Ethics & Legal Issues in Healthcare Practice Practice Exam | Updated 2026
Complete Study Guide | Verified Questions with Detailed Rationales on Patient
Rights & Informed Consent, Confidentiality & HIPAA Compliance, Medical
Negligence & Malpractice, Ethical Decision-Making Frameworks, End-of-Life Care &
Advance Directives, Documentation & Legal Accountability, Professional
Boundaries, Risk Management Strategies, and Healthcare Law Essentials for
Certification Success
Question 1: Which ethical principle emphasizes the obligation to respect a patient's right
to make their own healthcare decisions?
A. Beneficence
B. Non-maleficence
C. Autonomy
D. Justice
CORRECT ANSWER: C. Autonomy
RATIONALE: Autonomy is the ethical principle that recognizes a patient's right to self-
determination and to make informed decisions about their own care without coercion. This
principle underpins informed consent practices and requires healthcare providers to provide
adequate information for patients to exercise their decision-making authority.
Question 2: Under HIPAA, when is a healthcare provider permitted to disclose protected
health information (PHI) without patient authorization?
A. When a family member requests the information out of concern
B. When disclosure is necessary for treatment, payment, or healthcare operations
C. When the provider believes disclosure would benefit the patient
D. When the information is requested by an employer
CORRECT ANSWER: B. When disclosure is necessary for treatment, payment, or
healthcare operations
RATIONALE: HIPAA permits disclosure of PHI without explicit patient authorization for
treatment, payment, and healthcare operations (TPO). Other disclosures generally require
patient authorization or must meet specific exceptions defined by law, such as public health
reporting or court orders.
Question 3: A competent adult patient refuses a life-saving blood transfusion based on
religious beliefs. What is the ethically and legally appropriate response?
A. Administer the transfusion under the doctrine of implied consent
B. Seek a court order to override the patient's refusal
C. Respect the patient's decision and document the informed refusal
D. Consult the hospital ethics committee before proceeding
CORRECT ANSWER: C. Respect the patient's decision and document the informed refusal
RATIONALE: Competent adults have the legal and ethical right to refuse medical treatment,
even if the refusal may result in death. Healthcare providers must ensure the patient
understands the risks and consequences, document the informed refusal thoroughly, and
respect the patient's autonomous decision.
,Question 4: Which element is NOT required to establish a claim of medical negligence?
A. Duty of care
B. Breach of the standard of care
C. Patient dissatisfaction with outcomes
D. Causation and damages
CORRECT ANSWER: C. Patient dissatisfaction with outcomes
RATIONALE: To prove medical negligence, four elements must be established: (1) a duty of care
existed, (2) the provider breached the applicable standard of care, (3) the breach caused harm
(causation), and (4) actual damages resulted. Patient dissatisfaction alone, without evidence of
breach and causation, does not constitute negligence.
Question 5: What is the primary purpose of an institutional ethics committee in a
healthcare organization?
A. To discipline staff who violate ethical standards
B. To provide consultation, education, and policy development on ethical issues
C. To make binding legal determinations in patient care disputes
D. To represent the organization in malpractice litigation
CORRECT ANSWER: B. To provide consultation, education, and policy development on
ethical issues
RATIONALE: Healthcare ethics committees serve advisory, educational, and policy-
development functions. They provide consultation on complex ethical dilemmas, facilitate
interdisciplinary dialogue, and help develop organizational policies, but they do not have legal
authority to make binding decisions or discipline staff.
Question 6: A nurse discovers that a colleague has been administering medications to
patients without proper verification of the physician's order. What is the nurse's primary
ethical obligation?
A. Confront the colleague privately and request they stop
B. Report the behavior through the organization's established chain of command
C. Document the observation in the patient's medical record
D. Ignore the situation unless patient harm occurs
CORRECT ANSWER: B. Report the behavior through the organization's established chain of
command
RATIONALE: Healthcare professionals have an ethical duty to protect patient safety. When
observing potentially unsafe or unethical practice, the appropriate action is to report concerns
through established organizational channels, such as a supervisor, risk management, or
compliance office, to ensure proper investigation and intervention.
Question 7: Which scenario best illustrates the ethical principle of distributive justice in
healthcare?
A. Providing the same treatment to all patients regardless of need
B. Allocating limited ICU beds based on medical urgency and likelihood of benefit
C. Allowing patients to choose any available provider regardless of insurance
D. Prioritizing care for patients who can pay out-of-pocket
,CORRECT ANSWER: B. Allocating limited ICU beds based on medical urgency and
likelihood of benefit
RATIONALE: Distributive justice concerns the fair allocation of scarce resources. In healthcare,
this principle supports allocation decisions based on clinically relevant criteria such as medical
need, urgency, and potential benefit, rather than on socioeconomic status, ability to pay, or
other non-clinical factors.
Question 8: What does the legal doctrine of "respondeat superior" establish in healthcare
settings?
A. Patients are responsible for providing accurate medical histories
B. Employers may be held liable for the negligent acts of employees performed within the scope
of employment
C. Healthcare providers must respond to all patient requests within 24 hours
D. Supervisors are exempt from liability for subordinate errors
CORRECT ANSWER: B. Employers may be held liable for the negligent acts of employees
performed within the scope of employment
RATIONALE: Respondeat superior ("let the master answer") is a legal doctrine holding
employers vicariously liable for negligent acts committed by employees while acting within the
scope of their employment. This principle incentivizes organizations to maintain proper
supervision, training, and quality control systems.
Question 9: A patient with advanced dementia has no advance directive. Who is typically
authorized to make healthcare decisions on the patient's behalf in most jurisdictions?
A. The attending physician
B. The hospital administrator
C. A court-appointed guardian or legally designated surrogate per state hierarchy
D. The patient's closest friend
CORRECT ANSWER: C. A court-appointed guardian or legally designated surrogate per
state hierarchy
RATIONALE: When a patient lacks decision-making capacity and has no advance directive,
most states have statutory hierarchies identifying who may serve as a surrogate decision-maker
(e.g., spouse, adult children, parents). If no suitable surrogate is available or disputes arise, a
court may appoint a guardian.
Question 10: Which action constitutes a breach of patient confidentiality under HIPAA?
A. Discussing a patient's case with the care team during rounds
B. Leaving a detailed voicemail about test results on a patient's home phone
C. Sharing de-identified data for quality improvement purposes
D. Reporting a notifiable infectious disease to public health authorities
CORRECT ANSWER: B. Leaving a detailed voicemail about test results on a patient's home
phone
RATIONALE: HIPAA requires reasonable safeguards to protect PHI. Leaving detailed health
information on a voicemail that others might access violates the minimum necessary standard
, and fails to ensure confidentiality. Communication should use secure methods or limit content
to appointment reminders unless the patient has authorized detailed messages.
Question 11: What is the ethical distinction between withholding and withdrawing life-
sustaining treatment?
A. Withholding is legally permissible; withdrawing is not
B. Withdrawing treatment is considered euthanasia; withholding is not
C. There is no ethical or legal distinction; both are permissible when consistent with patient
wishes
D. Withholding requires family consent; withdrawing requires court approval
CORRECT ANSWER: C. There is no ethical or legal distinction; both are permissible when
consistent with patient wishes
RATIONALE: Ethically and legally, withholding (not starting) and withdrawing (stopping) life-
sustaining treatments are equivalent when based on the patient's informed preferences or best
interests. Both actions respect patient autonomy and are not considered euthanasia, as the
underlying disease process, not the cessation of treatment, causes death.
Question 12: Which statement accurately describes the "standard of care" in medical
malpractice law?
A. The highest possible level of care achievable by any provider
B. The care that a reasonably prudent provider with similar training would provide under similar
circumstances
C. The care outlined in the most recent clinical practice guideline
D. The care that the patient explicitly requested
CORRECT ANSWER: B. The care that a reasonably prudent provider with similar training
would provide under similar circumstances
RATIONALE: The legal standard of care is defined as the level and type of care that a reasonably
competent and skilled healthcare professional, with a similar background and in the same
medical community, would have provided under the circumstances. It is not perfection or the
latest guideline, but reasonable prudence.
Question 13: A healthcare provider suspects child abuse based on unexplained injuries in
a pediatric patient. What is the provider's legal obligation in most U.S. jurisdictions?
A. Discuss concerns with the parents before taking action
B. Report the suspicion to child protective services or law enforcement as required by
mandatory reporting laws
C. Document the findings and monitor for additional evidence
D. Consult the hospital ethics committee before reporting
CORRECT ANSWER: B. Report the suspicion to child protective services or law
enforcement as required by mandatory reporting laws
RATIONALE: Healthcare providers are mandated reporters in all U.S. states. When there is
reasonable suspicion of child abuse or neglect, providers must report to the appropriate
authorities promptly. Failure to report can result in legal penalties, and reports made in good
faith are typically protected from liability.
Complete Study Guide | Verified Questions with Detailed Rationales on Patient
Rights & Informed Consent, Confidentiality & HIPAA Compliance, Medical
Negligence & Malpractice, Ethical Decision-Making Frameworks, End-of-Life Care &
Advance Directives, Documentation & Legal Accountability, Professional
Boundaries, Risk Management Strategies, and Healthcare Law Essentials for
Certification Success
Question 1: Which ethical principle emphasizes the obligation to respect a patient's right
to make their own healthcare decisions?
A. Beneficence
B. Non-maleficence
C. Autonomy
D. Justice
CORRECT ANSWER: C. Autonomy
RATIONALE: Autonomy is the ethical principle that recognizes a patient's right to self-
determination and to make informed decisions about their own care without coercion. This
principle underpins informed consent practices and requires healthcare providers to provide
adequate information for patients to exercise their decision-making authority.
Question 2: Under HIPAA, when is a healthcare provider permitted to disclose protected
health information (PHI) without patient authorization?
A. When a family member requests the information out of concern
B. When disclosure is necessary for treatment, payment, or healthcare operations
C. When the provider believes disclosure would benefit the patient
D. When the information is requested by an employer
CORRECT ANSWER: B. When disclosure is necessary for treatment, payment, or
healthcare operations
RATIONALE: HIPAA permits disclosure of PHI without explicit patient authorization for
treatment, payment, and healthcare operations (TPO). Other disclosures generally require
patient authorization or must meet specific exceptions defined by law, such as public health
reporting or court orders.
Question 3: A competent adult patient refuses a life-saving blood transfusion based on
religious beliefs. What is the ethically and legally appropriate response?
A. Administer the transfusion under the doctrine of implied consent
B. Seek a court order to override the patient's refusal
C. Respect the patient's decision and document the informed refusal
D. Consult the hospital ethics committee before proceeding
CORRECT ANSWER: C. Respect the patient's decision and document the informed refusal
RATIONALE: Competent adults have the legal and ethical right to refuse medical treatment,
even if the refusal may result in death. Healthcare providers must ensure the patient
understands the risks and consequences, document the informed refusal thoroughly, and
respect the patient's autonomous decision.
,Question 4: Which element is NOT required to establish a claim of medical negligence?
A. Duty of care
B. Breach of the standard of care
C. Patient dissatisfaction with outcomes
D. Causation and damages
CORRECT ANSWER: C. Patient dissatisfaction with outcomes
RATIONALE: To prove medical negligence, four elements must be established: (1) a duty of care
existed, (2) the provider breached the applicable standard of care, (3) the breach caused harm
(causation), and (4) actual damages resulted. Patient dissatisfaction alone, without evidence of
breach and causation, does not constitute negligence.
Question 5: What is the primary purpose of an institutional ethics committee in a
healthcare organization?
A. To discipline staff who violate ethical standards
B. To provide consultation, education, and policy development on ethical issues
C. To make binding legal determinations in patient care disputes
D. To represent the organization in malpractice litigation
CORRECT ANSWER: B. To provide consultation, education, and policy development on
ethical issues
RATIONALE: Healthcare ethics committees serve advisory, educational, and policy-
development functions. They provide consultation on complex ethical dilemmas, facilitate
interdisciplinary dialogue, and help develop organizational policies, but they do not have legal
authority to make binding decisions or discipline staff.
Question 6: A nurse discovers that a colleague has been administering medications to
patients without proper verification of the physician's order. What is the nurse's primary
ethical obligation?
A. Confront the colleague privately and request they stop
B. Report the behavior through the organization's established chain of command
C. Document the observation in the patient's medical record
D. Ignore the situation unless patient harm occurs
CORRECT ANSWER: B. Report the behavior through the organization's established chain of
command
RATIONALE: Healthcare professionals have an ethical duty to protect patient safety. When
observing potentially unsafe or unethical practice, the appropriate action is to report concerns
through established organizational channels, such as a supervisor, risk management, or
compliance office, to ensure proper investigation and intervention.
Question 7: Which scenario best illustrates the ethical principle of distributive justice in
healthcare?
A. Providing the same treatment to all patients regardless of need
B. Allocating limited ICU beds based on medical urgency and likelihood of benefit
C. Allowing patients to choose any available provider regardless of insurance
D. Prioritizing care for patients who can pay out-of-pocket
,CORRECT ANSWER: B. Allocating limited ICU beds based on medical urgency and
likelihood of benefit
RATIONALE: Distributive justice concerns the fair allocation of scarce resources. In healthcare,
this principle supports allocation decisions based on clinically relevant criteria such as medical
need, urgency, and potential benefit, rather than on socioeconomic status, ability to pay, or
other non-clinical factors.
Question 8: What does the legal doctrine of "respondeat superior" establish in healthcare
settings?
A. Patients are responsible for providing accurate medical histories
B. Employers may be held liable for the negligent acts of employees performed within the scope
of employment
C. Healthcare providers must respond to all patient requests within 24 hours
D. Supervisors are exempt from liability for subordinate errors
CORRECT ANSWER: B. Employers may be held liable for the negligent acts of employees
performed within the scope of employment
RATIONALE: Respondeat superior ("let the master answer") is a legal doctrine holding
employers vicariously liable for negligent acts committed by employees while acting within the
scope of their employment. This principle incentivizes organizations to maintain proper
supervision, training, and quality control systems.
Question 9: A patient with advanced dementia has no advance directive. Who is typically
authorized to make healthcare decisions on the patient's behalf in most jurisdictions?
A. The attending physician
B. The hospital administrator
C. A court-appointed guardian or legally designated surrogate per state hierarchy
D. The patient's closest friend
CORRECT ANSWER: C. A court-appointed guardian or legally designated surrogate per
state hierarchy
RATIONALE: When a patient lacks decision-making capacity and has no advance directive,
most states have statutory hierarchies identifying who may serve as a surrogate decision-maker
(e.g., spouse, adult children, parents). If no suitable surrogate is available or disputes arise, a
court may appoint a guardian.
Question 10: Which action constitutes a breach of patient confidentiality under HIPAA?
A. Discussing a patient's case with the care team during rounds
B. Leaving a detailed voicemail about test results on a patient's home phone
C. Sharing de-identified data for quality improvement purposes
D. Reporting a notifiable infectious disease to public health authorities
CORRECT ANSWER: B. Leaving a detailed voicemail about test results on a patient's home
phone
RATIONALE: HIPAA requires reasonable safeguards to protect PHI. Leaving detailed health
information on a voicemail that others might access violates the minimum necessary standard
, and fails to ensure confidentiality. Communication should use secure methods or limit content
to appointment reminders unless the patient has authorized detailed messages.
Question 11: What is the ethical distinction between withholding and withdrawing life-
sustaining treatment?
A. Withholding is legally permissible; withdrawing is not
B. Withdrawing treatment is considered euthanasia; withholding is not
C. There is no ethical or legal distinction; both are permissible when consistent with patient
wishes
D. Withholding requires family consent; withdrawing requires court approval
CORRECT ANSWER: C. There is no ethical or legal distinction; both are permissible when
consistent with patient wishes
RATIONALE: Ethically and legally, withholding (not starting) and withdrawing (stopping) life-
sustaining treatments are equivalent when based on the patient's informed preferences or best
interests. Both actions respect patient autonomy and are not considered euthanasia, as the
underlying disease process, not the cessation of treatment, causes death.
Question 12: Which statement accurately describes the "standard of care" in medical
malpractice law?
A. The highest possible level of care achievable by any provider
B. The care that a reasonably prudent provider with similar training would provide under similar
circumstances
C. The care outlined in the most recent clinical practice guideline
D. The care that the patient explicitly requested
CORRECT ANSWER: B. The care that a reasonably prudent provider with similar training
would provide under similar circumstances
RATIONALE: The legal standard of care is defined as the level and type of care that a reasonably
competent and skilled healthcare professional, with a similar background and in the same
medical community, would have provided under the circumstances. It is not perfection or the
latest guideline, but reasonable prudence.
Question 13: A healthcare provider suspects child abuse based on unexplained injuries in
a pediatric patient. What is the provider's legal obligation in most U.S. jurisdictions?
A. Discuss concerns with the parents before taking action
B. Report the suspicion to child protective services or law enforcement as required by
mandatory reporting laws
C. Document the findings and monitor for additional evidence
D. Consult the hospital ethics committee before reporting
CORRECT ANSWER: B. Report the suspicion to child protective services or law
enforcement as required by mandatory reporting laws
RATIONALE: Healthcare providers are mandated reporters in all U.S. states. When there is
reasonable suspicion of child abuse or neglect, providers must report to the appropriate
authorities promptly. Failure to report can result in legal penalties, and reports made in good
faith are typically protected from liability.
