Certified Medical Assistant (CMA AAMA)Communication and Legal/EthicalEasy

A medical assistant observes a colleague accessing the electronic health record of a patient who is not under their care and for whom they have no legitimate reason to access information. Which of the following federal regulations is being violated by the colleague's action?

  1. AADA
  2. BCLIA '88
  3. COSHA
  4. DHIPAA
Show answer & explanation

Correct answer: D. HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) sets national standards for protecting sensitive patient health information from unauthorized disclosure. Accessing records without a legitimate reason is a direct violation of HIPAA.

Why the other options are wrong

  • A. ADA (Americans with Disabilities Act) prohibits discrimination against individuals with disabilities.
  • B. CLIA '88 (Clinical Laboratory Improvement Amendments) regulates laboratory testing.
  • C. OSHA (Occupational Safety and Health Administration) ensures safe and healthful working conditions.

HIPAA Privacy Rule

A federal regulation that protects the privacy of individually identifiable health information (PHI).

  • Requires patient consent for most disclosures.
  • Limits uses and disclosures of PHI.
  • Establishes patient rights regarding their health information.

Memory trick: HIPAA Protects Health Info Always.

More Communication and Legal/Ethical questions