Free Phlebotomy practice · Updated October 2026

Phlebotomy HIPAA, consent and legal issues practice questions, with every answer explained

Safety and Compliance is 26 of the 100 scored items on the NHA CPT exam. Answer 10 exam style questions on HIPAA, consent and legal issues and see exactly which concepts would cost you points on test day.

✓ 10 questions✓ Every answer explained✓ No sign up
Start the 10 questions →
Where the NHA CPT points are100 scored items
Routine Blood Collections
28
Safety and Compliance
26
Patient Preparation
20
Processing
14
Special Collections
12
Source: NHA CPT test plan (2025)You are here ↑
Score 0/0
Q1HIPAA

How should old printed requisitions and specimen labels with patient information be discarded?

What these hipaa, consent and legal issues questions test

These questions cover HIPAA, privacy, legal, documentation and professionalism. Each one shows the correct answer and why every other option is wrong, so a miss tells you exactly what to review before the NHA CPT.

HIPAAPrivacyLegalDocumentationProfessionalismScopeCertificationEthicsSharps safety law

All 10 questions with answers explained

Prefer to read first? Every question from the practice set above, with the correct answer and why each wrong option is wrong.

Q1How should old printed requisitions and specimen labels with patient information be discarded?
  1. In the regular trash
  2. Taken home to discard in household trash, away from the facility
  3. In the recycling bin
  4. In a shredding or confidential destruction bin

Answer: D. Paper containing protected health information is shredded or placed in secure confidential bins so it cannot be read.

Why not A: Regular trash exposes patient information.

Why not B: Taking patient information home is a privacy breach.

Why not C: Recycling bins are not secure.

Exam tactic: PHI on paper: shred it.

Q2A phlebotomist posts a photo of a patient's unusual tattoo on social media without the patient's name. Is this acceptable?
  1. No, it can identify the patient and violates privacy
  2. Yes, no name was included
  3. Yes, as long as the account is set to private and only friends see it
  4. Yes, if the post is deleted within a day

Answer: A. Photos and details can identify a patient even without a name. Posting patient images without authorization violates privacy rules and facility policy.

Why not B: Identifiers include images and distinctive features, not only names.

Why not C: A private account still shares the image with others.

Why not D: Deleting later does not undo the disclosure.

Exam tactic: No patient photos online.

Q3Which statement best defines negligence in a healthcare setting?
  1. Failure to use the care a reasonable person would use in the same situation
  2. Intentionally harming a patient
  3. Sharing patient results
  4. Refusing to work overtime when the supervisor asks at the end of the shift

Answer: A. Negligence is failing to act with reasonable care, causing harm. Professional negligence is called malpractice.

Why not B: Intentional harm is not negligence.

Why not C: Sharing results is a privacy issue.

Why not D: Refusing overtime is an employment matter.

Exam tactic: Negligence: careless, not intentional.

Q4How should an incident report be written?
  1. With opinions about who was at fault
  2. Factually and objectively, describing what happened
  3. Only after discussing the event with the patient's family and the coworkers involved
  4. Vaguely, to protect coworkers from blame

Answer: B. Incident reports record facts: what happened, when, who was involved and what was done, without opinions or blame.

Why not A: Opinions and blame do not belong in an incident report.

Why not C: Reports are completed promptly according to policy.

Why not D: Vague reports defeat the purpose of quality improvement.

Exam tactic: Facts only.

Q5Which behavior best reflects professionalism for a phlebotomist?
  1. Discussing patients on social media
  2. Skipping identification when busy
  3. Arriving late but working fast
  4. Being punctual and maintaining confidentiality

Answer: D. Professional phlebotomists are punctual, protect confidentiality, follow procedures every time and communicate respectfully.

Why not A: Posting about patients violates privacy.

Why not B: Identification is never skipped.

Why not C: Punctuality matters.

Exam tactic: On time, on protocol, confidential.

Q6A nurse asks the phlebotomist to start an IV while in the room. What is appropriate?
  1. Decline; it is outside phlebotomy scope
  2. Start it if the patient says it is okay
  3. Start the IV to be helpful
  4. Start it if the nurse watches closely

Answer: A. Phlebotomists work within their defined scope. Starting IVs is outside the typical phlebotomy scope unless the facility and state specifically train and authorize it.

Why not B: Patient agreement does not authorize it.

Why not C: Helpfulness does not change scope.

Why not D: Supervision does not expand scope.

Exam tactic: Stay in your scope.

Q7Why do certified phlebotomists complete continuing education?
  1. Only if they change employers
  2. To maintain certification and current skills
  3. Because it replaces the need for supervised work experience
  4. To avoid ever renewing

Answer: B. Continuing education keeps knowledge current with changing standards and is required by certifying bodies to renew certification.

Why not A: It applies regardless of employer changes.

Why not C: Continuing education does not replace experience.

Why not D: Renewal is still required.

Exam tactic: CE keeps the credential alive.

Q8A phlebotomist mislabels a tube and realizes it after sending it. What should they do?
  1. Report it immediately so it can be corrected
  2. Hope no one notices
  3. Relabel it at the lab without telling anyone
  4. Blame the courier

Answer: A. Promptly reporting a labeling error protects the patient from wrong results and allows recollection. Concealing or altering specimens is unethical.

Why not B: Hiding errors can harm patients.

Why not C: Relabeling without reporting is falsification.

Why not D: Shifting blame is dishonest.

Exam tactic: Own the error, report it now.

Q9Which requirement came from the Needlestick Safety and Prevention Act?
  1. Phlebotomists must recap every needle
  2. A sharps injury log and frontline worker input on safer devices
  3. Needles must be reused after sterilization
  4. Gloves became optional for venipuncture when safety needles are used for the draw

Answer: B. The Act updated the Bloodborne Pathogens Standard to require a sharps injury log and input from frontline employees in selecting safer sharps devices.

Why not A: Recapping is discouraged, not required.

Why not C: Venipuncture needles are single use.

Why not D: Gloves are required for vascular access procedures.

Exam tactic: Injury log plus worker input.

Q10A phlebotomist hears coworkers discussing a patient's HIV test in the elevator. Why is this a problem?
  1. It discloses protected health information in public
  2. It is fine if the patient's name is whispered
  3. It is allowed because they are healthcare workers on the same care team
  4. It is only a problem if the patient is famous

Answer: A. HIPAA requires protecting patient information. Discussing results in public areas where others can overhear is an improper disclosure.

Why not B: Whispering in a public area still risks disclosure.

Why not C: Being on the care team does not permit discussing a patient in a public area.

Why not D: Every patient's information is protected.

Exam tactic: Patient info stays out of hallways and elevators.

Check every NHA CPT area, not just this one

The free 20 question diagnostic covers all 5 areas of the NHA CPT outline and shows the 3 fixes worth the most points.

Take the free diagnostic

Practice another Phlebotomy topic

See all 22 Phlebotomy practice topics →

More about the NHA CPT

PassPulse is an independent exam preparation tool. We are not affiliated with, endorsed by, or sponsored by the National Healthcareer Association (NHA), the American Society for Clinical Pathology (ASCP), the National Center for Competency Testing (NCCT) or American Medical Technologists (AMT). Exam, credential and product names mentioned on this page are trademarks of their respective owners and are used only to identify the exams described.

These practice questions are written by PassPulse to reflect the published exam content outline. They are not actual exam questions. Questions, answers and explanations may contain errors or be out of date, and they are for exam study only, not for clinical or professional practice: always check facts against the certifying body's official materials, current standards and your employer's policies. Scores and projections on this page are estimates based on a small number of questions and do not predict your result on the real exam. Area weights come from the official outline as of the date shown; always confirm current exam details with the certifying body.
Preparing for the NHA CPT?Test yourself free
Take the test