Legal, Ethical, HIPAA and Consent Issues
This topic covers HIPAA, PHI, HITECH, consent, torts, standard of care, subpoenas, contracts, pharmaceutical laws, mandatory reporting, advance directives, and ethical standards.
How to study for the CMA (AAMA) exam
Build every answer around patient safety, medical assistant scope, infection control, documentation, privacy, communication, billing accuracy, and workflow escalation.
Core concepts
Concept 1
Legal, Ethical, HIPAA and Consent Issues questions test whether a medical assistant can connect patient care, safety, communication, law, documentation, and office workflow.
Exam cue: Decide whether the item is clinical, general/legal/communication, or administrative.
Concept 2
The best CMA answer usually protects patient safety, stays within medical assistant scope, documents accurately, escalates clinical judgment, and preserves privacy.
Exam cue: Use patient identity, provider order, scope, infection control, documentation, and escalation cues before choosing.
Concept 3
Eliminate answers that skip identification, ignore abnormal findings, give unsupported clinical advice, breach confidentiality, or prioritize speed over safe workflow.
Exam cue: For math or medication items, convert units, verify route and dose, and check reasonableness.
Risk pitfalls and guardrails
Acting outside scope by diagnosing, interpreting, prescribing, or independently changing treatment.
Guardrail: Avoid independent clinical advice, skipped ID checks, privacy shortcuts, unsupported billing, and undocumented abnormal findings.
Documenting care, medication, specimen, or billing information before verifying facts.
Guardrail: Avoid independent clinical advice, skipped ID checks, privacy shortcuts, unsupported billing, and undocumented abnormal findings.
Missing age-specific, privacy, infection control, consent, or emergency response cues.
Guardrail: Avoid independent clinical advice, skipped ID checks, privacy shortcuts, unsupported billing, and undocumented abnormal findings.
Memory anchors
HIPAA
HIPAA protects patient health information and limits use and disclosure to permitted purposes.
PHI
Protected health information identifies a patient and relates to health, care, or payment.
Minimum Necessary
Use or disclose only the minimum necessary information for the permitted purpose.
Informed Consent
Informed consent requires understanding of procedure, risks, benefits, and alternatives.
Implied Consent
Implied consent may arise from patient actions in routine care or emergencies.
Negligence
Negligence is failure to exercise reasonable care, causing harm.
Battery
Battery is unauthorized touching or treatment.
Mandatory Reporting
Mandatory reporting may apply to abuse, neglect, communicable diseases, violence wounds, or vital statistics.
Advance Directive
Advance directives communicate patient wishes for future care.
Ethical Standard
Ethical behavior protects privacy, honesty, patient welfare, and professional boundaries.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
Which information is protected health information when linked to an identifiable patient?
What is the main purpose of the HIPAA Privacy Rule?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 317 U.S. exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”