EHR Regulatory Compliance & Standards 3

Question 1

Which organization is responsible for certifying EHR technology under the ONC Health IT Certification Program?

Accepted Answer

Accredited Testing Laboratories (ATLs) and ONC-ACBs

Answer

ONC-Authorized Certification Bodies (ONC-ACBs) working with ONC-Authorized Testing Laboratories (ATLs) perform EHR certification under the ONC program.

Question 2

A breach affecting 600 patients must be reported to HHS and patients within how many days under HIPAA?

Accepted Answer

Within 60 days of discovery

Answer

HIPAA requires covered entities to notify affected individuals and HHS within 60 days of discovering a breach affecting 500 or more individuals, or fewer.

Question 3

The Minimum Necessary Standard under HIPAA requires covered entities to:

Accepted Answer

Limit PHI access and disclosure to the least amount needed for the intended purpose

Answer

The Minimum Necessary Standard requires that access to, use of, and disclosures of PHI be limited to the minimum amount necessary to accomplish the intended purpose.

Question 4

Which terminology standard is required by ONC for recording problems/diagnoses in a certified EHR?

Accepted Answer

ICD-10-CM

Answer

ONC requires ICD-10-CM for recording patient diagnoses and problems in certified EHR technology for billing and clinical documentation purposes.

Question 5

Under HIPAA, a covered entity may share PHI with a public health authority without patient authorization for which purpose?

Accepted Answer

Disease surveillance and reporting

Answer

HIPAA's public health activities exception permits disclosure of PHI to public health authorities for disease surveillance, reporting, and prevention without patient authorization.

(EHR) Electronic Health Records Program Certification Practice Test

(EHR) Electronic Health Records Program Certification Practice Test

EHR Regulatory Compliance & Standards 3