Electronic Health Records Flashcards
8 cards from real CBCS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 8 Electronic Health Records flashcards as text
Which standard transaction code set is used for submitting pharmacy claims electronically?
Answer: NCPDP Telecom Standard
The NCPDP Telecom Standard (National Council for Prescription Drug Programs) is used for electronic pharmacy claims.
In EHR systems, what does 'copy and paste' documentation create risk for?
Answer: Propagation of inaccurate or outdated information through the record
Copy and paste (cloning) documentation can propagate outdated or inaccurate information and can constitute fraudulent documentation.
What type of consent is required before releasing a patient's psychotherapy notes under HIPAA?
Answer: Specific written authorization from the patient
Psychotherapy notes have special protections under HIPAA and require a specific written authorization (separate from a general authorization) before they can be disclosed.
Which government agency is responsible for enforcing HIPAA Privacy and Security Rules?
Answer: OCR (HHS Office for Civil Rights)
The HHS Office for Civil Rights (OCR) is the primary enforcer of HIPAA Privacy and Security Rules.
What is a Personal Health Record (PHR) compared to an EHR?
Answer: A PHR is controlled by the patient; an EHR is controlled by the provider
A PHR is a health record that the patient manages and controls, while an EHR is maintained and controlled by the healthcare provider.
What does the term 'data integrity' mean in the context of EHRs?
Answer: The accuracy, completeness, and consistency of health data over its lifecycle
Data integrity means that health information is accurate, complete, consistent, and has not been altered improperly.
Under HIPAA, within how many days must a covered entity provide patients with access to their medical records when requested?
Answer: 30 days
HIPAA requires covered entities to provide patients access to their medical records within 30 days of request (with one 30-day extension if needed).
Which of the following is an example of a physical safeguard required by the HIPAA Security Rule?
Answer: Locked server rooms with access badges
Locked server rooms with access control (like key cards) are physical safeguards protecting the hardware containing ePHI.