Medical Law, Ethics, Privacy and Scope
Law and ethics include HIPAA, confidentiality, consent, patient rights, documentation integrity, scope of practice, and ethical conduct.
How to study for NHA CCMA
Treat each question as a patient-care workflow: verify identity and order, stay within scope, use infection control, perform the task safely, document objectively, and escalate concerns.
Core concepts
Concept 1
Medical Law, Ethics, Privacy and Scope questions reward the answer that follows the official source, the professional role, and the stated facts.
Exam cue: Identify the candidate role, client or public risk, source rule, calculation, or process step being tested.
Concept 2
The strongest answer identifies the rule, safety concern, ethical duty, calculation, client factor, or process step before acting.
Exam cue: Check whether the fact pattern is using a national standard, jurisdiction rule, handbook policy, or scenario-specific instruction.
Concept 3
Eliminate answers that ignore requirements, skip documentation, overreach the role, or treat convenience as the standard.
Exam cue: Choose the compliant and professionally scoped answer before the convenient or familiar answer.
Risk pitfalls and guardrails
Treating related standards as interchangeable without checking the source.
Guardrail: Avoid answers that rely only on habit, ignore the stated source, skip safety or compliance steps, or choose convenience over the professional standard.
Skipping screening, documentation, authorization, sanitation, recordkeeping, or other required procedure.
Guardrail: Avoid answers that rely only on habit, ignore the stated source, skip safety or compliance steps, or choose convenience over the professional standard.
Choosing an answer that protects convenience instead of client safety, public protection, or the stated professional duty.
Guardrail: Avoid answers that rely only on habit, ignore the stated source, skip safety or compliance steps, or choose convenience over the professional standard.
Memory anchors
HIPAA
HIPAA requires appropriate safeguards for protected health information and limits use or disclosure to permitted purposes.
Confidentiality
Confidentiality means patient information is shared only with authorized people for appropriate reasons.
Informed Consent
Informed consent requires adequate information from the appropriate provider and voluntary patient agreement when applicable.
Implied Consent
Implied consent may occur when a patient cooperates with routine care after explanation, within policy.
Patient Rights
Patient rights include privacy, dignity, informed participation, and access or control rights under applicable rules.
Documentation Integrity
Documentation integrity requires accurate, objective, timely entries and proper correction procedures.
Negligence
Negligence involves failing to meet the expected standard of care and causing harm or risk.
Ethical Conduct
Ethical conduct includes honesty, respect, boundaries, accountability, and staying within scope.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
What is informed consent?
A patient signs consent but asks a new risk question. What should the assistant do?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 317 U.S. exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”