11.7 Legal, Administrative, and Communication Reference Checklist

NHA Certified Clinical Medical Assistant CCMA

Track your progress as you read

Finished sections get a check mark.

1 Chapter 1: CCMA Exam Orientation and Official Sources

1.1 Official Sources and What the CCMA Credential Measures 1.2 Exam Format, Scoring, and the Current Test Plan 1.3 Eligibility, Registration, Cost, and Scheduling 1.4 Test-Day Rules, Results, Retakes, and Renewal 1.5 Study Strategy by Official Domain

2 Chapter 2: Foundational Knowledge, Terminology, and Basic Science

2.1 Health Care Systems, Settings, and Team Roles 2.2 Medical Terminology, Abbreviations, and Documentation Language 2.3 Anatomy, Physiology, Homeostasis, and Disease Basics 2.4 Basic Pharmacology and Medication Safety 2.5 Nutrition, Supplements, Food Labels, and Disease-Related Diets 2.6 Psychology, Development, Stressors, and Behavioral Health

3 Chapter 3: Patient Intake, Vitals, and General Clinical Care

3.1 Clinical Patient Care Domain Map and Intake Workflow 3.2 Vital Signs Measurement Technique 3.3 Anthropometrics, Pain, and Screening Measures 3.4 Positioning, Draping, and Procedure Preparation 3.5 Medication Administration Support 3.6 Wound Care, First Aid, and Emergency Response

4 Chapter 4: Infection Control, Safety, and OSHA Concepts

4.1 Standard Precautions, PPE, and Hand Hygiene 4.2 Medical Asepsis, Surgical Asepsis, Disinfection, and Sterilization 4.3 Sharps, Biohazards, and Bloodborne Pathogen Exposure Response 4.4 Emergency Supplies, Equipment Checks, and Environmental Safety 4.5 Infection Control Scenario Drills

5 Chapter 5: Phlebotomy, Specimens, and Lab Testing

5.1 Phlebotomy Workflow and Order Verification 5.2 Venipuncture Sites, Tube Selection, and Order of Draw 5.3 Capillary and Pediatric Collection 5.4 Specimen Labeling, Processing, Storage, and Transport 5.5 Point-of-Care Testing and CLIA-Waived Procedures 5.6 Urinalysis, Pregnancy, Rapid Tests, and Quality Control 5.7 Lab Error Recognition and Remediation

6 Chapter 6: EKG and Cardiovascular Testing

6.1 EKG Patient Preparation and Lead Placement 6.2 EKG Artifact Troubleshooting 6.3 Cardiovascular Red Flags and Escalation 6.4 Ambulatory Monitoring and Cardiovascular Documentation

7 Chapter 7: Administrative Assisting, Coordination, and Communication

7.1 Scheduling, Registration, and Patient Flow 7.2 EHR Documentation and Record Integrity 7.3 Insurance, Billing, Prior Authorization, and Denials 7.4 Referrals, Transitions of Care, and Community Resources 7.5 Patient Education and Health Literacy 7.6 Telehealth, Patient Portals, and Electronic Communication 7.7 Customer Service, Conflict Resolution, and Teamwork

8 Chapter 8: Law, Ethics, Calculations, and Final Exam Readiness

8.1 Scope, Delegation, Consent, and Legal Boundaries 8.2 HIPAA, Confidentiality, and Release of Information 8.3 Ethics, Bias, Boundaries, and Professionalism 8.4 Mandatory Reporting, Incident Reports, and Risk Management 8.5 Calculations, Conversions, and Dosage Math 8.6 Mock Exam Pacing and Error-Log Remediation 8.7 Final Test-Day Readiness Checklist

9 Chapter 9: Mixed Scenario Labs and Full Exam Readiness

9.1 Intake and Vitals Simulation Lab 9.2 Infection Control and Safety Simulation Lab 9.3 Phlebotomy and Lab Testing Simulation Lab 9.4 EKG and Cardiac Escalation Simulation Lab 9.5 Administrative and Communication Simulation Lab 9.6 Law, Ethics, HIPAA, and Scope Simulation Lab 9.7 Calculations and Final Review Simulation Lab 9.8 Full Exam Readiness Simulation Lab

10 Chapter 10: Domain Mastery and Score Repair

10.1 Blueprint-Based Domain Prioritization 10.2 Foundational Science and Anatomy Mastery 10.3 Clinical Patient Care Mastery: Intake, Vitals, and General Care 10.4 Clinical Patient Care Mastery: Infection, Lab, Phlebotomy, and EKG 10.5 Coordination, Education, and Administrative Mastery 10.6 Communication and Customer Service Mastery 10.7 Law, Ethics, and Risk Management Mastery 10.8 Final Week Score Repair Plan

11 Chapter 11: Final Quick Reference Checklists

11.1 Vital Signs Reference Checklist 11.2 Medication and Injection Reference Checklist 11.3 Infection Control Reference Checklist 11.4 Phlebotomy and Specimen Reference Checklist 11.5 Point-of-Care and Urinalysis Reference Checklist 11.6 EKG and Cardiovascular Reference Checklist 11.7 Legal, Administrative, and Communication Reference Checklist

11.7 Legal, Administrative, and Communication Reference Checklist

Key Takeaways Explain This Topic AI

Scope of practice, HIPAA, and consent overlap in scenarios; the safest answer stays within the CCMA role and policy.

Verify identity and authorization before any PHI release, and correct records by addendum, never deletion.

Use objective documentation and teach-back, and route clinical questions to the provider.

Last updated: June 2026

Legal, Administrative, and Communication Reference

The last CCMA trap is overreach: an option that sounds helpful but breaks scope, privacy, policy, or documentation integrity. CCMAs verify identity, use approved workflows, protect protected health information (PHI), communicate plainly, route clinical decisions to the provider, and document objectively. These items live mainly in the General/Foundational Knowledge and administrative domains.

Cross-Domain Checklist

• Issue Strong CCMA action
• Scope Only tasks allowed by law, policy, training, delegation
• Consent / refusal Honor refusal, notify provider, document
• HIPAA Verify requester identity AND authorization before sharing PHI
• Record release Use the release-of-information process with signed authorization
• EHR error Correct by addendum or strike-through; never delete or hide
• Insurance Explain copay, deductible, coinsurance, prior authorization accurately
• Referral Send required info, track follow-through
• Education Plain language plus teach-back
• Telehealth Confirm identity, privacy, location, callback, escalation path

Consent types: informed consent (provider explains risks/benefits; the CCMA may witness, not obtain it), implied consent (patient rolls up a sleeve for a BP), and expressed/written consent for procedures.

HIPAA and Insurance Quick Facts

The minimum necessary rule: share only the PHI needed for the task. The Privacy Rule covers PHI; the Security Rule covers electronic PHI.

Treatment, payment, and operations (TPO) generally do not require separate authorization; releases to employers, attorneys, or family beyond TPO do.

Copay = fixed per-visit amount; deductible = annual amount paid before coverage starts; coinsurance = percentage split after the deductible; prior authorization = payer approval before a service.

Documentation Standard

Chart what was measured, observed, stated, taught, and done. Objective: "Patient reports dizziness; BP 92/58 seated; provider notified 2:15 p.m." Weak/subjective: "Patient is dramatic" or "probably dehydrated." Errors are corrected with a single strike-through, the correction, your initials, and the date - never erased or whited out, because the EHR is a legal record.

The Final Rule

If an answer requires interpreting results, promising payment, sharing PHI informally, diagnosing, changing a medication, hiding an error, ignoring a refusal, or using a minor child as an interpreter, it is almost certainly wrong.

Last-Minute Self-Test

• Cue Decision habit
• PHI request by phone Verify identity AND authority first
• Charting mistake Strike-through + initial + date, never delete
• Patient does not understand Plain language + teach-back
• Family wants records Require signed release beyond TPO

Scope of Practice and Liability Terms

Scope questions hinge on what a medical assistant may legally do under provider delegation in that state - CCMAs do not assess, diagnose, prescribe, triage independently, or give telephone advice that interprets symptoms. Know the liability vocabulary the exam uses: negligence is failure to act as a reasonably prudent person would; malpractice is professional negligence; abandonment is ending care without proper handoff; battery is touching without consent; assault is the threat of it; and respondeat superior means the employer can be held responsible for an employee's job-related acts.

Working outside your scope removes the protection of delegation and exposes both you and the provider to liability.

Communication, Cultural Competence, and Special Situations

Therapeutic communication uses open-ended questions, active listening, and restatement, while avoiding medical jargon and false reassurance. Maslow's hierarchy explains why physiologic and safety needs are addressed before higher needs. Cultural competence means respecting differences in eye contact, personal space, dietary practice, and decision-making without stereotyping, and providing a qualified interpreter rather than relying on family or minors. For a patient who is angry, stay calm, lower your voice, acknowledge the concern, protect privacy, and involve a supervisor when needed; never argue or take it personally.

Mandatory Reporting and Advance Directives

Some disclosures are required by law even without patient consent: suspected child or elder abuse, certain communicable diseases, and injuries from violence are reported to the proper authority per protocol. Advance directives such as a living will or a durable power of attorney for health care, and code status such as a do-not-resuscitate (DNR) order, must be honored and visible in the record. When a scenario pits a patient's wishes against staff convenience, the patient's documented choice and the legal reporting duty win - and the CCMA's safest action is to follow policy, document objectively, and escalate decisions that exceed the role.

Administrative Accuracy as a Patient-Safety Behavior

The exam treats front-office accuracy as clinical safety, not paperwork. Correct patient registration and insurance verification prevent denied claims and care delays; accurate appointment scheduling and recall systems keep chronic-disease patients in follow-up; and precise medical-record management protects continuity of care. Know the insurance workflow in order: verify eligibility, confirm whether the service needs prior authorization or a referral, collect the copay, and submit a clean claim with correct codes.

The CCMA explains financial terms accurately but never promises coverage or quotes a guaranteed payment, because that creates liability and false expectations.

HIPAA Edge Cases and the EHR

Beyond verifying identity and authorization, watch for the everyday HIPAA traps the exam loves: discussing a patient in a hallway or elevator, leaving a screen unlocked, faxing PHI to an unverified number, or posting anything patient-related on social media. Each is a breach regardless of intent. In the electronic health record, every entry is time-stamped and audit-logged, so attempting to delete or back-date an entry is both detectable and a falsification of a legal record. The compliant fix for an error is always an addendum or strike-through that preserves the original.

When you tie these rules together, the chapter's final principle holds across every administrative scenario: stay within scope, protect privacy with the minimum-necessary standard, document objectively, honor patient choices and legal duties, and route anything clinical or uncertain to the provider.