Which of the following issues should be reported to a Compliance Department?

• A. Suspected Fraud, Waste, and Abuse only
• B. Potential health privacy violation only
• C. Unethical behavior only
• D. Suspected Fraud, Waste, and Abuse, potential health privacy violations, and unethical behavior

Answer: (D)

Reporting to Compliance should cover any issue that could put the organization at risk of legal, regulatory, or policy violations. Suspected Fraud, Waste, and Abuse points to financial or resource misuse that must be investigated. A potential health privacy violation signals data protection and patient confidentiality concerns governed by laws and internal safeguards. Unethical behavior breaches codes of conduct and professional standards that Compliance monitors. Because all of these areas fall under the Compliance Department’s responsibilities, the best practice is to report concerns that span FWA, privacy issues, and unethical behavior rather than limiting reporting to a single category. This broad reporting supports timely investigations, appropriate corrective actions, and protection for patients, resources, and the organization as a whole.