On-the-Job Scripts: Protecting Patient Privacy Under HIPAA
The CMA exam has no oral or hands-on component — there's no examiner evaluating what you say. These are realistic phrases medical assistants actually use on the job for this task, so you walk into the role sounding like someone who's done it before.
A caller asks for patient information without proper verification
"I'm not able to share that information without verifying your identity and the patient's authorization first — can I have you confirm a few details?"
Declining to discuss a case outside a private area
"Let's talk about that in the back office instead of out here."
The general rule
Confirm identity before releasing anything, route clinical judgment calls to the provider rather than answering them yourself, and give patients honest, specific updates rather than vague reassurance. These habits apply across almost every medical-assistant-patient interaction, not just this task.
Practice checklist →
Printable step-by-step checklist
Why errors happen →
Deep dive on mistake patterns
Practice the written exam too
The knowledge behind every task is tested in the written CMA exam. 500+ free questions.
Take the Practice Test →