- C) Instruct the patient to verbally report their new daily medications.
- D) Forward the blank advance directive forms for the facility to complete.
Show rationale
When a patient transitions to a new facility, providing an updated medication list and a discharge summary is crucial to prevent adverse events and ensure seamless care. Option B is correct because it directly supports clinical continuity. Option A is incorrect as demographic forms alone do not provide necessary clinical context. Option C is unsafe because relying on a patient to verbally report complex medication changes risks dangerous errors. Option D is incorrect because while advance directives are important, blank forms do not communicate the patient's current medical status.
Question 3
A medical assistant receives a paper laboratory requisition for a stat troponin level. The form includes the patient's demographic information and the requested tests, but the ordering provider's signature is missing.
- A) Perform the draw to avoid delaying the stat results.
- B) Ask the patient who ordered the stat blood test.
- C) Call the provider's office to verify the laboratory order.✓
- D) Sign the requisition on behalf of the ordering provider.
Show rationale
A complete laboratory requisition must include the ordering provider's information to be valid. Option C is correct because the medical assistant must verify the order with the provider's office before proceeding, even for stat tests. Option A is incorrect; performing the draw without a valid, signed order is outside the scope of practice and risks unauthorized testing. Option B is incorrect because the patient's verbal claim does not substitute for a provider signature or official authorization. Option D is incorrect; a medical assistant cannot legally sign a requisition on behalf of a provider.
Question 4
A caller identifies as the spouse of a patient and requests the patient's recent biopsy results. The patient is currently at work and unavailable. Which of the following actions should the medical assistant take?
- A) Provide the results after verifying the spouse name and birth date.
- B) Check the patient chart for a signed release of information form.✓
- C) Ask the spouse to provide the patient exact social security number.
- D) Refuse the request because results must only be given in person.
Show rationale
Under HIPAA regulations, being the spouse of a patient does not automatically grant someone access to protected health information like recent biopsy results. Option B is correct because the medical assistant must verify that a valid, signed release of information is on file specifically authorizing the spouse to receive medical updates. Option A is incorrect because verifying the spouse's identity is irrelevant if they are not legally authorized to receive the information. Option C is incorrect because obtaining the patient's social security number from the caller does not substitute for documented consent. Option D is incorrect because results can often be shared over the phone, provided the proper authorization and identity verification protocols are strictly followed.
Question 5
When coordinating a routine gastroenterology referral for a patient with chronic abdominal pain, which action ensures proper continuity of care?
- A) Forward the relevant clinic notes and recent laboratory test results.✓
- B) Send the patient's entire medical record to the specialist office.
- C) Instruct the patient to verbally explain their symptoms upon arrival.
- D) Request the specialist to order new baseline laboratory diagnostic tests.
Show rationale
For a routine gastroenterology referral evaluating chronic abdominal pain, sending relevant clinic notes and recent labs ensures the specialist has the necessary clinical context to evaluate the patient effectively. Option A is correct because it adheres to the minimum necessary standard for continuity of care. Option B is incorrect because sending the entire chart violates privacy guidelines and overwhelms the consulting provider with irrelevant data. Option C is incorrect because relying on the patient's memory is clinically unreliable and does not constitute professional care coordination. Option D is incorrect because the specialist needs existing baseline data to avoid duplicating expensive and invasive diagnostic tests.
Question 6
While rooming a 65-year-old patient for a routine exam, the medical assistant notices an EHR alert for a missing pneumococcal vaccine. Which of the following actions should the medical assistant take to address this quality measure?
- A) Administer the vaccine before the provider enters the room.
- B) Pend the vaccine order for the provider to review it.✓
- C) Override the clinical alert to proceed with the visit now.
- D) Advise the patient to receive the vaccine at a pharmacy.
Show rationale
Medical assistants play a vital role in managing quality measure alerts by preparing necessary interventions for the provider. When an EHR alert indicates a missing preventive service like a pneumococcal vaccine for a 65-year-old patient, the most appropriate action is to pend the order. This allows the provider to review the patient's history, confirm the clinical appropriateness, and authorize the administration. Option A is incorrect because administering a vaccine requires a provider's order first, making it outside the assistant's scope of practice to proceed independently. Option C is incorrect because overriding the alert ignores a critical preventive care standard and negatively impacts clinic quality metrics. Option D is incorrect because while a pharmacy is an option, the clinic should attempt to fulfill the preventive care measure during the current visit to ensure compliance.
Question 7
An older adult patient with hypertension states they will not take their scheduled in-office clonidine dose because it makes them feel excessively dizzy.
- A) Document the patient's refusal and notify the provider immediately.✓
- B) Explain the risks of high blood pressure to force compliance.
- C) Administer half of the prescribed dose to reduce the dizziness.
- D) Reschedule the medication administration for later in the afternoon.
Show rationale
Every patient has the right to refuse any medication or treatment, regardless of the reason. When a patient declines a medication, the medical assistant must respect their decision, document the refusal accurately in the medical record, and notify the provider immediately so they can address the patient's concerns or adjust the treatment plan. Option B is incorrect because forcing compliance or arguing with the patient violates their autonomy and informed consent rights. Option C is incorrect because a medical assistant cannot independently alter a medication dose without a new order from the provider. Option D is incorrect because rescheduling the dose does not address the patient's immediate refusal or the adverse side effect they are experiencing. The provider needs to evaluate the reported dizziness before any further action is taken.
Question 8
A medical assistant receives a stat potassium level of 6.8 mEq/L for a patient who is currently waiting in the reception area for a routine follow-up. What is the most appropriate action?
- A) Document the result in the electronic health record immediately.
- B) Inform the patient to go directly to the hospital.
- C) Notify the physician of the critical laboratory value immediately.✓
- D) Repeat the venipuncture to confirm the abnormal potassium result.
Show rationale
A potassium level of 6.8 mEq/L is a critical, life-threatening value that can cause fatal cardiac arrhythmias. When ancillary lab services report a critical value, the medical assistant must immediately notify the provider, making option C the correct choice. The provider will then determine the appropriate emergency intervention. Option A is incorrect because simply documenting the result delays urgent medical care. Option B is outside the medical assistant's scope of practice, as only a provider can direct a patient to the emergency room for a critical laboratory value. Option D is incorrect because repeating the venipuncture wastes valuable time when the patient requires immediate medical evaluation and intervention by the supervising physician.
Question 9
A clinic janitor accidentally splashed a chemical cleaning solvent into his right eye and is experiencing immediate severe pain. He runs into the clinical area asking for help. Which of the following actions should the medical assistant perform?
- A) Cover the affected eye with sterile gauze pads.
- B) Flush the eye with a continuous saline stream.✓
- C) Administer over-the-counter topical analgesic drops.
- D) Perform a rapid visual acuity test on the eye.
Show rationale
The immediate priority for chemical burns to the eye is to perform continuous irrigation with saline or water to flush out the chemical and minimize permanent corneal damage. Covering the eye with sterile gauze pads traps the chemical against the eye, worsening the burn. Administering topical analgesic drops is outside the medical assistant's scope of practice without an immediate provider order, and it delays the critical step of flushing. Performing a visual acuity test is an important assessment tool later, but it should never delay immediate irrigation in a chemical exposure emergency.
Question 10
A provider orders a specialized laboratory test for a Medicare patient. The medical assistant prepares the ABN but leaves the estimated cost field blank. The patient signs and dates the form. Which of the following is the outcome of this interaction?
- A) The ABN is legally valid because the patient signed the document today.
- B) Medicare will process the claim normally because the signature was obtained today.
- C) The patient remains financially liable despite the missing cost estimate field.
- D) The clinic must absorb the cost because the incomplete ABN is invalid.✓
Show rationale
A valid ABN must include a good-faith estimated cost for the non-covered service. Because the field was left blank, the form is invalid, meaning the clinic cannot legally bill the patient and must absorb the cost (Option D). Option A is incorrect because a patient signature does not validate an incomplete form. Option B is incorrect because Medicare will still deny the non-covered service regardless of the signature. Option C is incorrect because the invalid ABN protects the patient from unexpected financial liability.
Question 11
During an intake interview, a patient who is newly diagnosed with type 2 diabetes expresses an inability to afford fresh produce or healthy groceries. Which action best demonstrates the medical assistant's role in overcoming health disparities?
- A) Provide a referral to a local food pantry program.✓
- B) Print a standard diabetic diet plan for the patient.
- C) Suggest the patient buy organic foods in bulk quantities.
- D) Advise the patient to skip meals to lower blood glucose.
Show rationale
Option A is correct because connecting the patient to a food pantry directly addresses the food insecurity that is preventing them from managing their new diagnosis. Option B is incorrect because a standard diet plan is useless if the patient cannot afford the recommended foods, thereby ignoring the underlying social determinants of health. Option C is incorrect because suggesting bulk organic purchases is financially out of touch with the patient's stated inability to afford basic fresh produce. Option D is incorrect because advising a diabetic patient to skip meals is dangerous medical advice and outside the medical assistant's scope of practice.
Question 12
During a morning team huddle, the medical assistant is reviewing the schedule for a non-English speaking patient who requires a complex diabetic wound dressing change.
- A) Ask a bilingual family member in the waiting room to translate the dressing instructions.
- B) Request the clinic receptionist to explain the procedure using basic medical translation software.
- C) Perform the dressing change quickly to minimize the need for extensive verbal communication.
- D) Coordinate with the clinical team to schedule a certified medical interpreter for the visit.✓
Show rationale
Facilitating effective communication is a cornerstone of clinic teamwork and patient safety. For a complex procedure like a diabetic wound dressing change, accurate patient education and consent are mandatory. Coordinating a certified medical interpreter (Option D) ensures that medical terminology is translated accurately and objectively. Option A violates best practices and potentially HIPAA, as family members may lack medical vocabulary or filter information. Option B is unsafe because receptionists and basic software are not qualified to translate complex medical instructions. Option C ignores the patient's right to understand their care and participate in the procedure, which is especially dangerous for diabetic wound management where at-home care instructions are vital for healing.
Question 13
A medical assistant is calling a patient about a positive STI result and reaches a shared family voicemail. Which of the following actions should the assistant take?
- A) State your name and request the patient return the phone call.✓
- B) Leave the clinic name and ask for a prompt return call.
- C) Leave the test results clearly to ensure prompt medical follow up.
- D) State the diagnosis and ask the patient to schedule an appointment.
Show rationale
When leaving a message on a shared family voicemail, the medical assistant must adhere to the minimum necessary rule to prevent unauthorized disclosure of protected health information. Option A is correct because stating only your name and requesting a callback protects the patient's privacy regarding the positive STI result. Option B is incorrect because leaving the clinic name can inadvertently reveal the nature of the call, especially if the clinic specializes in infectious diseases. Options C and D are incorrect because stating the test results or diagnosis on a voicemail directly violates HIPAA guidelines by exposing sensitive medical information to anyone who might listen to the recording. Always prioritize patient confidentiality by limiting the details provided in any automated or shared message system.
Question 14
A patient with frequent emergency department visits for asthma exacerbations is seen in an ACO-model facility. The provider asks the medical assistant to help improve the patient's long-term compliance. Which action is most appropriate?
- A) Prescribing a stronger daily maintenance asthma inhaler
- B) Connecting the patient with a community pharmacist
- C) Referring the patient to a care navigator✓
- D) Advising the patient to avoid all exercise
Show rationale
In an Accountable Care Organization, addressing frequent emergency visits requires comprehensive support. Referring the patient to a care navigator helps identify social determinants of health and barriers to medication adherence. Option A is incorrect because prescribing medications is outside the medical assistant's scope of practice. Option B might be helpful eventually, but a care navigator provides the broader, immediate coordination needed for complex compliance issues. Option D is clinically incorrect, as controlled asthma should not preclude a patient from exercising.
Question 15
A parent calls requesting the pregnancy test results for their sixteen-year-old daughter. The daughter previously requested confidentiality for this specific reproductive health visit. Which of the following actions should the medical assistant take?
- A) Release the results because the patient is a legal minor child.
- B) Provide the results only if the parent is the primary guarantor.
- C) Transfer the phone call directly to the clinic manager for resolution.
- D) Inform the parent that the minor must provide explicit consent first.✓
Show rationale
While parents generally have access to a minor's medical records, exceptions exist for sensitive services such as reproductive health, where a sixteen-year-old daughter can consent to treatment and request confidentiality. Option D is correct because the medical assistant must respect the minor's right to privacy regarding her pregnancy test results and require explicit consent before disclosing them. Option A is incorrect because the legal status of a minor does not automatically override state and federal privacy protections for specific confidential services. Option B is incorrect because being the financial guarantor does not grant access to protected health information without authorization. Option C is incorrect because the medical assistant should be trained to handle routine privacy boundaries without immediately escalating to management.
