AHIC Health IT Policy and Governance 5

Question 1

Which of the following best describes the purpose of the Common Rule (45 CFR Part 46) in health informatics research?

Accepted Answer

It protects human research subjects by establishing requirements for informed consent and IRB review

Answer

The Common Rule is the federal policy for the protection of human research subjects, requiring IRB oversight and informed consent for most federally funded research involving human participants.

Question 2

A healthcare organization wants to share patient data with a research institution. Under HIPAA, which mechanism allows this without individual patient authorization?

Accepted Answer

A Data Use Agreement (DUA) for a limited data set

Answer

A Data Use Agreement allows covered entities to share a limited data set (which excludes most direct identifiers) with researchers without individual patient authorization.

Question 3

In health IT policy, the term 'information governance' refers to which overarching concept?

Accepted Answer

An organization-wide framework for managing health information as a strategic asset throughout its lifecycle

Answer

Information governance is a comprehensive framework that encompasses the policies, standards, and processes for managing health information quality, integrity, and security across its entire lifecycle.

Question 4

Which federal law establishes patients' rights to access, inspect, and obtain copies of their protected health information?

Accepted Answer

HIPAA Privacy Rule (45 CFR § 164.524)

Answer

The HIPAA Privacy Rule at 45 CFR § 164.524 grants patients the right to access and obtain copies of their own PHI held by covered entities.

Question 5

Which of the following is the BEST example of a policy-level control for managing health IT governance?

Accepted Answer

Establishing a formal IT project approval process with executive sign-off

Answer

A formal IT project approval process with executive sign-off is a policy-level governance control that ensures organizational oversight and accountability for IT investments.

(AHIC) AMIA Health Informatics Certification Practice Test

(AHIC) AMIA Health Informatics Certification Practice Test

AHIC Health IT Policy and Governance 5