2.3 Regulatory Compliance & Quality
Key Takeaways
- HIPAA's Privacy Rule protects identifiable health information and requires the minimum necessary standard — access and disclose only the information needed for the task.
- CLIA (Clinical Laboratory Improvement Amendments) is administered by CMS and sets quality standards for all U.S. laboratory testing on human specimens.
- Two independent patient identifiers (such as full name and date of birth) must be confirmed before every collection — never the room or bed number.
- Specimens must be labeled at the patient's side immediately after collection, before leaving the patient, to prevent misidentification.
- Mislabeled or unlabeled specimens are a leading cause of preanalytical specimen rejection and can cause serious patient harm.
Compliance and quality questions ask whether you can protect patient information, follow lab regulations, and prevent the errors that cause patient harm. These appear throughout the 26% Safety and Compliance domain and overlap with Patient Preparation.
HIPAA and Patient Confidentiality
The Health Insurance Portability and Accountability Act (HIPAA) protects the privacy and security of protected health information (PHI) — any individually identifiable health information, including a patient's name tied to a test order.
Core concepts the exam tests:
- Minimum necessary standard — access, use, and disclose only the PHI required to do your job. A phlebotomist does not need a patient's full medical history to draw blood.
- Confidentiality in practice — do not discuss patients in hallways or elevators, do not share results with the patient (refer them to the ordering provider), and keep requisitions and screens out of public view.
- Authorized disclosure — PHI may be shared for treatment, payment, and healthcare operations; other disclosures generally require patient authorization.
- A breach includes leaving a labeled tube or requisition where unauthorized people can see it, or sending results to the wrong recipient.
CLIA Overview
The Clinical Laboratory Improvement Amendments (CLIA) of 1988 establish quality standards for all laboratory testing performed on humans in the United States. CLIA is administered by the Centers for Medicare & Medicaid Services (CMS), with the CDC and FDA in supporting roles.
- Any facility that tests human specimens must hold a CLIA certificate.
- Tests are categorized by complexity: waived, moderate complexity, and high complexity.
- CLIA governs personnel qualifications, quality control, proficiency testing, and recordkeeping.
- For phlebotomy, CLIA reinforces correct specimen collection, labeling, and handling as part of the preanalytical phase of testing.
Patient Identification and Error Prevention
Misidentification is one of the most dangerous errors in healthcare. The standard is to verify at least two independent patient identifiers before any collection.
| Acceptable Identifiers | NOT Acceptable as Identifiers |
|---|---|
| Full legal name | Room number |
| Date of birth | Bed number |
| Medical record number | Physical location |
| Government-issued ID number | A name stated by someone else only |
Procedure:
- Ask the patient to state and spell their full name and date of birth (active identification) — do not ask "Are you Mr. Smith?" because a confused patient may say yes.
- Compare the stated information against the requisition and the patient's wristband (for inpatients).
- Resolve any discrepancy before drawing — stop and verify; do not proceed on assumption.
Labeling and the Preanalytical Phase
Most laboratory errors occur in the preanalytical phase (before testing) — ordering, patient prep, collection, labeling, and transport. Label every tube at the patient's side, immediately after collection, before leaving the patient. A label includes patient name, a second identifier, date, time, and collector ID. Pre-labeling tubes before the draw and labeling after leaving the room are both common, dangerous errors.
Specimen Rejection
A mislabeled or unlabeled specimen is a leading cause of rejection. Other rejection causes include hemolysis, clotted anticoagulated tubes, quantity not sufficient (QNS), wrong tube, and expired tubes. A rejected specimen requires recollection, which delays care.
Quality Assurance and Documentation
Quality assurance (QA) is the comprehensive program that monitors and improves the entire testing process; quality control (QC) is the narrower day-to-day checking of equipment and reagents. Phlebotomy QA includes monitoring redraw rates, hemolysis rates, labeling error rates, and turnaround time.
Documentation must be accurate, legible, timely, and complete. If an error is made on a paper record, draw a single line through it, write "error," then initial and date — never erase or use correction fluid. The principle is: if it was not documented, it was not done.
Professional, Legal, and Ethical Responsibilities
Phlebotomists work within a legal and ethical framework. Key terms frequently tested:
| Term | Meaning | Phlebotomy Example |
|---|---|---|
| Informed consent | Patient understands and agrees to the procedure | Explaining the draw before proceeding |
| Implied consent | Consent inferred from the patient's actions | Patient extends their arm |
| Assault | Threatening or attempting to touch without consent | Approaching with a needle after refusal |
| Battery | Touching without consent | Drawing blood after the patient says no |
| Negligence | Failure to act with reasonable standard of care | Skipping patient identification |
| Scope of practice | The duties you are trained and authorized to perform | Not interpreting results for the patient |
A competent adult has the right to refuse a blood draw. If a patient refuses, do not force the draw (that is battery); document the refusal and notify the nurse or provider. Always act within your scope of practice and escalate anything outside it.
What does HIPAA's "minimum necessary" standard require of a phlebotomist?
Which agency administers the Clinical Laboratory Improvement Amendments (CLIA)?
An inpatient is unable to speak. Which combination is acceptable for confirming patient identity before a draw?
A competent adult patient clearly refuses a blood draw. Drawing the blood anyway despite the refusal is an example of which legal concept?