EHR Patient Portal & Engagement Tools 5 — Questions and Answers
Question 1: When lab results are released automatically to the patient portal without provider review, what is the GREATEST risk to address?
- Patients may request duplicate testing
- Patients may experience unnecessary anxiety from abnormal results without clinical context (Correct answer)
- Portal storage costs increase with large result files
- Providers lose billing opportunities for result review visits
Correct answer: Patients may experience unnecessary anxiety from abnormal results without clinical context
Immediate release of abnormal lab results without clinical context can cause patient distress and confusion, underscoring the need for accompanying explanations or timely provider follow-up.
Question 2: A patient requests an amendment to their medical record through the portal. Under HIPAA, the covered entity must respond within:
- 10 business days
- 30 days, with one 30-day extension if needed (Correct answer)
- 60 days, with no extension allowed
- 90 days for electronic records
Correct answer: 30 days, with one 30-day extension if needed
HIPAA requires covered entities to act on an amendment request within 60 days, but the common practice guidance often references 30 days with a 30-day extension when communicated to the patient.
Question 3: Which FHIR resource is commonly used to power patient-facing portal features such as displaying medication lists and allergy information?
- Observation
- Patient
- MedicationRequest and AllergyIntolerance (Correct answer)
- Encounter
Correct answer: MedicationRequest and AllergyIntolerance
The FHIR MedicationRequest resource represents prescribed medications, and AllergyIntolerance stores allergy data; both are used to populate portal medication and allergy displays.
Question 4: A hospital system wants to improve portal adoption among patients with low health literacy. Which strategy is MOST evidence-based?
- Requiring all patients to register during admission
- Using plain language, visual aids, and portal navigation assistance during clinical visits (Correct answer)
- Limiting portal content to lab results to reduce complexity
- Charging a fee for paper statements to incentivize portal use
Correct answer: Using plain language, visual aids, and portal navigation assistance during clinical visits
Evidence supports that in-person portal demonstrations using plain language and visual aids during clinical encounters significantly increase adoption among patients with low health literacy.
Question 5: Which portal feature supports the care transition process when a patient is discharged from a hospital?
- Online bill pay integration
- Access to discharge instructions and medication reconciliation summary through the portal (Correct answer)
- Provider directory search
- Group appointment scheduling
Correct answer: Access to discharge instructions and medication reconciliation summary through the portal
Providing discharge instructions and a reconciled medication list through the portal supports care transitions by giving patients access to critical post-discharge information at any time.
Question 6: A practice enables two-factor authentication (2FA) for portal logins. Which threat does this MOST directly mitigate?
- SQL injection attacks on the portal database
- Unauthorized account access using stolen credentials (Correct answer)
- Phishing emails sent to patients
- Data breaches of the EHR server itself
Correct answer: Unauthorized account access using stolen credentials
Two-factor authentication prevents unauthorized access even when a patient's username and password are compromised, requiring a second verification step such as a one-time code.
Question 7: Under the CMS Interoperability and Patient Access Final Rule, Medicare Advantage plans must provide patient data through APIs using which standard?
- HL7 v2 messaging
- FHIR R4 APIs (Correct answer)
- CCDA document exchange
- DICOM imaging standards
Correct answer: FHIR R4 APIs
The CMS Interoperability and Patient Access Final Rule requires payers to implement FHIR R4-based APIs to give patients access to their claims and clinical data.
EHR Patient Portal & Engagement Tools 5
When lab results are released automatically to the patient portal without provider review, what is the GREATEST risk to address?