Clinical Informatics Privacy & Ethics Flashcards
7 cards from real Clinical Informatics Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Clinical Informatics Privacy & Ethics flashcards as text
A patient requests an amendment to their EHR record, but the provider believes the information is accurate. Under HIPAA, what must the provider do?
Answer: Deny the request and document the denial with the patient's disagreement noted in the record
Under HIPAA, a provider may deny an amendment request if the information is accurate and complete, but must provide a written denial and allow the patient to submit a statement of disagreement.
Which type of data governance policy specifically addresses how long PHI must be retained before secure disposal?
Answer: Data retention and destruction policy
A data retention and destruction policy defines the minimum and maximum periods for retaining PHI and the approved methods for its secure disposal when no longer needed.
In clinical informatics, the concept of 'data stewardship' PRIMARILY refers to:
Answer: The responsible management and oversight of health data throughout its lifecycle
Data stewardship encompasses the policies, processes, and accountabilities for managing data quality, integrity, privacy, and security across its entire lifecycle.
A hospital shares PHI with a third-party billing company. Under HIPAA, which document is REQUIRED to govern this relationship?
Answer: Business Associate Agreement (BAA)
A Business Associate Agreement is required by HIPAA whenever a covered entity shares PHI with a vendor or contractor (business associate) who performs services on its behalf.
Which of the following scenarios represents the GREATEST risk of re-identification from a 'de-identified' dataset?
Answer: A small rural county dataset with rare diagnosis codes linked to age and gender
Small geographic populations combined with rare diagnoses and demographic attributes create a high re-identification risk because very few individuals fit the combination, making patients uniquely identifiable.
Which federal regulation governs the privacy of substance use disorder treatment records and is STRICTER than HIPAA?
Answer: 42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records)
42 CFR Part 2 provides heightened confidentiality protections for substance use disorder (SUD) treatment records, generally requiring patient consent for most disclosures.
An informatics team is developing a predictive model using historical EHR data. What ethical concern is MOST relevant during the model development phase?
Answer: Whether historical biases in clinical data will be perpetuated by the model
Algorithmic bias is a critical ethical concern because predictive models trained on historically biased clinical data can perpetuate or amplify health disparities.