Medical Law and Ethics
Medical law and ethics shape every interaction you have with patients, providers, and colleagues. The law defines what you are permitted to do. Ethics guides how you should act when the law leaves room for judgment. As a medical assistant, knowing both protects your patients and your career.
Scope of Practice for Medical Assistants
MA scope of practice defines the tasks you are legally permitted to perform. Unlike registered nurses or physicians, MAs do not have a nationally standardized scope of practice. Each state sets its own rules — and some states leave it to the delegating physician.
Key principles that apply in every state:
- MAs always work under physician supervision. They cannot diagnose, prescribe, or independently treat patients.
- A physician may delegate tasks to an MA if the task is within the MA's training and competency, and the physician retains responsibility for the outcome.
- Certification (CMA through AAMA, RMA through AMT) demonstrates competency but does not independently expand scope. State law governs scope, not certification.
- When in doubt about whether a task is within your scope, ask the supervising physician. Performing tasks outside your scope exposes both you and the physician to liability.
Respondeat Superior
Respondeat superior is a Latin legal doctrine meaning "let the master answer." It holds that an employer is legally responsible for the actions of an employee performed within the scope of employment. If an MA makes a clinical error while performing delegated tasks during the workday, the physician and the practice can be held liable — even if the physician was not present when the error occurred. This does not eliminate the MA's own liability; both the employee and employer can be named in a lawsuit.
Informed Consent
Informed consent is the patient's agreement to a procedure or treatment after receiving enough information to make a voluntary and knowledgeable decision. The provider is responsible for obtaining informed consent — not the MA. However, MAs frequently witness the signing of consent forms and should understand what valid consent requires:
- The nature of the procedure or treatment
- The expected benefits
- The material risks
- Available alternatives
- The consequences of refusing
Who can give consent: Competent adults (18 years or older, or legally emancipated). A patient must be mentally competent to consent. If a patient lacks decision-making capacity, a healthcare proxy, durable power of attorney for healthcare, or court-appointed guardian provides consent.
Minors: Parents or legal guardians consent for minors. Exceptions where minors can consent for themselves (varies by state): treatment for STIs, contraception, substance abuse treatment, mental health treatment, and pregnancy care. Emancipated minors — those who are married, in the military, financially self-supporting and living independently, or legally declared emancipated — consent for all their own care.
Advance Directives
Advance directives are legal documents that express a patient's wishes about medical care if they become unable to speak for themselves:
- Living will: Specifies what life-sustaining treatments the patient wants or does not want (ventilator, feeding tube, resuscitation) under defined circumstances.
- Healthcare proxy (healthcare power of attorney): Names another person (the healthcare agent or surrogate) to make medical decisions on the patient's behalf if they cannot do so themselves.
- DNR (Do Not Resuscitate) order: A physician's order specifying that CPR should not be attempted if the patient's heart or breathing stops. Must be signed by a physician to be valid in most states. A living will expressing a wish for no CPR does not automatically become a DNR — the physician must write the order.
When a patient brings an advance directive to the office, it should be scanned and placed in the EHR and the provider notified.
Patient Abandonment
Patient abandonment occurs when a provider ends a patient relationship without giving the patient adequate notice and time to find another provider, when the patient still needs medical care. The MA should never tell a patient they are "no longer a patient here" without the provider's direction and proper process. Proper termination of a patient relationship requires written notice (typically certified mail), a reason, a reasonable transition period (usually 30 days), and an offer to provide emergency care during the transition.
Malpractice and Negligence
Medical malpractice is professional negligence — the failure of a healthcare provider to meet the standard of care, resulting in patient harm. To prove malpractice, four elements must all be present (the "4 Ds"):
- Duty: A provider-patient relationship existed (duty of care was established)
- Dereliction: The provider failed to meet the standard of care
- Direct cause: The failure directly caused the harm
- Damages: The patient suffered actual harm (physical, financial, or emotional)
Negligence is unintentional harm caused by failure to act as a reasonably prudent person would. In healthcare, negligence specifically in professional practice equals malpractice.
Mandatory Reporting
Healthcare workers are mandated reporters in several categories. Failure to report when required is itself a legal violation:
- Child abuse and neglect: Any suspected abuse, not just confirmed cases. Report to child protective services or law enforcement.
- Elder and dependent adult abuse: Suspected abuse, neglect, or exploitation of older or dependent adults.
- Communicable diseases: Certain infectious diseases (tuberculosis, HIV, hepatitis, measles, salmonella, etc.) must be reported to the local or state health department. The list varies by state.
- Gunshot and stab wounds: All gunshot wounds and many stab wounds must be reported to law enforcement in most states.
- Domestic violence: Some states require reporting suspected domestic violence injuries; others make it permissive.
AAMA Code of Ethics
The American Association of Medical Assistants (AAMA) Code of Ethics outlines the professional principles MAs are expected to uphold:
- Render service with full respect for human dignity
- Respect confidential information obtained through employment
- Uphold the honor and high principles of the profession
- Continually improve knowledge and skills for the benefit of patients and colleagues
- Participate in community services and activities that promote good health and welfare
Know the four elements of malpractice (Duty, Dereliction, Direct cause, Damages). Know that respondeat superior makes employers liable for employee actions. Know who can give informed consent and the exceptions for minors. Know the four types of mandatory reporting: child abuse, elder abuse, communicable diseases, and gunshot wounds. Know that DNR must be a physician's written order — a living will alone is not enough.
Practice Questions
Question 1: A patient is a 16-year-old who comes in requesting STI testing. Her parents are not with her. Can she consent to this testing on her own?
Answer: Yes, in most states. Most states have minor consent laws that allow minors to consent to testing and treatment for sexually transmitted infections without parental consent. The MA should follow the practice's protocol and the provider's direction, but this is a widely recognized exception to the general rule requiring parental consent for minors.
Question 2: During an exam, a patient mentions that her partner has been hitting her. The MA suspects domestic violence. What is the appropriate action?
Answer: Immediately notify the provider. Document what the patient said in her own words in the chart. The provider will assess the situation and follow state-mandated reporting requirements. Many states require reporting injuries related to domestic violence, and all practices should have a protocol for safety assessment. The MA should not dismiss the disclosure or handle it alone without involving the provider.
Question 3: Which doctrine makes the supervising physician liable for errors made by an MA while performing delegated tasks?
Answer: Respondeat superior. This doctrine holds the employer (physician or practice) liable for an employee's actions performed within the scope of employment. The MA can also be held personally liable — respondeat superior adds employer liability but does not eliminate the MA's individual responsibility.