Compliance, Privacy, Fraud and Abuse
Compliance questions cover HIPAA, privacy safeguards, OIG expectations, false claims risk, documentation integrity, payer policies, and ethical billing behavior.
How to study for NHA CBCS
Treat each question as a clean-claim decision: verify documentation and coverage, choose compliant code logic, submit accurate claim data, and follow reimbursement or denial workflow.
Core concepts
Concept 1
Compliance, Privacy, Fraud and Abuse questions reward the answer that follows the official source, the professional role, and the stated facts.
Exam cue: Identify the candidate role, client or public risk, source rule, calculation, or process step being tested.
Concept 2
The strongest answer identifies the rule, safety concern, ethical duty, calculation, client factor, or process step before acting.
Exam cue: Check whether the fact pattern is using a national standard, jurisdiction rule, handbook policy, or scenario-specific instruction.
Concept 3
Eliminate answers that ignore requirements, skip documentation, overreach the role, or treat convenience as the standard.
Exam cue: Choose the compliant and professionally scoped answer before the convenient or familiar answer.
Risk pitfalls and guardrails
Treating related standards as interchangeable without checking the source.
Guardrail: Avoid answers that rely only on habit, ignore the stated source, skip safety or compliance steps, or choose convenience over the professional standard.
Skipping screening, documentation, authorization, sanitation, recordkeeping, or other required procedure.
Guardrail: Avoid answers that rely only on habit, ignore the stated source, skip safety or compliance steps, or choose convenience over the professional standard.
Choosing an answer that protects convenience instead of client safety, public protection, or the stated professional duty.
Guardrail: Avoid answers that rely only on habit, ignore the stated source, skip safety or compliance steps, or choose convenience over the professional standard.
Memory anchors
HIPAA
HIPAA protects patient information and requires appropriate use, disclosure, and safeguards in billing and coding workflows.
Minimum Necessary
Minimum necessary means using or disclosing only the information needed for the permitted task.
False Claim
A false claim risk arises when claims are submitted with inaccurate, unsupported, or intentionally misleading information.
Upcoding
Upcoding reports a higher-level service than documentation supports and is a compliance risk.
Unbundling
Unbundling separately reports services that should be billed together under applicable coding rules.
Medical Necessity
Medical necessity connects the service to documented clinical need and payer coverage rules.
Audit Trail
An audit trail helps show who changed information, when, and why.
Compliance Reporting
Suspected compliance concerns should be escalated through approved reporting channels.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
A coder finds a higher-paying code unsupported by the note. What should be billed?
Which practice is upcoding?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 317 U.S. exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”