EHR Regulatory Compliance & Standards 2

Question 1

Under the HITECH Act, which entity type became directly liable for HIPAA compliance for the first time?

Accepted Answer

Business associates

Answer

HITECH (2009) extended direct HIPAA liability to business associates, who were previously only bound through contracts with covered entities.

Question 2

Which CMS program requires eligible professionals to report quality measures through an EHR to avoid a payment adjustment?

Accepted Answer

MACRA/MIPS

Answer

MACRA established MIPS, which requires clinicians to report quality, cost, and improvement activity data—often through certified EHRs—to avoid negative Medicare payment adjustments.

Question 3

A hospital shares de-identified patient data with a research university. Under HIPAA, which standard must the data meet to be considered truly de-identified?

Accepted Answer

Expert determination or Safe Harbor method

Answer

HIPAA recognizes two de-identification methods: the Expert Determination method and the Safe Harbor method, which requires removal of 18 specific identifiers.

Question 4

Which federal regulation mandates that EHR systems support electronic prescribing of controlled substances (EPCS)?

Accepted Answer

DEA 21 CFR Part 1311

Answer

The DEA's 21 CFR Part 1311 (2010) established the federal framework permitting and regulating electronic prescribing of controlled substances.

Question 5

What is the maximum penalty per violation category per year under HIPAA's tiered civil monetary penalty structure?

Accepted Answer

$1,500,000

Answer

HIPAA's tiered penalty structure caps annual penalties at $1,500,000 per violation category, regardless of the number of individual violations in that category.

(EHR) Electronic Health Records Program Certification Practice Test

(EHR) Electronic Health Records Program Certification Practice Test

EHR Regulatory Compliance & Standards 2