19.4 Common Traps in Medical Ethics, Legal, and Regulatory Issues
Key Takeaways
- The biggest trap is choosing the patient-pleasing answer that exceeds the assistant's scope of practice.
- Social media and casual hallway talk are real HIPAA violations even without releasing a name if the patient is identifiable.
- Negligence requires duty, breach, causation, and damages — informal terms like 'malpractice' map to this four-part test.
- A signed consent or authorization is only valid if it is complete, specific, dated, and matches the actual procedure or release.
19.4 Common Traps in Medical Ethics, Legal, and Regulatory Issues
Wrong answers in this domain are predictable. Learn the trap shapes so you can eliminate them quickly.
Trap 1: Exceeding scope while "helping"
The most common distractor is the warm, fast, patient-pleasing action that quietly crosses the line: interpreting a result, naming a diagnosis, changing a drop, or reassuring a patient about prognosis. Helpfulness never overrides the rule that diagnosis, interpretation, and prescribing belong to the ophthalmologist.
Trap 2: "Informal" privacy breaches
HIPAA violations do not require handing over a chart. These all count:
- Discussing a patient in a hallway, elevator, or waiting room where others hear.
- Posting a "funny case" on social media — even with no name, if the patient is identifiable by photo, eye condition, or context.
- Looking up a celebrity's or neighbor's record out of curiosity (unauthorized access / snooping).
- Leaving ePHI visible on an unattended, logged-in screen.
- Sharing your login so a coworker can "save time."
- Taking a patient photo on a personal phone instead of the practice's secured device.
Penalties are tiered and inflation-adjusted. For 2025 the per-violation minimums run from about $145 (no knowledge) up to $73,011 for willful neglect, with an annual cap near $2.19 million per provision. The exam tests the concept — that curiosity and casual talk are violations — more than the dollar figures.
Trap 3: Skipping or misusing documentation
"If it wasn't documented, it wasn't done." Trap answers omit documentation, back-date, or alter the legal record. Remember the single-line correction rule and that EHR fixes are tracked addenda. A subtle version of this trap is the answer that performs the right clinical step (notify the physician of a high pressure) but never records that notification — leaving no proof if the case is later questioned. The fully defensible answer both acts and documents.
Trap 4: Confusing consent and authorization types
| Term | What it covers | Trap |
|---|---|---|
| Informed consent | Specific procedure, by physician | Assuming a generic form covers a new surgery |
| HIPAA authorization | Release of PHI to a third party | Treating verbal family request as authorization |
| Implied consent | Routine, low-risk care (e.g., taking acuity) | Stretching it to cover invasive procedures |
| Assignment of benefits | Billing, not clinical | Confusing it with clinical consent |
Trap 5: Ignoring the four elements of negligence
Professional negligence requires all four: a duty of care, a breach of the standard, causation, and damages. A stem that describes a harmless mistake with no patient injury usually is not negligence — the trap answer over-labels it.
Trap 6: Self-releasing under legal pressure
A subpoena, attorney letter, or police request feels urgent, but the assistant does not independently release records. Route it to the physician or compliance officer. The fast "just send it" option is the trap.
Trap 7: Confusing liability terms
The exam may use words loosely; you must keep them straight. Battery is touching or treating a patient without valid consent. Abandonment is ending care improperly without arranging coverage. Vicarious liability (respondeat superior) means the employer/physician can be responsible for an assistant's on-the-job errors — which is why staying in scope and following protocol matters. Standard of care is what a reasonably prudent assistant with similar training would do. A trap answer often labels a harmless slip as "malpractice" or treats a consented routine acuity check as "battery."
Trap 8: Misreading delegation and standing orders
Assistants act on delegated authority and standing orders/protocols signed by the physician. A trap answer has the assistant act with no order in place (for example, instilling a cycloplegic with no protocol) or, conversely, refusing a clearly protocol-covered task. Match the action to whether a valid order or protocol exists.
Trap 9: Over- or under-reacting to errors
The right response to a clinical error is proportionate: stop, ensure patient safety, notify the physician, and document via incident report. Trap answers either hide the error (unethical, raises liability) or over-escalate in a way that abandons the patient. The exam rewards the calm, documented, physician-notified path.
Quick elimination checklist
- Does the answer stay inside the COA scope and delegated authority?
- Is PHI protected and the minimum-necessary rule honored?
- Is consent/authorization complete and matched to the act?
- Is the action documented and auditable?
- Does it avoid creating downstream legal or safety risk?
- Does it use liability terms correctly rather than over-labeling?
Run every candidate answer through this list. The option that passes all six is almost always correct, even when a more comforting or faster choice is sitting right next to it.
Trap 10: Treating consent as a one-time signature
Consent is tied to a specific procedure on a specific eye at a specific time. A trap answer reuses an old consent for a new surgery, or treats a general clinic-registration form as authorization for cataract surgery. If the planned act changes, the consent must match the act. The same logic applies to a HIPAA authorization: it must name who may receive what information for what purpose and when it expires. An open-ended or stale authorization is not valid, and an answer relying on one is the distractor.
Trap 11: Assuming verbal beats written, or vice versa
The exam sometimes contrasts a verbal instruction with written policy. The defensible rule is that written, signed documentation generally controls and protects everyone, but a verbal physician order can be valid if promptly documented per protocol. The trap is an answer that acts on an unverified verbal claim with no documentation, or that refuses a legitimate verbal order in an urgent moment when policy clearly allows it. Always anchor to whether the action is authorized and recorded.
Putting the traps to work
Because these traps recur, the most efficient review strategy is to read the answer choices first on hard items and pre-flag any that exceed scope, skip documentation, mishandle PHI, or mislabel liability. That negative screen often eliminates two options before you finish rereading the stem, leaving a clean choice between the remaining two.
Which action is a HIPAA violation even though no chart or record is physically released?