Regulatory and Compliance Framework
What the framework covers
Candidates must understand the layers that govern practice: primary legislation, regulations and standards, facility policy, and professional scope-of-practice rules. Know the difference between an obligation (must do), a standard (the benchmark used to judge performance), and guidance (advisory but often used as evidence of expected practice). Understand how accreditation and inspection bodies interact with internal quality systems, and how incident reporting duties differ from disciplinary processes.
Concepts to master
- Consent, capacity, and substitute decision-making
- Privacy and confidentiality, including permitted disclosures
- Mandatory reporting thresholds and who receives reports
- Scope of practice and delegation/supervision requirements
- Retention schedules and access-to-records rules
Traps in questions
Questions often swap mandatory and discretionary duties, or blur who the duty is owed to (patient vs. regulator vs. employer). Watch for wording like "best practice suggests" versus "the regulation requires." Another common trap: a policy that is stricter than the law - the stricter policy governs your conduct at work, even though the legal minimum is lower.
Rule of thumb
When two rules conflict, follow the most protective and most specific rule: patient safety first, then the specific facility policy, then general guidance. Document the reasoning.
Worked example: A colleague asks you to release records without a signed authorization. The law permits disclosure only in defined exceptions; absent one, the answer is no - even if the requester is internal. State the basis for refusal and escalate to the privacy officer rather than debating it.