Which of the following are examples of issues that should be reported to a Compliance Department?

• A. All of the above
• B. Suspected Fraud, Waste, and Abuse (FWA)
• C. Unethical behavior/employee misconduct
• D. Potential health privacy violation

Answer: (A)

Issues that threaten an organization’s integrity, compliance with laws, or protection of individuals’ information should be reported to the Compliance Department. The three items listed—suspected fraud, waste, and abuse; unethical behavior or employee misconduct; and potential health privacy violations—each fall under Compliance oversight. Suspected fraud, waste, and abuse points to improper use of resources and possible illegal activity, which Compliance investigates to prevent loss and uphold financial controls. Unethical behavior or employee misconduct undermines policy adherence and can have legal or safety implications, so reporting helps enforce standards and accountability. Potential health privacy violations threaten patient confidentiality and regulatory requirements, requiring formal review and corrective action. Because all of these scenarios fall within the scope of Compliance’s responsibilities, the best answer is that all of the above should be reported.