Certified Medical Assistant (CMA AAMA)Communication and Legal/EthicalHard

A medical assistant is asked by a patient's adult son for information about his mother's recent lab results. The son is not listed as a contact on the mother's HIPAA authorization form, but states he has medical power of attorney. Which of the following actions should the medical assistant take FIRST?

  1. AProvide the lab results to the son, as he claims medical power of attorney.
  2. BInform the son that without proper documentation, no information can be disclosed.
  3. CContact the patient directly to obtain verbal consent for the disclosure.
  4. DVerify the medical power of attorney documentation before disclosing any information.
Show answer & explanation

Correct answer: D. Verify the medical power of attorney documentation before disclosing any information.

While a medical power of attorney grants authority, it must be legally verified before any protected health information (PHI) can be disclosed. The medical assistant must request and review the official documentation to confirm the son's legal authority to act on his mother's behalf.

Why the other options are wrong

  • A. Disclosing information based solely on a verbal claim of authority is a HIPAA violation.
  • B. While true, simply stating this is incomplete; the proper next step is to verify the claimed authority.
  • C. Contacting the patient for verbal consent is an option if there's no legal documentation, but verifying existing legal authority takes precedence if claimed.

Verifying Legal Authority for PHI Disclosure

The process of confirming a person's legal right, such as through a Medical Power of Attorney, to access a patient's Protected Health Information.

  • Verbal claims of authority are insufficient.
  • Official documentation must be presented and reviewed.
  • Ensures compliance with HIPAA and patient privacy rights.

Memory trick: Don't just believe, always retrieve the legal weave.

More Communication and Legal/Ethical questions