8.1 Scope, Delegation, Consent, and Legal Boundaries

Scope of Practice Is Delegated, Not Inherent

A Certified Clinical Medical Assistant (CCMA) has no independent license. Every clinical task is delegated by a supervising physician, physician assistant, or nurse practitioner and must also be permitted by state law and supported by documented training and competency. Four filters decide whether a task is in scope: (1) does state statute or board rule allow it, (2) did a provider delegate it, (3) is there facility policy authorizing it, and (4) has the MA been trained and signed off. If any filter fails, the task is out of scope.

The exam repeatedly tests acts the CCMA may not do. A CCMA does not diagnose, does not prescribe or adjust medication, does not independently interpret an EKG or lab result for the patient, does not give a final reading, and does not change a treatment plan. The MA may prepare the patient, perform the delegated technical step, record the finding, and relay the provider's instructions. Telling a patient "your potassium is high, take less salt" is diagnosing and counseling beyond scope; the safe answer routes the result to the provider.

What the CCMA May and May Not Do

Consent: Express, Implied, and Informed

Implied consent is inferred from action: a patient who rolls up a sleeve for a blood pressure or holds out an arm for a blood draw has consented to that routine, low-risk act. Express consent is given in words or writing and is required for invasive or higher-risk procedures (an IM injection series, a minor in-office procedure, an electrocardiogram in some policies). Informed consent is a deeper legal standard: the provider must explain the nature of the procedure, its risks, its benefits, and reasonable alternatives, and confirm the patient understands.

The single most-tested trap here: the CCMA's role with the consent form. The MA may hand the patient the form, witness the signature, and verify the form is complete and matches the scheduled procedure. The MA may not answer the patient's questions about risks or alternatives — those questions go back to the provider. A signed form is not valid consent if the patient still has unanswered risk questions; treating the signature as a substitute for the provider's discussion is the wrong answer.

Who Consents When the Patient Cannot

• Minors: A parent or legal guardian usually consents. Exceptions by state statute let minors self-consent for sexually transmitted infection care, contraception, pregnancy, and sometimes mental-health or substance-use treatment. An emancipated minor (married, in the military, or court-declared) consents like an adult.
• Incapacitated adults: A health-care proxy or durable power of attorney for health care speaks for the patient; absent that, a court-appointed guardian.
• Advance directives / living wills state the patient's wishes (for example, a do-not-resuscitate order). The CCMA confirms the directive is in the chart and flags it for the provider; the MA does not decide whether it applies.

Refusal and the Next-Step Rule

A competent adult may refuse any treatment, even one already scheduled. The safe sequence is: respect the refusal, do not coerce, notify the provider, and document the refusal and the patient's stated reason in objective terms. Continuing a procedure after refusal is battery. When scope, delegation authority, or consent is unclear, the exam-correct move is to pause and clarify up the chain of command rather than guess.

Watch for these distractors: "perform the procedure because it was already on the schedule," "explain the surgical risks yourself so the visit stays on time," and "reassure the patient there is nothing to worry about." Each crosses a scope or consent line.

The Scope-of-Practice Pyramid in Practice

Think of CCMA authority as a pyramid you climb from the bottom up. The base is state law and the state medical board — some states explicitly list MA tasks, others rely on the delegating provider's judgment, and a few restrict acts such as administering injections or performing venipuncture. Above that sits facility policy, which can be more restrictive than state law but never less. Next is provider delegation — a specific, current order or standing protocol from the supervising clinician. The top is documented competency — the MA's training records and skills checkoff. An act must clear all four levels.

If a new graduate is asked to perform a task they were never checked off on, the safe answer is to decline and request training or supervision, even if state law technically allows it.

This pyramid explains why the same task can be in scope in one office and out of scope in another. The exam will not give you a single national list; instead it gives a scenario and expects you to reason: is there delegation, is there policy, is there training, does state law allow it. Liability flows up the pyramid too — the supervising provider is responsible for delegated acts, which is exactly why the provider, not the MA, must own diagnosis, prescribing, and informed consent.

Documentation and the Standard of Care

Legal exposure for the practice is reduced by good documentation. Negligence is failing to meet the standard of care — what a reasonably prudent MA with similar training would do — and causing harm. The four elements a plaintiff must prove are duty, breach (dereliction), causation, and damages. The CCMA reduces risk by charting objectively, completing consent forms correctly, following the order, and escalating uncertainty. "If it wasn't documented, it wasn't done" is the operating assumption: a refusal, a provider notification, or a patient instruction that is not charted is hard to defend later.

Never alter a record after the fact; corrections are made with a single line through the error, the correction, your initials, and the date — never by erasing or obscuring the original entry.