Healthcare Regulations & Compliance Flashcards
7 cards from real NHI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Healthcare Regulations & Compliance flashcards as text
Which element is NOT required in a valid healthcare Advance Directive?
Answer: Physician countersignature
Advance directives require patient signature and witness/notarization per state law, but a physician countersignature is not a standard legal requirement for validity.
The Centers for Medicare & Medicaid Services (CMS) requires that hospitals implement a Corporate Compliance Program. Which of the following is a core element of such a program?
Answer: Written policies, procedures, and standards of conduct
The OIG's compliance program guidance identifies written standards of conduct, policies, and procedures as a foundational element of an effective corporate compliance program.
Protected Health Information (PHI) under HIPAA includes which of the following when combined with health data?
Answer: Patient's zip code
A patient's zip code combined with health information can constitute PHI if it could be used to identify the individual, especially in smaller geographic areas.
Under the Health Information Technology for Economic and Clinical Health (HITECH) Act, which type of business associate agreement (BAA) provision became mandatory?
Answer: Subcontractors of business associates must also comply with HIPAA
HITECH extended HIPAA obligations directly to business associates and their subcontractors, requiring that downstream subcontractors also execute BAAs and comply with HIPAA.
A medical assistant overhears a patient's diagnosis in the waiting room because the provider spoke too loudly. Under HIPAA, this is considered:
Answer: An incidental disclosure that is permissible if reasonable safeguards were in place
HIPAA recognizes incidental disclosures as permissible when they occur despite reasonable safeguards and minimum necessary policies being in place.
Which federal agency oversees the Drug Enforcement Administration (DEA) registration required for healthcare providers who prescribe controlled substances?
Answer: Department of Justice
The DEA operates under the Department of Justice and administers the Controlled Substances Act, requiring providers who prescribe controlled substances to obtain DEA registration.
The anti-kickback statute makes it illegal to offer, pay, solicit, or receive anything of value to induce or reward referrals of items or services covered by:
Answer: Federal healthcare programs such as Medicare and Medicaid
The Anti-Kickback Statute (AKS) applies to federal healthcare programs including Medicare, Medicaid, CHIP, and TRICARE — not private payer arrangements.