Study Guide

CMAA Study Guide: Medical Administrative Assistant

Learn 60 CMAA concepts with worked examples, common mistakes, checked references, and a free practice test.

Updated October 202625 min readStudy GuideMedCodely
Maria Dawson

Maria Dawson

MedCodely Editorial Team

Work through the ten groups in order, because earlier groups build the terminology and communication habits later groups assume. Each concept pairs a working rule with a resolved example and a specific error to avoid, so read the rule, decide the example yourself before reading its outcome, and note the mistake. This is an independent study aid, not an official syllabus or a substitute for official materials; references below support the rules taught here.

Medical Terminology and Abbreviations

1. Building Terms from Word Parts

Most medical terms decode by dividing them into prefix, root, and suffix. The root names the body structure, the prefix modifies timing, direction, or degree, and the suffix names a condition, field, specialist, or instrument. Decoding parts lets you define unfamiliar terms instead of memorizing each one.

Example: A referral reads nephrology. Splitting nephr/o (kidney) plus -logy (study of) routes the patient to a kidney specialist rather than guessing from the whole word.

Mistake to avoid: Memorizing terms as unbroken words and misrouting referrals when an unfamiliar specialty appears.

Reference: NHA: CMAA exam test plan

2. Prefixes of Degree: Hyper- Versus Hypo-

Hyper- means excessive or above normal, and hypo- means deficient or below. These opposites change a term's meaning entirely, so verifying which prefix appears determines whether a value is described as high or low and how urgently a message is handled.

Example: A caller mentions hypoglycemia. Because hypo- signals below-normal blood sugar, staff flags the message for prompt clinical attention rather than treating it as a routine high-sugar follow-up.

Mistake to avoid: Reading hypo- as high, which reverses the urgency of the message passed to clinical staff.

Reference: NHA: CMAA exam test plan

3. Timing Prefixes: Pre-, Post-, and Peri-

Pre- means before, post- means after, and peri- means around an event. Scheduling and instruction materials hinge on this timing: pre-procedure instructions prepare patients ahead of a test, while post-procedure guidance covers what happens afterward.

Example: The physician orders preoperative labs. Staff books them before the surgery date and reserves the postoperative visit for the following week, keeping each instruction in its correct window.

Mistake to avoid: Handing patients post-procedure instructions at the pre-testing appointment, confusing preparation with recovery.

Reference: NHA: CMAA exam test plan

4. Root Words for Major Organ Systems

Common roots identify organ systems: cardi/o for heart, vascul/o for vessels, gastr/o for stomach, hepat/o for liver, and nephr/o for kidney. Matching the root to the system tells you which chart section, referral, or specialist the item belongs to.

Example: A report labeled with the hepat/o root is filed under liver-related laboratory results, and any referral goes to a liver specialist rather than the kidney clinic.

Mistake to avoid: Filing a hepatology report in the nephrology section because the two terms look similar.

Reference: NHA: CMAA exam test plan

5. Suffixes That Name Conditions and Roles

Suffixes classify what a word describes: -itis signals inflammation, -osis an abnormal condition, -pathy disease, -logy the study of, -ist a specialist, and -graph a recording instrument. The suffix, not the root, tells you whether you are handling a condition, a field, or a device.

Example: A cardiology consult note routes to the cardi-ologist, while an order for a cardiograph schedules a recording test, because the suffixes identify person versus instrument.

Mistake to avoid: Assuming -itis always means infection and scheduling infectious-disease follow-up for ordinary inflammation.

Reference: NHA: CMAA exam test plan

6. Administrative Abbreviations in Daily Work

Front-office abbreviations carry fixed meanings: Hx is history, Pt is patient, H&P is history and physical, Dx is diagnosis, CC is chief complaint, and Rx is prescription. Payer acronyms matter too: an HMO generally routes care through a designated primary provider, while a PPO offers broader network choice.

Example: A message reads CC: chest pain. Interpreting CC as chief complaint, staff routes it as an urgent visit reason instead of filing it as a copy request.

Mistake to avoid: Confusing CC with copy, or treating HMO and PPO as interchangeable network types.

Reference: NHA: CMAA exam test plan

Front Desk Communication and Daily Operations

7. Greeting and Triage of Arrivals

On arrival, acknowledge every patient promptly, determine whether the visit is sick or well, and whether the patient is new or established. These two classifications drive waiting-area placement, the paperwork required, and which chart and forms must be readied before the patient reaches the back office.

Example: A coughing walk-in is acknowledged, identified as a sick established patient, and seated away from well visits while the chart is pulled.

Mistake to avoid: Assuming every arrival is established and skipping intake paperwork for new patients.

Reference: NHA: CMAA exam test plan

8. Telephone Etiquette Basics

Answer by introducing the facility and yourself, identify the type of caller, and clarify the caller's need before acting. Gathering the need first prevents misdirected transfers and lets you route clinical, billing, and scheduling requests to the correct person efficiently.

Example: A caller identifies herself as a patient's daughter with a billing question. Staff confirms the need is billing, not clinical, and routes her to the accounts desk.

Mistake to avoid: Transferring a call before learning who is calling and what they actually need.

Reference: NHA: CMAA exam test plan

9. Managing Extended Hold Times

When a call must be placed on hold, return to the caller periodically to check in and give status. This keeps callers informed, reduces hang-ups and lost messages, and lets the caller choose to keep waiting or leave a callback number for a return call.

Example: While locating a record, staff returns to the line twice with updates and offers a callback option, so the caller never sits in silence.

Mistake to avoid: Leaving callers on indefinite silent holds and losing their requests entirely.

Reference: NHA: CMAA exam test plan

10. Office Opening Procedures

Opening tasks set the day's foundation: check phone, email, and fax messages; confirm charts are prepared; count petty cash; turn equipment on; and clear the reception area. Completing these before patients arrive prevents interruptions and missing information during visits.

Example: An overnight faxed referral is found at opening and attached to the chart before the patient checks in, so the visit proceeds without delay.

Mistake to avoid: Opening the doors before reviewing overnight messages and discovering referrals mid-visit.

Reference: NHA: CMAA exam test plan

11. Office Closing Procedures

At close, balance day sheets against receipts, back up data, direct phones to the answering service, power down equipment, and prepare charts for the next day. Closing reconciliation catches payment discrepancies while the day's transactions are still traceable and correctable.

Example: The day sheet shows a ten-dollar variance; staff traces it to an unrecorded copay and corrects the ledger before leaving.

Mistake to avoid: Leaving day sheets unbalanced overnight, when the details of transactions fade.

Reference: NHA: CMAA exam test plan

12. Computer Use and Password Discipline

Front-desk work relies on email, word processing, spreadsheets, and hardware such as copiers, fax machines, and scanners, all governed by privacy habits: unique passwords, locked screens, and careful faxing. Passwords are personal and never shared, because access logs must trace actions to the actual user.

Example: A staffer steps away to retrieve a chart and locks the screen first, so a waiting patient cannot view an open record.

Mistake to avoid: Sharing a login so a colleague can finish a task, destroying accountability for chart access.

Reference: NHA: CMAA exam test plan

Scheduling Methods

13. Wave Booking

Wave booking schedules several patients at the start of the same hour and sees them in arrival order. It builds slack that absorbs late arrivals and variable visit lengths, keeping the provider productive even when one patient is delayed or a visit runs short.

Example: Four patients are booked at 9:00 where visit lengths vary widely; the built-in flexibility keeps the hour productive even when one arrives late.

Mistake to avoid: Confusing wave booking with double-booking, which stacks only two patients in one slot.

Reference: NHA: CMAA exam test plan

14. Double-Booking

Double-booking places two patients in one time slot, usually pairing a short, predictable visit with a longer one. It salvages capacity when a provider falls behind, but overuse creates waits, so it should be limited to brief, predictable visit types.

Example: A quick suture-removal check is double-booked beside a new-patient workup because the short visit can flex around the longer one.

Mistake to avoid: Double-booking two lengthy new-patient evaluations into the same slot.

Reference: NHA: CMAA exam test plan

15. Modified Wave Scheduling

Modified wave books several patients at the top of the hour and spaces the rest at intervals through it. It keeps wave flexibility while capping how long any single patient might wait, blending the advantages of wave and stream approaches.

Example: Two patients start at 9:00, one at 9:20, and one at 9:40, so late-hour arrivals still face a bounded wait.

Mistake to avoid: Treating modified wave as pure stream scheduling and spacing every patient evenly.

Reference: NHA: CMAA exam test plan

16. Stream or Time-Specific Scheduling

Stream scheduling assigns each patient a fixed, specific appointment time at set intervals. It minimizes waiting when visits are uniform, but any overrun cascades through the day, so the interval length must match the actual duration of the visit type booked.

Example: Routine fifteen-minute follow-ups fill the morning in exact slots; a lengthy procedure is deliberately given a different interval rather than squeezed in.

Mistake to avoid: Applying uniform short intervals to procedures that routinely run long.

Reference: NHA: CMAA exam test plan

17. Open Booking

Open booking gives patients a broad window, such as morning hours, and sees them in arrival order without fixed times. It suits walk-in style acute care, but it makes wait prediction impossible, so expectations must be set clearly when the patient is told about the window.

Example: A patient is told the clinic accepts walk-ins from eight to eleven and is seen in arrival order, with no specific time promised.

Mistake to avoid: Promising an exact visit time under open booking, which arrival order cannot honor.

Reference: NHA: CMAA exam test plan

18. Cluster or Categorization Booking

Cluster or categorization booking groups similar visit types into shared blocks, such as all physicals on one morning. Grouping lets staff prepare equipment and paperwork once, and it reserves protected time for visit categories that need extra resources or staff support.

Example: All insurance physicals are clustered Tuesday mornings so forms and vitals stations are staged once instead of repeatedly through the week.

Mistake to avoid: Scattering resource-heavy visit types across the day, forcing repeated setup.

Reference: NHA: CMAA exam test plan

Appointment Coordination and Diagnostic Testing

19. Verifying Patient Identity Before Booking

Before opening any chart, confirm identity using at least two distinguishing data points, because practices hold patients with the same last name, the same first and last name, and even the same date of birth. Full name plus date of birth is the usual discriminator that prevents wrong-chart errors.

Example: Two patients share the surname Chen; staff confirms date of birth before entering the appointment, preventing the visit from landing in the wrong chart.

Mistake to avoid: Opening a chart on a name match alone and documenting the visit in another patient's record.

Reference: NHA: CMAA exam test plan

20. Matching Visit Purpose to Slot and Provider

The stated reason for the visit determines its length, the provider seen, and any preparation required. A vague request like a medication check must be clarified, because a brief nurse visit and a full physician re-evaluation book very differently in the schedule matrix.

Example: A caller wants to discuss medication side effects; staff clarifies whether a short nurse visit or full physician re-evaluation is needed and books accordingly.

Mistake to avoid: Booking a default short slot without clarifying the reason, forcing rushed or rescheduled visits.

Reference: NHA: CMAA exam test plan

21. Provider Availability, Preferences, and Blocking

Each provider has a schedule matrix reflecting preferences, nurse support, and facility needs. Time the provider cannot work is blocked out in advance so it cannot be booked, and staff must check the matrix and nurse availability before promising any appointment slot.

Example: The physician is out Thursday afternoon for a procedure; staff blocks that window before the schedule opens, so no patient is booked into it.

Mistake to avoid: Leaving provider-unavailable times bookable and canceling patients after the fact.

Reference: NHA: CMAA exam test plan

22. Referrals and Pre-Authorization Before Service

Specialist visits and diagnostic tests often require a referral from the primary provider and pre-authorization from the payer, and the testing site should participate with the patient's plan. All three must be secured and documented before the appointment, because services delivered without them are commonly denied.

Example: Before booking imaging, staff calls the payer, obtains an authorization number, confirms the referral is on file, and checks that the testing facility participates with the plan.

Mistake to avoid: Scheduling a test first and seeking authorization afterward, when denial is already locked in.

Reference: NHA: CMAA exam test plan; AAPC CPPM study guide sample

23. Pre-Test Instructions and Compliance Follow-Up

When a test or procedure is arranged, give the patient written preparation instructions, reiterate the physician's directions, and confirm details like the facility's address and the referred physician's name. Follow up afterward to confirm the patient understood and completed the instructions.

Example: A patient scheduled for fasting labs receives written fasting instructions and a confirmation call the day before, so the test is not wasted on a non-fasting arrival.

Mistake to avoid: Giving preparation instructions verbally only, then losing the appointment to a patient who forgot them.

Reference: NHA: CMAA exam test plan

24. No-Show, Cancellation, and Confirmation Protocol

Each no-show, missed, and cancelled appointment must be documented in the chart the day it occurs, with notification sent per office policy and a rescheduling offer made. Confirmation calls and reminders beforehand reduce no-shows, and the physician decides whether a repeat no-show can still be seen.

Example: A patient misses a Monday visit; staff documents the no-show, sends the standard notification, and calls to offer a Thursday slot.

Mistake to avoid: Erasing the empty slot without documenting the missed visit or notifying the patient.

Reference: NHA: CMAA exam test plan; AAPC CPPM study guide sample

Patient Intake and Forms

25. Confirming Demographics at Every Visit

Address, phone, date of birth, insurance details, and preferred contact method must be confirmed at each encounter, not only the first. Registration errors are a leading preventable cause of claim denials, so updating demographics before the visit protects both payment and collection efforts.

Example: A patient who moved last month confirms the new address and best phone number at check-in, so the statement and eligibility inquiry reach the right place.

Mistake to avoid: Assuming demographics are unchanged since the last visit and sending claims to stale data.

Reference: NHA: CMAA exam test plan; AAPC CPPM study guide sample

26. Guarantor Versus Patient

The patient receives care; the guarantor is the person financially responsible for the bill. The two differ whenever a dependent is treated, and statements, collection calls, and account discussions must be directed to the guarantor rather than the patient of record.

Example: A child is the patient on the encounter form, but the parent is listed as guarantor, so the statement is addressed to the parent.

Mistake to avoid: Addressing a statement to a minor patient because the chart lists the child first.

Reference: NHA: CMAA exam test plan

27. The Birthday Rule for Dependent Coverage

When a child is covered under both parents' plans, the birthday rule sets coordination: the plan of the parent whose birthday falls earlier in the calendar year is primary, regardless of either parent's age. Determining this at intake sequences the claims correctly from the start.

Example: A child has dual coverage; the mother's birthday is in March and the father's in July, so the mother's plan is billed primary.

Mistake to avoid: Defaulting to one parent's plan as primary without applying the birthday comparison.

Reference: NHA: CMAA exam test plan

28. Secondary and Tertiary Coverage Sequencing

Patients may hold secondary and even tertiary coverage that pays after the primary plan adjudicates. Each card must be reviewed and each plan verified at intake, then claims submitted in order, so residual balances flow to the correct payer instead of the patient.

Example: A patient presents two active cards; the primary plan is processed first and the secondary submitted for the remaining allowed amount instead of billing the patient.

Mistake to avoid: Submitting only the primary claim and balance-billing the patient for what secondary coverage owed.

Reference: NHA: CMAA exam test plan

29. Card, Photo ID, and Coverage-Change Review

Scan or copy the insurance card and review photo identification at check-in, and ask about coverage changes rather than assuming continuity. Plans change with jobs and enrollment periods, and eligibility surprises discovered after service are a major source of denied and delayed payment.

Example: A patient's card shows a new plan effective this month; staff verifies eligibility and the copay before the visit instead of discovering termination at claim time.

Mistake to avoid: Filing the claim on last year's card data without re-verifying active coverage.

Reference: NHA: CMAA exam test plan; AAPC CPPM study guide sample

30. Required Forms and Special-Paperwork Needs

Intake includes confirming signed forms such as assignment of benefits, financial responsibility, HIPAA release, and advance directives, including living wills and health care surrogate designations. Patients with visual or language barriers need accommodated paperwork so that consent is genuinely informed.

Example: A visually impaired patient has the consent form read aloud before signing, and advance directive status is confirmed and documented in the chart.

Mistake to avoid: Accepting signatures on forms the patient could not read or understand.

Reference: NHA: CMAA exam test plan

Records Management and Office Logistics

31. Choosing a Filing System

Paper records are filed alphabetically by last name in small practices, while high-volume facilities often use terminal digit filing, sorting by the last digits of the record number so files distribute evenly across sections. The choice depends on volume and how evenly growth must spread.

Example: A large clinic files by the final two digits of the medical record number, spreading new charts evenly instead of crowding one alphabetical section.

Mistake to avoid: Filing by first name in a last-name system, making charts unfindable.

Reference: NHA: CMAA exam test plan

32. Cross-Referencing Charts

When a patient's name changes, such as after marriage, a cross-reference links the former and current names so either one leads to the single correct chart. Without it, staff tend to create duplicate records that fragment the medical history across two files.

Example: A patient now uses a hyphenated surname; a cross-reference sheet connects it to the original chart, so no second record is opened.

Mistake to avoid: Opening a new chart under the new name and splitting the patient's history.

Reference: NHA: CMAA exam test plan

33. Chart Correlation and Document Scanning

Within each chart, documents are correlated by type: laboratory results under laboratories, prescriptions under prescriptions, and progress notes in their own section. Scanned documents follow the same structure, so electronic and paper records stay parallel and any document stays quickly retrievable.

Example: A scanned lab report is indexed to the laboratory section of the electronic chart, not dropped into a general image folder.

Mistake to avoid: Filing everything chronologically in one stack, burying labs among correspondence.

Reference: NHA: CMAA exam test plan

34. Daily Chart Preparation and Matching

Pull or create charts from the next day's schedule, update them with recent progress notes, and deliver them to the correct provider. Before filing any document, match two patient identifiers so information never enters the wrong record, no matter how busy the morning becomes.

Example: Tomorrow's twelve charts are pulled tonight and matched to the schedule by name and date of birth before delivery to each provider's inbox.

Mistake to avoid: Matching charts to room numbers instead of patient identifiers during a busy session.

Reference: NHA: CMAA exam test plan

35. Encounter Forms and Recognizing Codes

The encounter form lists the services for the visit, and administrative staff verify its patient and provider information. Staff may recognize ICD and CPT codes on the form, but selecting or interpreting them is provider and coder work; the assistant's job is spotting inconsistencies and routing them back.

Example: An assistant notices the encounter form's diagnosis code conflicts with the visit's stated purpose and returns it to the provider for review rather than changing it.

Mistake to avoid: Choosing or altering diagnosis or procedure codes, which belongs to the provider and trained coders.

Reference: NHA: CMAA exam test plan; AAPC CPPM study guide sample

36. Correspondence Creation and Mail Handling

Business correspondence uses templates, proper greetings and salutations, and the right class of mail: first-class for routine items, certified when proof of delivery matters. Clinical content requires the provider's signature, not the administrative assistant's, and package contents are verified against the slip before signing.

Example: A results letter to a colleague is drafted from a template, signed by the physician, and sent first-class; a records release goes certified for delivery proof.

Mistake to avoid: Having administrative staff sign clinical correspondence or sending releases without tracking.

Reference: NHA: CMAA exam test plan

Financial Procedures and Patient Billing Education

37. Collecting Patient Responsibility at Service

Copayments, and where applicable current balances, are collected at the front desk during check-in, with a receipt issued and the payment posted. Collecting at time of service avoids the added cost and low recovery rate of mailing statements after the patient has already left.

Example: A patient with a twenty-dollar copay pays at check-in and receives a receipt; the encounter form is marked paid before the visit begins.

Mistake to avoid: Routinely waving patients back without collecting, then billing for small unrecoverable balances.

Reference: NHA: CMAA exam test plan; AAPC CPPM study guide sample

38. Copay Versus Coinsurance

A copay is a fixed dollar amount due at each visit, while coinsurance is a percentage of the allowed amount the patient owes after the deductible is met. Explaining the difference at check-in prevents disputes when a percentage-based statement arrives weeks later.

Example: A patient pays a fixed copay today and is told a twenty-percent coinsurance may follow once the plan processes the claim, so the later statement is expected.

Mistake to avoid: Quoting coinsurance as a flat fee and confusing patients when the percentage bill arrives.

Reference: NHA: CMAA exam test plan

39. Explaining Deductibles

A deductible is the amount a patient pays out of pocket for covered services before the plan begins paying. Until it is met, the patient owes the allowed amount for services, which is why visits early in a plan period often cost the patient more than later ones.

Example: A patient asks why this visit costs more than last month's; staff explains the deductible reset, so the charge reflects the unmet amount.

Mistake to avoid: Telling patients a deductible is just a larger copay rather than an accumulated threshold.

Reference: NHA: CMAA exam test plan

40. Allowed Amounts and Fee Schedules

The practice's fee schedule is its list of charges, but the payer's allowed amount is what is actually payable under the contract. For in-network services, the patient's share is calculated on the allowed amount, not the full charge, and the contracted difference is written off.

Example: The office charge is higher than the plan's allowed amount; staff explains the patient owes a percentage of the allowed figure, and the contracted difference is not billed.

Mistake to avoid: Balance-billing the charge above the allowed amount for in-network services.

Reference: NHA: CMAA exam test plan

41. Advanced Beneficiary Notices

An Advanced Beneficiary Notice is used with Medicare patients when a service may not be covered, such as one the payer may not judge medically necessary. Signed before the service, it informs the patient of potential financial responsibility, making the patient liable if the claim later denies.

Example: Before a screening the payer may deny, the Medicare patient signs an ABN, so if coverage refuses the claim the patient understood the cost risk in advance.

Mistake to avoid: Presenting the ABN after the service, when it no longer establishes informed responsibility.

Reference: NHA: CMAA exam test plan

42. Reading an Explanation of Benefits

An Explanation of Benefits summarizes how a claim was processed: billed amount, allowed amount, what the plan paid, and what the patient owes. It is a plan document, not a bill, and walking patients through its columns prevents confusion, duplicate payments, and avoidable collection calls.

Example: A patient brings an EOB believing it is a bill; staff points to the patient-responsibility column and explains the practice's statement will follow separately.

Mistake to avoid: Telling patients to pay the EOB amount immediately as though it were an invoice.

Reference: NHA: CMAA exam test plan

HIPAA Privacy and Security

43. What Counts as Protected Health Information

Protected health information is individually identifiable health information in any form: electronic, paper, or oral, including demographic identifiers linked to health, care, or payment. Names, dates, and phone numbers attached to visit details are PHI even in casual conversation or on a voicemail message.

Example: A reminder voicemail states only the patient's first name and a callback number, omitting the clinic's specialty and visit reason, because those details are PHI.

Mistake to avoid: Assuming spoken or voicemail messages fall outside privacy rules.

Reference: NHA: CMAA exam test plan; HHS Summary of the HIPAA Privacy Rule

44. Who Is a Covered Entity

The Privacy Rule applies to health plans, health care clearinghouses, and providers that transmit health information electronically in connection with standard transactions such as claims and eligibility checks. A provider who bills through a third-party service on its behalf is still covered, and noncompliance can bring civil money penalties.

Example: A two-physician office submitting electronic claims through a billing company is a covered entity and must follow the Privacy Rule despite its size.

Mistake to avoid: Assuming small practices are exempt because they bill through an outside service.

Reference: HHS Summary of the HIPAA Privacy Rule

45. The Minimum Necessary Standard

Uses and disclosures must be limited to the least information needed for the purpose, with exceptions for treatment, disclosures to the patient, releases under a valid authorization, and disclosures required by law. Releasing an entire record requires specific justification that the whole chart is genuinely needed.

Example: A payer requests documentation for one visit date; staff sends that encounter's records rather than faxing the entire chart.

Mistake to avoid: Faxing a complete record when the request covered a single date of service.

Reference: HHS Summary of the HIPAA Privacy Rule

46. Permitted Disclosures Versus Authorization

PHI flows without authorization for treatment, payment, and health care operations, and for specific public-interest purposes defined by law. Anything else, such as releases to employers or life insurers, requires the individual's written authorization, and every release is documented with when and to whom.

Example: Records sent to a consulting provider for treatment need no authorization, but a pre-employment physical result released to an employer requires a signed authorization.

Mistake to avoid: Releasing records to an employer or insurer without written authorization because a request simply arrived.

Reference: HHS Summary of the HIPAA Privacy Rule

47. Front-Desk Safeguards: Sign-In Sheets and Charts

Use sign-in sheets limited to name and time, keep charts displayed with identifying information covered, and hold patient conversations away from the waiting area. Chart access is role-based, and incidental exposure is tolerated only when reasonable safeguards and minimum-necessary limits are genuinely in place.

Example: The sign-in sheet shows only names and arrival times, and charts awaiting pickup rest face-down so no waiting patient reads another's label.

Mistake to avoid: Sign-in sheets listing visit reasons or leaving charts face-up at the desk.

Reference: NHA: CMAA exam test plan; HHS Summary of the HIPAA Privacy Rule

48. Reportable Conditions and Authorities

Privacy rules do not block disclosures to health departments and authorities for reportable conditions such as child abuse, communicable diseases including HIV, and gunshot wounds, when law requires or authorizes reporting. Public health reporting is a permitted disclosure, not a privacy violation.

Example: The health department requests information on a reportable communicable disease; the practice discloses the required data as a permitted public health activity.

Mistake to avoid: Refusing a lawful health department request by treating it as a privacy breach.

Reference: NHA: CMAA exam test plan; HHS Summary of the HIPAA Privacy Rule

OSHA, CMS, and Safety

49. Safety Data Sheets in the Office

Safety Data Sheet documents describe each hazardous chemical's properties and the correct response to exposure. They must be accessible to staff at all times, so anyone exposed to a cleaning agent or disinfectant can immediately find first-aid, handling, and cleanup guidance without hunting for a supervisor.

Example: A staff member splashes a disinfectant on her hand and consults the SDS for the correct rinse procedure within minutes of the exposure.

Mistake to avoid: Keeping the SDS binder locked in a manager's office where staff cannot reach it quickly.

Reference: NHA: CMAA exam test plan

50. Reporting OSHA Incidents

Workplace injuries and exposures, such as needlesticks or chemical spills, are documented and reported through the office's incident protocol. Prompt reporting protects the employee's access to follow-up care and creates the record that regulators and workers' compensation processes may later require.

Example: After a needlestick, the employee reports it immediately, the incident form is completed the same day, and post-exposure steps are arranged.

Mistake to avoid: Treating a staff injury as a private matter and skipping the incident report.

Reference: NHA: CMAA exam test plan

51. Evacuation and Emergency Procedures

Every staff member must know the posted evacuation routes, their own role in guiding patients, and the office's emergency procedures before an event occurs. During an alarm, directing patients safely outranks securing paperwork or equipment, and roles must be rehearsed in advance.

Example: When the fire alarm sounds, the front-desk staffer guides waiting patients along the posted route instead of stopping to lock file cabinets.

Mistake to avoid: Learning exit assignments only after an emergency has already begun.

Reference: NHA: CMAA exam test plan

52. Medicare Versus Medicaid

Medicare is a federal program primarily serving older adults and certain individuals with disabilities, while Medicaid is state-administered coverage for people with limited income, with rules that vary by state. Identifying which program a patient holds determines the verification and billing path you follow.

Example: A patient presents a Medicaid card; staff follows the state plan's rules, which differ from the Medicare beneficiary's, before verifying eligibility.

Mistake to avoid: Using the two program names interchangeably when verifying coverage.

Reference: NHA: CMAA exam test plan

53. CMS-1500 Versus UB04

The CMS-1500 carries professional claims for physician and provider services rendered in outpatient and office settings, while the UB04 carries institutional claims from facilities such as hospitals. The setting that generates the charge determines which form the claim travels on.

Example: The physician office bills its consult on a CMS-1500, while the hospital where the patient stayed submits its own charges on a UB04.

Mistake to avoid: Submitting a physician practice's professional charges on the UB04 institutional form.

Reference: NHA: CMAA exam test plan

54. Recognizing and Reporting Fraud

Fraud includes billing for services not performed, misrepresenting services for payment, and similar conduct, and it carries serious consequences for practices and individuals. Staff who suspect it should report through the practice's compliance channel or the appropriate authority rather than waiting for certainty.

Example: A staffer notices claims for visits on dates the provider was away and reports the pattern through the compliance process instead of assuming error.

Mistake to avoid: Assuming fraud requires proof in hand before reporting a suspicious billing pattern.

Reference: NHA: CMAA exam test plan; AAPC CPPM study guide sample

Patient Rights, Consent, and Law

55. Core Patients' Rights at the Front Desk

Patients have the right to be seen by another physician, to go to a medical specialist, and to keep the same physician through a procedure or treatment course, while medical decisions themselves rest with physicians. Front-desk staff support these rights when scheduling and answering requests.

Example: A patient requests a second opinion; the assistant arranges the referral rather than discouraging it, honoring the right to another physician.

Mistake to avoid: Implying patients must accept the assigned provider or cannot seek specialist care.

Reference: NHA: CMAA exam test plan

56. Who Owns the Medical Record

The practice owns the physical record and its maintenance, while the patient owns the information inside it and holds rights of access and copies. Requests are honored through the documented release process, not by surrendering the original chart or denying the patient's access to the information.

Example: A patient asks to take his chart home; staff explains the record stays with the practice and arranges a copy through the release process instead.

Mistake to avoid: Handing over the original record because the patient calls it my chart.

Reference: NHA: CMAA exam test plan; HHS Summary of the HIPAA Privacy Rule

57. Types of Consent

Consent ranges from implied, such as extending an arm for a blood pressure reading, to verbal, expressed, and written forms, plus specific rules for minors. The more invasive or risky the care, the stronger the consent formality required, and intake staff track which forms are on file.

Example: A patient extends her arm for vitals, showing implied consent, while a surgical procedure requires a signed written form before proceeding.

Mistake to avoid: Relying on a verbal agreement for a procedure that requires written consent.

Reference: NHA: CMAA exam test plan

58. Assault and Battery Boundaries

Battery is touching a patient without authorization, and it can occur even with a signed form if the patient later withdrew agreement. Administrative staff support consent tracking so procedures proceed only with current, valid permission, and they route withdrawal messages to clinical staff immediately.

Example: A patient withdraws agreement to an injection moments before it; the clinical team halts, because proceeding would be unauthorized touching.

Mistake to avoid: Assuming a previously signed consent form authorizes care the patient has since refused.

Reference: NHA: CMAA exam test plan

59. Avoiding Patient Abandonment

Abandonment occurs when a provider ends a care relationship without notice, a reasonable transition period, or referral to another provider. Practices that must discharge a patient follow documented notice and transfer steps so that ongoing care is not interrupted and the patient is not left stranded.

Example: A practice ending its relationship with a noncompliant patient sends written notice and referral resources, keeping continuity rather than stopping care abruptly.

Mistake to avoid: Believing a provider can end care with no notice or transfer arrangements.

Reference: NHA: CMAA exam test plan

60. ADA Accommodations in the Office

The Americans with Disabilities Act requires reasonable accommodation for patients with disabilities, which in a medical office means accessible routes, cleared walkways, and adjusted communication methods. Removing obstacles is a compliance duty of the practice, not a courtesy offered only when convenient.

Example: The reception path is kept clear of displays so a patient using a mobility device reaches the desk, and longer appointment slots accommodate communication needs.

Mistake to avoid: Treating accessibility as an optional favor rather than a legal requirement.

Reference: NHA: CMAA exam test plan

References and further reading

Source links checked on Oct 2, 2026.

FAQ

Frequently Asked Questions

Practical answers to help you apply the guidance for Certified Medical Administrative Assistant (CMAA).

A child is covered by both parents' plans. Which policy is billed first?
Apply the birthday rule: the plan of the parent whose birthday falls earlier in the calendar year is primary, regardless of either parent's age. Verify both cards at intake, bill the primary plan first, and submit the secondary plan for the remaining allowed amount instead of balance-billing the patient.
Does the office need written patient authorization to send records to another treating provider?
No. Disclosures for treatment are permitted without authorization under the Privacy Rule, though the minimum necessary standard still guides how much is sent. Written authorization is required for purposes outside treatment, payment, and operations, such as releases to employers or life insurers, and each release should be documented.
Which claim form does a physician office use, and when does the UB04 apply?
The physician office's professional charges travel on the CMS-1500. The UB04 is the institutional claim form used by facilities such as hospitals for their own charges. The setting generating the charge, not the payer, determines which form is used.

Keep Reading

Related Study Guides

Explore related guides and preparation topics.