State laws and HIPAA interactions US Medical PG Practice Questions and MCQs
Practice US Medical PG questions for State laws and HIPAA interactions. These multiple choice questions (MCQs) cover important concepts and help you prepare for your exams.
State laws and HIPAA interactions US Medical PG Question 1: A 16-year-old teenager presents to his pediatrician complaining of burning with urination and purulent urethral discharge. He states that he has had unprotected sex with his girlfriend several times and recently she told him that she has gonorrhea. His blood pressure is 119/78 mm Hg, pulse is 85/min, respiratory rate is 14/min, and temperature is 36.8°C (98.2°F). The urethral meatus appears mildly erythematous, but no pus can be expressed. A testicular examination is normal. An in-office urine test reveals elevated leukocyte esterase levels. An additional swab was taken for further analysis. The patient wants to get treated right away but is afraid because he does not want his parents to know he is sexually active. What is the most appropriate next step for the pediatrician?
- A. Inform the patient that his parents will not be informed, but he cannot receive medical care without their consent.
- B. Contact child protective services.
- C. Break confidentiality and inform the patient that his parents must consent to this treatment.
- D. Maintain confidentiality and treat the patient. (Correct Answer)
- E. Treat the patient and then break confidentiality and inform the parents of the care he received.
State laws and HIPAA interactions Explanation: ***Maintain confidentiality and treat the patient.***
* In many jurisdictions, adolescents (often those 12 and older) can consent to **STI treatment** and other sensitive health services (like contraception or mental health care) **without parental consent**, based on **minor consent laws**.
* Prompt treatment is crucial for **gonorrhea** to prevent complications and further transmission, and maintaining confidentiality encourages adolescents to seek necessary care.
*Inform the patient that his parents will not be informed, but he cannot receive medical care without their consent.*
* This statement is incorrect as, in many places, minors can consent to **STI treatment** independently, recognizing the public health importance and the sensitive nature of these conditions.
* Requiring parental consent for STI treatment would create a barrier to care, potentially leading to **untreated infections** and increased transmission risks among adolescents.
*Contact child protective services.*
* This situation involves an adolescent seeking healthcare for an **STI** and a desire for confidentiality, which does not constitute a reason to contact **child protective services (CPS)**.
* CPS is typically contacted in cases of suspected **child abuse, neglect**, or severe safety concerns, none of which are indicated here.
*Break confidentiality and inform the patient that his parents must consent to this treatment.*
* Breaking confidentiality and insisting on parental consent for **STI treatment** for an adolescent is generally not legally or ethically appropriate in many jurisdictions due to **minor consent laws**.
* This action would likely deter the patient from seeking necessary medical care for fear of parental knowledge, compromising their **health and public health efforts** to control STIs.
*Treat the patient and then break confidentiality and inform the parents of the care he received.*
* While treating the patient is appropriate, breaking **confidentiality** afterward by informing the parents without the patient's consent would be a violation of the trust established and potentially ethical and legal guidelines (depending on the jurisdiction).
* The patient explicitly expressed a desire for confidentiality regarding his sexual activity, and breaching this trust, even after treatment, could harm the **patient-provider relationship** and deter future healthcare-seeking behavior.
State laws and HIPAA interactions US Medical PG Question 2: A 17-year-old girl makes an appointment with her pediatrician because she is concerned that she may have gotten a sexually transmitted infection. Specifically, she had unprotected sex two weeks ago and has since been experiencing painful urination and abdominal pain. Laboratory tests confirm a diagnosis of Chlamydial infection. At this point, the girl says that she wants to personally give permission to be treated rather than seek consent from her parents because they do not know that she is in a relationship. She also asks that the diagnosis not be reported to anyone. What should the physician do with regards to these two patient requests?
- A. Contact her parents as well as report to public health agencies
- B. Do not contact her parents but do report to public health agencies (Correct Answer)
- C. Contact her parents but do not report to public health agencies
- D. Do not contact her parents and do not report to public health agencies
- E. Choose based on the physician's interpretation of the patient's best interests
State laws and HIPAA interactions Explanation: ***Do not contact her parents but do report to public health agencies***
- Minors can consent to **STI treatment** without parental involvement under **emancipated minor doctrines** or specific state laws concerning reproductive health and STIs, ensuring access to care.
- Physicians are legally obligated to report **Chlamydia infection** to public health authorities to prevent further spread and ensure partner notification, adhering to public health mandates.
*Contact her parents as well as report to public health agencies*
- Contacting her parents against her wishes would violate the minor's right to **confidentiality in STI treatment**, which is often protected by law to encourage minors to seek care.
- While reporting to public health agencies is correct, parental notification without consent is generally not required for STI treatment in minors.
*Contact her parents but do not report to public health agencies*
- Not reporting the Chlamydia infection to public health authorities would be a **breach of mandatory reporting laws** for STIs, which are crucial for public health surveillance and control.
- Contacting her parents inappropriately overrides her **right to confidential medical care** for STIs, which is legally protected for minors in many jurisdictions.
*Do not contact her parents and do not report to public health agencies*
- Failing to report the Chlamydia infection violates **public health mandates** for STI surveillance and control, potentially hindering efforts to track and prevent disease spread.
- While not contacting parents is often appropriate for STI treatment in minors, not reporting the diagnosis is a significant **legal and ethical lapse** from a public health perspective.
*Choose based on the physician's interpretation of the patient's best interests*
- While physician judgment is important, the decisions regarding **minor consent for STI treatment** and **mandatory public health reporting** are often governed by specific laws and ethical guidelines that supersede individual interpretation.
- The "best interests" framework is typically applied when there are no clear legal mandates, but in cases of STIs, specific legal precedents guide the physician's actions.
State laws and HIPAA interactions US Medical PG Question 3: A 42-year-old woman presents to the physician with symptoms of vague abdominal pain and bloating for several months. Test results indicate that she has ovarian cancer. Her physician attempts to reach her by phone multiple times but cannot reach her. Next of kin numbers are in her chart. According to HIPAA regulations, who should be the primary person the doctor discusses this information with?
- A. The patient's brother
- B. The patient's husband
- C. The patient's daughter
- D. All of the options
- E. The patient (Correct Answer)
State laws and HIPAA interactions Explanation: ***The patient***
- Under **HIPAA**, the patient has the **right to privacy** regarding their protected health information (PHI). Therefore, the physician must make all reasonable attempts to contact the patient directly to convey their diagnosis.
- Sharing sensitive medical information like a cancer diagnosis with anyone other than the patient, without their explicit consent, would be a **violation of HIPAA regulations**.
*The patient's brother*
- The patient's brother is not automatically authorized to receive her medical information, even if listed as **next of kin**, without the patient's explicit consent or a documented **healthcare power of attorney**.
- Discussing the diagnosis with the brother without the patient's direct consent would be a **breach of patient confidentiality**.
*The patient's husband*
- Even a spouse does not automatically have the right to access a patient's **PHI** without the patient's express permission, according to **HIPAA**.
- While often a trusted contact, without explicit consent, revealing the diagnosis to the husband would still violate the patient's **privacy rights**.
*The patient's daughter*
- Similar to other family members, the patient's daughter is not legally entitled to receive her mother's confidential medical information without explicit authorization or a medical **power of attorney**.
- The physician's primary responsibility is to the patient herself, ensuring her **privacy** is maintained.
*All of the options*
- According to **HIPAA**, sharing the patient's diagnosis with any family member without her explicit consent would be a **breach of confidentiality**.
- This option incorrectly assumes that **next of kin** automatically have the right to receive sensitive medical information.
State laws and HIPAA interactions US Medical PG Question 4: An unconscious 22-year-old woman is brought to the emergency department by police after being found in a park. Physical examination reveals torn clothing and evidence of sexual assault. Which of the following is the most appropriate first step in collecting forensic evidence?
- A. Contact law enforcement
- B. Begin prophylactic antibiotics
- C. Order toxicology screening
- D. Document injuries photographically (Correct Answer)
- E. Obtain written consent from family
State laws and HIPAA interactions Explanation: ***Document injuries photographically***
- **Photographing injuries** is a crucial first step in forensic evidence collection, as it provides objective visual documentation before any changes occur due to medical intervention or passage of time.
- This method helps preserve the appearance and nature of injuries, which can be critical for **legal proceedings** and understanding the mechanism of injury.
*Contact law enforcement*
- While law enforcement must be contacted for sexual assault cases, the **immediate priority** is to secure and document forensic evidence **on the patient's person** before it is compromised.
- Contacting law enforcement does not directly contribute to the **physical collection or preservation** of evidence from the victim.
*Begin prophylactic antibiotics*
- Prophylactic antibiotics are part of the **post-rape care protocol** but should be administered **after** forensic samples have been collected to avoid contamination or alteration of potential evidence.
- Administering antibiotics early could potentially impact the ability to culture certain pathogens for evidence.
*Order toxicology screening*
- Toxicology screening is an important component of the overall assessment, especially given the patient's unconscious state and potential drug-facilitated assault.
- However, **physical evidence of injury** on the body that could change or be lost is a more immediate priority for initial forensic documentation.
*Obtain written consent from family*
- For an unconscious adult, obtaining consent from family for medical treatment is generally required, but **forensic evidence collection** in cases of sexual assault can proceed without immediate family consent, especially when suspicion of a crime is high.
- The immediate priority is the **preservation of time-sensitive evidence**, and delaying for family consent could compromise the collection process.
State laws and HIPAA interactions US Medical PG Question 5: A 4-month-old girl is brought to the pediatric walk-in clinic by her daycare worker with a persistent diaper rash. The daycare worker provided documents to the clinic receptionist stating that she has the authority to make medical decisions when the child’s parents are not available. The patient’s vital signs are unremarkable. She is in the 5th percentile for height and weight. Physical examination reveals a mildly dehydrated, unconsolable infant in a soiled diaper. No signs of fracture, bruising, or sexual trauma. The clinician decides to report this situation to the department of social services. Which of the following is the most compelling deciding factor in making this decision?
- A. There is sufficient evidence to have the child removed from her parent’s home
- B. The daycare worker failed to report the neglect
- C. The daycare worker has paperwork authorizing the physician to report
- D. Physicians are mandated to report (Correct Answer)
- E. Physical abuse suspected
State laws and HIPAA interactions Explanation: ***Physicians are mandated to report***
- All states have **mandated reporting laws** for child abuse and neglect, requiring healthcare professionals to report suspected cases.
- The findings of **malnutrition** (5th percentile for height and weight), **dehydration**, and **persistent diaper rash with a soiled diaper** despite being in daycare raise suspicion for neglect, obligating the physician to report.
*There is sufficient evidence to have the child removed from her parent’s home*
- While the presented signs suggest potential neglect, the decision to remove a child from their home is made by **Child Protective Services (CPS)** or a court, not the reporting physician.
- The physician's role is to **report suspicion**, allowing the relevant authorities to investigate and determine the appropriate action.
*The daycare worker failed to report the neglect*
- The daycare worker *did* bring the child to the clinic due to the persistent diaper rash, which suggests an attempt to address the child's condition.
- While daycare workers are often mandated reporters themselves, their failure to report does not negate the physician's independent and **primary responsibility** to report once neglect is suspected.
*The daycare worker has paperwork authorizing the physician to report*
- The paperwork provided by the daycare worker refers to authorization for **medical decision-making** when parents are unavailable, not explicit authorization for the physician to report suspected neglect.
- The physician's duty to report stems from **state laws** and ethical obligations, not from authorization by a third party.
*Physical abuse suspected*
- The physical examination specifically states **"No signs of fracture, bruising, or sexual trauma,"** ruling out direct physical or sexual abuse as the primary concern.
- The findings (malnutrition, dehydration, persistent diaper rash, soiled diaper) are more indicative of **neglect** rather than active physical abuse.
State laws and HIPAA interactions US Medical PG Question 6: A 5-year-old non-verbal child with a history of autism is brought into the emergency department by his grandmother. The patient’s grandmother is concerned her grandchild is being abused at home. The patient lives in an apartment with his mother, step-father, and two older brothers in low-income housing. The department of social services has an open case regarding this patient and his family. The patient is afebrile. His vital signs include: blood pressure 97/62 mm Hg, pulse 175/min, respiratory rate 62/min. Physical examination reveals a malnourished and dehydrated child in dirty and foul-smelling clothes. Which one of the following people is most likely abusing this patient?
- A. Mother (Correct Answer)
- B. Neighbor
- C. Brother
- D. Stranger
- E. Step-father
State laws and HIPAA interactions Explanation: ***Mother***
- **Child abuse** is complex, but the **mother (or primary caregiver)** is often the abuser, especially in cases where the child is non-verbal and has a disability.
- The child's **malnutrition and poor hygiene** point to neglect, which is a form of abuse, and the primary caregiver is responsible for the child's basic needs.
*Neighbor*
- While abuse can occur outside the home, a **neighbor is highly unlikely** to be responsible for the child's chronic neglect, malnutrition, and dehydration, given the living circumstances described.
- **Neighbors typically do not have consistent, unsupervised access** to a child in a manner that would lead to such severe and ongoing neglect.
*Brother*
- Although **siblings can be perpetrators of abuse**, particularly physical or sexual abuse, it is **uncommon for siblings to be responsible for severe neglect** leading to malnutrition and chronic poor hygiene in a younger child.
- This kind of chronic neglect usually points to a **primary caregiver's failure** to provide basic needs.
*Stranger*
- Abuse by a **stranger is relatively rare** compared to abuse by a family member or acquaintance.
- The consistent pattern of **neglect, malnutrition, and poor hygiene** suggests ongoing failure of care within the home environment, not a single or intermittent encounter with a stranger.
*Step-father*
- A **step-father is a recognized risk factor for child abuse**, and he could certainly be involved, especially given the child's vulnerability.
- However, in cases of **chronic neglect and failure to provide basic care**, the primary responsibility often lies with the **biological parent** who is also a co-resident caregiver.
State laws and HIPAA interactions US Medical PG Question 7: A 26-year-old man comes to the emergency department because of a 1-week history of fever, throat pain, and difficulty swallowing. Head and neck examination shows an erythematous pharynx with purulent exudates overlying the palatine tonsils. Microscopic examination of a throat culture shows pink, spherical bacteria arranged in chains. Treatment with amoxicillin is initiated. A day later, a physician colleague from another department approaches the physician in the lobby of the hospital and asks about this patient, saying, "Did you see him? What does he have? He's someone I play football with and he hasn't come to play for the past 5 days. I'm worried about him." Which of the following is the most appropriate action by the physician?
- A. Inform the colleague that they should ask the patient's attending physician
- B. Inform the colleague that they cannot divulge any information about the patient (Correct Answer)
- C. Tell the colleague the patient's case file number so they can look it up themselves
- D. Tell the colleague that they cannot tell them the diagnosis but that their friend was treated with antibiotics
- E. Ask the colleague to meet in the office so they can discuss the patient in private
State laws and HIPAA interactions Explanation: ***Inform the colleague that they cannot divulge any information about the patient***
- The **Health Insurance Portability and Accountability Act (HIPAA)** strictly prohibits the disclosure of a patient's **Protected Health Information (PHI)** without their explicit consent.
- Even if the inquirer knows the patient, a physician-patient relationship creates a **duty of confidentiality** that supersedes personal acquaintance.
- Disclosing any information without patient consent, even to another physician, violates HIPAA regulations.
*Tell the colleague the patient's case file number so they can look it up themselves*
- Providing the case file number would enable unauthorized access to the patient's medical records, thereby violating **patient confidentiality** and **HIPAA regulations**.
- This action does not rectify the breach of confidentiality and escalates the potential for further misuse of PHI.
*Inform the colleague that they should ask the patient's attending physician*
- Recommending that the colleague ask the attending physician shifts the burden but does not address the underlying ethical and legal obligation of the current physician to maintain **confidentiality**.
- The attending physician would also be bound by **HIPAA** and ethical guidelines not to disclose information without consent.
*Tell the colleague that they cannot tell them the diagnosis but that their friend was treated with antibiotics*
- While seemingly less specific, stating that the friend was treated with **antibiotics** is still a disclosure of **Protected Health Information (PHI)**.
- This action violates **patient confidentiality** as it reveals a detail of the patient's medical management without consent.
*Ask the colleague to meet in the office so they can discuss the patient in private*
- Moving to a private setting does not negate the fact that discussing the patient's information with an unauthorized individual is a **breach of confidentiality**.
- The location of the conversation does not change the ethical and legal obligations to protect **PHI**.
State laws and HIPAA interactions US Medical PG Question 8: A 32-year-old male asks his physician for information regarding a vasectomy. On further questioning, you learn that he and his wife have just had their second child and he asserts that they no longer wish to have additional pregnancies. You ask him if he has discussed a vasectomy with his wife to which he replies, "Well, not yet, but I'm sure she'll agree." What is the next appropriate step prior to scheduling the patient's vasectomy?
- A. Insist that the patient first discuss this procedure with his wife
- B. Telephone the patient's wife to inform her of the plan
- C. Refuse to perform the vasectomy
- D. Explain the risks and benefits of the procedure and request signed consent from the patient and his wife
- E. Explain the risks and benefits of the procedure and request signed consent from the patient (Correct Answer)
State laws and HIPAA interactions Explanation: ***Explain the risks and benefits of the procedure and request signed consent from the patient***
- A patient has the **right to make autonomous decisions** about their own medical care, including reproductive choices, regardless of their marital status or spousal approval.
- The physician's role is to ensure the patient is fully informed and provides **voluntary, uncoerced consent** after understanding the risks, benefits, and alternatives of the procedure.
*Insist that the patient first discuss this procedure with his wife*
- This option would be a **violation of patient autonomy** and confidentiality, as a married person has the right to make independent medical decisions.
- Requiring spousal consent for a procedure performed solely on one individual is not ethically or legally mandated and could be considered discriminatory.
*Telephone the patient's wife to inform her of the plan*
- This action would be a **breach of patient confidentiality**, as the patient's medical information, including his intent to have a vasectomy, cannot be shared with a third party, even a spouse, without explicit permission.
- Informing the wife without the husband's consent also undermines the patient's autonomy and right to privacy regarding his healthcare decisions.
*Refuse to perform the vasectomy*
- Refusing to perform the procedure simply because the patient has not discussed it with his wife would be **unethical and inconsistent with medical professionalism**, assuming the patient is competent and fully informed.
- A physician should not deny medically appropriate care based on a patient's marital dynamics or the presumed wishes of a spouse, as long as the patient's consent is valid.
*Explain the risks and benefits of the procedure and request signed consent from the patient and his wife*
- While it is advisable for a patient to discuss major life decisions with their spouse, requiring **spousal consent for a patient's own medical procedure** is not legally or ethically mandated for competent adults.
- Obtaining consent from both individuals is typically reserved for procedures affecting both parties directly or for those involving a surrogate decision-maker, not for an autonomous adult's personal medical choice.
State laws and HIPAA interactions US Medical PG Question 9: An 86-year-old man is admitted to the hospital for management of pneumonia. His hospital course has been relatively uneventful, and he is progressing well. On morning rounds nearing the end of the patient's hospital stay, the patient's cousin finally arrives to the hospital for the first time after not being present for most of the patient's hospitalization. He asks about the patient's prognosis and potential future discharge date as he is the primary caretaker of the patient and needs to plan for his arrival home. The patient is doing well and can likely be discharged in the next few days. Which of the following is the most appropriate course of action?
- A. Bring the cousin to the room and explain the plan to both the patient and cousin
- B. Explain the plan to discharge the patient in the next few days
- C. Explain that you cannot discuss the patient's care at this time
- D. Tell the cousin that you do not know the patient's course well
- E. Bring the cousin to the room and ask the patient if it is acceptable to disclose his course (Correct Answer)
State laws and HIPAA interactions Explanation: ***Bring the cousin to the room and ask the patient if it is acceptable to disclose his course***
- This option prioritizes **patient autonomy** and privacy by allowing the patient to decide if their medical information can be shared with the cousin.
- Even if the cousin is the primary caretaker, explicit permission from the patient is required under **HIPAA** rules before disclosing protected health information.
- This approach balances **confidentiality protection** with practical discharge planning needs.
*Bring the cousin to the room and explain the plan to both the patient and cousin*
- This option prematurely assumes the patient's consent to share information with the cousin, which may violate **patient privacy**.
- While it facilitates communication, it bypasses the critical step of confirming the patient's willingness to disclose their medical details.
- This constitutes a **HIPAA violation** by disclosing information before obtaining consent.
*Explain the plan to discharge the patient in the next few days*
- Disclosing this information solely to the cousin without the patient's explicit permission constitutes a **breach of confidentiality**.
- This action violates **HIPAA regulations**, even if the cousin is identified as the primary caretaker.
- Protected health information (PHI) cannot be shared with family members without patient authorization.
*Explain that you cannot discuss the patient's care at this time*
- While protecting patient privacy, this response is overly abrupt and unhelpful, potentially creating **frustration** and hindering discharge planning.
- It does not offer a constructive path toward obtaining consent or addressing the cousin's legitimate concerns as a caretaker.
- A better approach involves facilitating consent rather than simply refusing communication.
*Tell the cousin that you do not know the patient's course well*
- This statement is **untruthful** and unprofessional, as the physician on rounds is expected to be knowledgeable about their patient's condition.
- It undermines trust and misrepresents the physician's duty to provide accurate information when appropriate.
- Dishonesty is never an acceptable approach to navigating privacy concerns.
State laws and HIPAA interactions US Medical PG Question 10: An 11-month-old girl presents to a pediatrician with her mother who is concerned about a red discoloration with a rectangular shape over the child’s left buttock presenting since the previous night. The mother also mentions that her daughter has been crying excessively. There is no history of decreased breast feeding, fever, joint swelling, vomiting, decreased urine output, or change in color of urine or stools. The mother denies any history of injury. However, she mentions that the infant had suffered from a self-limiting upper respiratory infection three weeks before. There is no history of bruising or bleeding in the past. The mother informs the doctor that she has a brother (the patient’s maternal uncle) with hemophilia A. On physical examination, the girl’s temperature is 37.0°C (98.6°F), pulse rate is 160/min, and respiratory rate is 38/min. The lesion presents over the left buttock and is tender on palpation. What is the most likely diagnosis?
- A. Erythema multiforme minor
- B. Hemophilia
- C. Idiopathic thrombocytopenic purpura
- D. Diaper dermatitis
- E. Abusive bruise (Correct Answer)
State laws and HIPAA interactions Explanation: ***Abusive bruise***
- The **rectangular shape** of the bruise is a **patterned injury**, highly suggestive of non-accidental trauma (child abuse). Patterned bruises reflect the shape of an object used to inflict injury (e.g., belt, hand, ruler).
- **Location on the buttock** is a common site for abusive injuries, as opposed to accidental bruises which typically occur over bony prominences (shins, knees, forehead).
- **Age of the child** (11 months, pre-ambulatory) makes accidental bruising less likely. Non-mobile infants rarely sustain bruises accidentally.
- **Excessive crying** and **tenderness on palpation** are consistent with recent trauma.
- **Mother's denial of injury** does not rule out abuse by another caregiver.
- This is a **critical patient safety issue** requiring mandatory reporting to child protective services and further investigation.
*Hemophilia*
- While the family history of hemophilia A in a maternal uncle raises the possibility of the child being a carrier, **females with hemophilia A are extremely rare** (requiring extreme lyonization, Turner syndrome, or homozygous state).
- The child has **no prior history of bleeding or bruising**, which would be expected if hemophilia were severe enough to cause spontaneous bruising.
- The **specific rectangular pattern** of this bruise is not consistent with spontaneous bleeding from a coagulopathy, which typically causes diffuse ecchymoses.
- If concerned, coagulation studies (PT, aPTT, factor VIII levels) could be obtained, but the patterned nature of the injury points to trauma.
*Idiopathic thrombocytopenic purpura*
- ITP typically presents with **petechiae and widespread purpura**, not a single discrete rectangular bruise.
- While the recent URI could trigger ITP, the **pattern and location** of this lesion are inconsistent with thrombocytopenic bleeding.
- ITP-related bleeding would not be tender on palpation and would not present in a rectangular shape.
*Erythema multiforme minor*
- Characterized by **target lesions** with concentric rings, typically on extremities and mucous membranes.
- The described lesion is a **tender, rectangular bruise**, not an erythematous target lesion.
- Erythema multiforme is not tender to palpation in the same way as traumatic bruising.
*Diaper dermatitis*
- Presents as **diffuse erythema and irritation** in areas of contact with urine and feces.
- The lesion described is a **discrete, rectangular, tender bruise**, completely inconsistent with the appearance of diaper rash.
- Diaper dermatitis is not typically described as having a specific geometric shape.
More State laws and HIPAA interactions US Medical PG questions available in the OnCourse app. Practice MCQs, flashcards, and get detailed explanations.
