CEHRS Patient Portal and Education 3 — Questions and Answers
Question 1: A portal sends an automated appointment reminder to a patient's email. The patient replies that it is the wrong email address. What is the first action?
- Disable all portal notifications for the patient
- Verify the patient's identity, correct the email in the EHR, and resend the invitation (Correct answer)
- Delete the patient's portal account and start over
- Ignore the reply since automated messages are one-way
Correct answer: Verify the patient's identity, correct the email in the EHR, and resend the invitation
Correcting demographic data in the EHR after identity verification ensures future communications reach the patient and maintains record accuracy.
Question 2: Which metric is most commonly used to evaluate patient portal adoption rates?
- Number of lab results released per day
- Percentage of active patients who have logged into the portal at least once (Correct answer)
- Total number of portal pages viewed per month
- Average time to respond to a portal message
Correct answer: Percentage of active patients who have logged into the portal at least once
Portal adoption is standardly measured as the proportion of the patient population that has activated and logged into their portal account.
Question 3: Under the 21st Century Cures Act's information blocking rule, withholding EHR data from a patient's portal without a valid exception is considered:
- Acceptable if clinically justified
- Information blocking, which is prohibited and subject to penalties (Correct answer)
- A HIPAA-only violation with no additional consequences
- Standard practice for protecting sensitive diagnoses
Correct answer: Information blocking, which is prohibited and subject to penalties
The 21st Century Cures Act prohibits information blocking and imposes significant penalties on healthcare providers, health IT developers, and networks that improperly restrict data access.
Question 4: A patient uses the portal to upload a photo of a rash for the provider to review. How should this be classified?
- An unauthorized data entry that must be deleted
- Patient-generated health data (PGHD) that can be incorporated into the clinical encounter (Correct answer)
- A HIPAA breach requiring immediate reporting
- A billing event that generates a facility fee
Correct answer: Patient-generated health data (PGHD) that can be incorporated into the clinical encounter
Images and other data submitted by patients through the portal are considered patient-generated health data and can inform clinical decision-making.
Question 5: What is the primary purpose of a 'care summary' or 'after-visit summary' made available in the patient portal?
- To serve as a legal contract between the patient and provider
- To give patients a plain-language overview of their visit, diagnoses, medications, and follow-up instructions (Correct answer)
- To replace the need for discharge planning by nursing staff
- To automatically schedule follow-up appointments
Correct answer: To give patients a plain-language overview of their visit, diagnoses, medications, and follow-up instructions
After-visit summaries improve care transitions and patient understanding by summarizing key visit details in accessible language.
Question 6: A 16-year-old patient requests portal access to their own record in a state where minors can consent to certain sensitive services. What is the correct approach?
- Deny access until the patient turns 18
- Grant the minor their own portal account for services they legally consented to, separate from parental proxy access (Correct answer)
- Share all records with the parent automatically
- Require a court order before granting access
Correct answer: Grant the minor their own portal account for services they legally consented to, separate from parental proxy access
Minor consent laws allow adolescents portal access limited to services they legally consented to, protecting sensitive information from parental view.
Question 7: Which of the following best describes 'portal message triage' in a busy practice?
- Automatically deleting low-priority messages
- A structured process for reviewing, categorizing, and routing patient messages to the appropriate clinical or administrative staff (Correct answer)
- Forwarding all messages to the physician regardless of content
- Limiting patients to one portal message per week
Correct answer: A structured process for reviewing, categorizing, and routing patient messages to the appropriate clinical or administrative staff
Effective triage ensures clinical messages reach the right clinician promptly while administrative questions are routed to support staff, improving efficiency and safety.
A portal sends an automated appointment reminder to a patient's email.
The patient replies that it is the wrong email address.
What is the first action?