CDPMA study materials
CDPMA study resources

Privacy Slips and Unauthorized Write-Offs at the Front Desk

CDPMA · Put your knowledge to work in context.

All case studies

Privacy Slips and Unauthorized Write-Offs at the Front Desk

A patient coordinator with nine years of tenure handles check-in, insurance verification, and patient balance collection. Over the last two quarters, the practice's over-90-day accounts receivable rose from 11% to 24% of total A/R, and write-offs labeled 'professional courtesy' increased from $1,200 to $9,400 per quarter without dentist approval. Three patients have complained that she discussed their balances in the waiting room, and one says she left a voicemail at his workplace saying he owed $1,340 and that his appointment would be cancelled. She is well liked by the doctors and patients, arrives 20 minutes late two or three times a week, and has not attended the last two HIPAA training sessions. The practice has no written collection policy and no documented coaching in her file. The owner asks you, the practice administrator, to 'fix it without causing drama.'

1. How do you prioritize the privacy, financial, and performance issues?

Read the worked answer

Separate the issues for investigation but do not ignore any of them. The waiting-room discussions and the workplace voicemail are potential HIPAA privacy incidents. Document what was said, who may have overheard, and what the voicemail disclosed. Assess the risk of impermissible disclosure; a message that identifies the patient, states a balance, and threatens cancellation may exceed the minimum necessary even though HIPAA permits messages if the patient has not objected. Mitigate, notify the privacy officer, and follow the practice's breach-assessment process.

The missed HIPAA training is a compliance gap, not a personality issue. The A/R increase and the courtesy write-offs are financial-control issues. Preserve the practice-management audit logs before changing access. Do not discuss any of this in the front office or with other staff. Meet privately, ask for her explanation, and keep the tone factual. 'Without drama' should mean confidentiality and professionalism, not avoiding the problems.

2. What coaching and performance-improvement steps do you take?

Read the worked answer

Hold a private meeting with the coordinator and, if available, an HR representative. State the observed facts: the patient complaints, the voicemail content, the write-off increase, the tardiness, and the missed training. Ask for her explanation before drawing conclusions. Review the relevant policies, or acknowledge that no written collection policy exists and that the practice will correct that gap.

Put expectations in a written performance-improvement plan with dates: no balance discussions in the waiting room; use a private room or phone; leave only minimum-necessary messages; complete HIPAA training within 14 days; obtain approval for every write-off; reduce over-90 A/R to the prior range; and arrive on time. Use 30-, 60-, and 90-day check-ins, document each meeting, and have her sign the plan. If unauthorized write-offs continue or fraud is suspected, move to progressive discipline or termination and consult counsel. Tenure and popularity do not override patient privacy or financial integrity.

3. What policies and controls should be put in place to prevent recurrence?

Read the worked answer

Adopt a written financial policy and a collection-script policy that tell staff where and how to discuss balances. Provide a private check-out area or phone room, and define what may be left in a voicemail, text, or email. Require approval thresholds for write-offs and refunds, with documentation of the reason, the approver, and the patient contact. Run a monthly A/R and write-off report by user and reason code.

Separate duties so the person who collects cash does not also reconcile the bank statement or approve adjustments. Review system permissions and audit logs, require HIPAA training annually with sign-in sheets, and track attendance. Create a patient-complaint log and review it monthly. Train the whole team on the new policy, apply it consistently, and document coaching. The goal is to fix the system that allowed the behavior, not only the individual.