HITECH Act & Electronic Health Records Compliance Flashcards
7 cards from real CHP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 HITECH Act & Electronic Health Records Compliance flashcards as text
The HITECH Act was enacted as part of which larger piece of legislation in 2009?
Answer: American Recovery and Reinvestment Act
HITECH was enacted as part of the American Recovery and Reinvestment Act (ARRA) of 2009 to promote the adoption of electronic health records.
What does 'Meaningful Use' refer to in the context of the HITECH Act?
Answer: Using certified EHR technology in ways that improve care quality, safety, efficiency, and patient engagement
Meaningful Use refers to using certified EHR technology in a manner that improves quality, safety, and efficiency while engaging patients and reducing health disparities.
Under the HITECH Act, which entities became directly liable for HIPAA compliance that were previously only bound through contractual agreements?
Answer: Business associates
HITECH made business associates directly subject to HIPAA Security Rule requirements and certain Privacy Rule provisions, rather than being bound only through Business Associate Agreements.
What is the maximum civil monetary penalty per violation category under HITECH's highest penalty tier?
Answer: $50,000 per violation with a $1.5 million annual cap
Under HITECH, willful neglect violations not corrected within 30 days carry a maximum penalty of $50,000 per violation and $1.5 million per calendar year for identical violations.
For a breach affecting 500 or more individuals in a state or jurisdiction, what entities must a covered entity notify?
Answer: Affected individuals, prominent media outlets in the affected area, and the Secretary of HHS
Breaches affecting 500 or more individuals in a state or jurisdiction require simultaneous notification to affected individuals, prominent media outlets serving that area, and the Secretary of HHS.
Which federal office is primarily responsible for setting certification standards for EHR technology under the HITECH Act?
Answer: Office of the National Coordinator for Health IT (ONC)
The Office of the National Coordinator for Health IT (ONC) is responsible for establishing standards, certification criteria, and implementation specifications for EHR technology under HITECH.
Under HITECH, what expanded right do patients have regarding PHI maintained in an electronic health record?
Answer: The right to receive an electronic copy of their PHI in the electronic format they request, if readily producible
HITECH expanded patient access rights by requiring covered entities to provide an electronic copy of PHI maintained in an EHR in the electronic format requested by the patient, if readily producible.