Clinical Informatics Certification Clinical Informatics Privacy & Ethics 3

Question 1

A patient requests an amendment to their EHR record, but the provider believes the information is accurate. Under HIPAA, what must the provider do?

Accepted Answer

Deny the request and document the denial with the patient's disagreement noted in the record

Answer

Under HIPAA, a provider may deny an amendment request if the information is accurate and complete, but must provide a written denial and allow the patient to submit a statement of disagreement.

Question 2

Which type of data governance policy specifically addresses how long PHI must be retained before secure disposal?

Accepted Answer

Data retention and destruction policy

Answer

A data retention and destruction policy defines the minimum and maximum periods for retaining PHI and the approved methods for its secure disposal when no longer needed.

Question 3

In clinical informatics, the concept of 'data stewardship' PRIMARILY refers to:

Accepted Answer

The responsible management and oversight of health data throughout its lifecycle

Answer

Data stewardship encompasses the policies, processes, and accountabilities for managing data quality, integrity, privacy, and security across its entire lifecycle.

Question 4

A hospital shares PHI with a third-party billing company. Under HIPAA, which document is REQUIRED to govern this relationship?

Accepted Answer

Business Associate Agreement (BAA)

Answer

A Business Associate Agreement is required by HIPAA whenever a covered entity shares PHI with a vendor or contractor (business associate) who performs services on its behalf.

Question 5

Which of the following scenarios represents the GREATEST risk of re-identification from a 'de-identified' dataset?

Accepted Answer

A small rural county dataset with rare diagnosis codes linked to age and gender

Answer

Small geographic populations combined with rare diagnoses and demographic attributes create a high re-identification risk because very few individuals fit the combination, making patients uniquely identifiable.

Clinical Informatics Certification Practice Test

Clinical Informatics Certification Practice Test

Clinical Informatics Certification Clinical Informatics Privacy & Ethics 3