How to Master One of the Hardest Parts of the BOC ATC Exam: Healthcare Administration and Professional Responsibility

Most athletic training students feel at home with special tests, rehab progressions, and emergency care. Then a BOC ATC exam question asks about the elements of negligence, which privacy law covers a high school athlete’s injury record, or how to measure whether a clinic’s new protocol is working. Suddenly the familiar clinical footing is gone.
Domain V, Healthcare Administration and Professional Responsibility, is the smallest domain on the exam, but many candidates rate it the hardest.

In this guide, we’ll explain what it covers, break down the core concepts, point out common traps, and walk through sample scenarios so you can pick up these points with confidence.

Why Is This Domain So Hard for BOC Candidates?

A few things make Domain V tricky:

  • Less hands-on exposure. Clinical rotations focus on patient care. Few students write a budget, draft a policy, or handle a records request before they’re certified.
  • Precise vocabulary. Terms like nonfeasance, misfeasance, and malfeasance, or HIPAA and FERPA, sound similar and are easy to mix up under pressure.
  • “It depends” answers. Legal and regulatory questions often hinge on the setting (secondary school vs. hospital clinic) or on who employs the AT.
  • Few items, big impact. With only 10 of the outline’s 125 items, you get few chances to recover from a weak spot, and these questions are often mixed into clinical scenarios.

What Does Domain V Cover on the Current Outline?

The BOC Content Outline for Practice Analysis, 8th Edition weights Domain V at 8.0% (10 items) and lists four tasks:

  • Task 0501: Assess organizational and individual outcomes using quality improvement analyses.
  • Task 0502: Develop policies, procedures, and plans that address organizational needs.
  • Task 0503: Practice within federal, state, and local laws, regulations, and professional standards.
  • Task 0504: Use standardized documentation procedures that ensure best practices.

Core Concepts to Know for Domain V

Quality Improvement and Outcomes (Task 0501)

Quality improvement (QI) asks, “Is what we’re doing working, and how can we make it better?” For the exam, understand:

  • The Plan-Do-Study-Act (PDSA) cycle: Plan a change, try it on a small scale, study the results, then adopt, adapt, or abandon it.
  • Clinician-rated vs. patient-reported outcomes: Goniometry and strength testing are clinician-rated. Patient-reported outcome measures (PROMs), such as the Lower Extremity Functional Scale or the Knee injury and Osteoarthritis Outcome Score (KOOS), capture the patient’s view of function.
  • Individual vs. organizational outcomes: One patient’s progress is an individual outcome. Injury rates, time lost, patient satisfaction, and program costs across a team or clinic are organizational outcomes.
  • Evidence-based practice: Combine the best research evidence, clinical expertise, and patient values. Use the PICO format (Patient/Problem, Intervention, Comparison, Outcome) to frame clinical questions.

Policies, Procedures, and Plans (Task 0502)

A policy states what the organization will do and why. A procedure explains how to do it, step by step. Examples ATs are expected to help write include the emergency action plan, concussion management, heat and lightning policies, bloodborne pathogen exposure control, and pre-participation exam procedures.
You should also know basic administration terms:

  • Operating vs. capital budget: Operating budgets cover recurring costs like tape and supplies. Capital budgets cover large, long-lasting purchases like a whirlpool or ultrasound unit.
  • Purchasing: Competitive bids, purchase orders, and inventory tracking.
  • Facility design: Think about accessibility, electrical safety for modalities (such as ground fault circuit interrupters near water), sanitation, and privacy.

Laws, Regulations, and Professional Standards (Task 0503)

This is where most Domain V questions come from. Focus on these concepts:

  • State practice acts: Your state’s law defines your scope of practice, licensure requirements, and the physician direction or collaboration requirements. BOC certification is national, but your legal authority to practice comes from the state.
  • BOC Standards of Professional Practice: The Practice Standards and Code of Professional Responsibility that every certified AT agrees to follow. Violations can lead to BOC disciplinary action. The current version took effect in February 2026.
  • NATA Code of Ethics: Applies to NATA members and overlaps with the BOC standards on honesty, confidentiality, and competence.
  • HIPAA vs. FERPA: The Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule applies to covered entities such as health care providers that conduct standard electronic transactions like billing. The Family Educational Rights and Privacy Act (FERPA) protects education records at schools that receive federal education funding. Health records kept by a school-employed AT are generally education records under FERPA, not HIPAA.
  • Negligence: To prove negligence, a plaintiff must show four elements: duty, breach of the standard of care, causation, and damages. The standard of care is what a reasonable, prudent AT with similar training would do in the same situation.
  • Types of negligent acts: Nonfeasance is failing to do something you had a duty to do. Misfeasance is doing a proper act incorrectly. Malfeasance is doing an act you should not have done at all.
  • Consent and other defenses: Informed consent (and parental consent for minors), assumption of risk, and Good Samaritan laws, which vary by state and usually don’t cover care given as part of your job.

Documentation (Task 0504)

Documentation is your legal record and your communication tool. Know the SOAP format:

  • Subjective: What the patient reports, such as history, mechanism, and pain description.
  • Objective: What you measure or observe, such as range of motion, strength, and special test results.
  • Assessment: Your clinical impression and progress toward goals.
  • Plan: Treatment, referral, education, and follow-up.

Correct errors with a single line through the entry, then add your initials and the date. Never erase, use correction fluid, or backdate. Also recognize the difference between ICD-10-CM codes, which describe diagnoses, and CPT codes, which describe procedures and services for billing.

Common Domain V Question Traps

  • Assuming HIPAA applies everywhere. In a high school setting, FERPA usually governs privacy. Read the setting carefully.
  • Confusing the BOC and NATA. The BOC certifies and disciplines ATs. NATA is the membership association. CAATE accredits education programs. State agencies license.
  • Mixing up negligence types. Applying ice correctly but for too long is misfeasance. Failing to refer a clear concussion is nonfeasance.
  • Treating documentation as optional after the fact. Late entries are allowed only when clearly labeled with the actual date and time written.
  • Going beyond scope. An answer might be clinically helpful but outside your state practice act, such as dispensing prescription medication. Scope beats good intentions.
  • Picking a clinician-rated measure when the question asks about the patient’s perspective. If the stem mentions the patient’s perception of function, look for a PROM.

Worked Sample Scenarios

Scenario 1: A Records Request at a High School

Consider a question where a college recruiter calls a public high school AT and asks about a senior’s recent knee injury. The AT is employed by the school district, and the athlete is 17. What should the AT do?

First, identify the setting and the law. A school district employee keeping records on a student points to FERPA, not HIPAA. Under FERPA, the AT generally needs the parent’s written consent (because the student is a minor) before disclosing information from the student’s records.

The best answer is to decline to share details until written authorization is on file. An answer that cites HIPAA may sound correct but misidentifies the governing law, and an answer that shares “just the basics” violates confidentiality.

Scenario 2: Evaluating a New Program

Now consider a question where a college AT starts a new hamstring injury-prevention program for the soccer team and wants to know whether it is working. Which approach best reflects quality improvement?

The strongest answer compares a meaningful organizational outcome, such as hamstring injury rate per 1,000 athlete-exposures or days lost, before and after the program, then uses the results to adjust it in the next cycle. That is PDSA in action. Weaker options include asking one athlete how they feel (an individual, anecdotal measure) or simply documenting that the program was delivered (a process, not an outcome).

How Domain V Connects to the Other Domains

Domain V rarely stands alone. It shows up inside clinical scenarios across the exam:

  • Domain I (Risk Reduction): Heat, lightning, and pre-participation exam policies are written, approved, and reviewed as part of administration.
  • Domain II (Assessment): Your evaluation findings must be documented in a way that supports the diagnosis and referral.
  • Domain III (Critical Incident Management): The emergency action plan is both a policy (Task 0502) and a critical incident tool. Failing to follow it can breach the standard of care.
  • Domain IV (Therapeutic Intervention): Tracking outcomes with PROMs and documenting progress supports return-to-activity decisions and billing.

A Focused Study Plan for Domain V

Because this domain is small, a concentrated one- to two-week block usually works, followed by regular mixed review:

  1. Days 1–2: Read the BOC Standards of Professional Practice and your state’s practice act summary.
  2. Days 3–4: Make comparison notes for HIPAA vs. FERPA, the four negligence elements, and nonfeasance vs. misfeasance vs. malfeasance.
  3. Days 5–6: Practice writing SOAP notes for mock evaluations and review QI concepts, PDSA, and PROMs.
  4. Day 7: Take a focused quiz on this domain and explain each answer out loud.
  5. Ongoing: Revisit the topic in mixed quizzes every few days so you can spot administrative issues when they’re hidden in clinical stems.

In Pocket Prep, use Build Your Own Quiz to select the Healthcare Administration and Professional Responsibility subject, then use Missed Questions to review the concepts that tripped you up. The Weakest Subject quiz will tell you when this domain is no longer your weak spot.

Start Preparing for the BOC ATC Exam With Pocket Prep

Pocket Prep’s BOC ATC exam prep includes 500 practice questions across all five domains, each with a detailed explanation, plus a full-length mock exam to test your pacing on all 175 items. Question of the Day and Quick 10 make it easy to fit short Domain V review between clinical shifts. A little focused work here can turn your weakest domain into easy points on exam day.