Regulatory Reporting & Data Governance Flashcards
7 cards from real HAC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Reporting & Data Governance flashcards as text
Under the CMS Promoting Interoperability Program, which standard is required for certified EHR technology to support patient data access via APIs?
Answer: HL7 FHIR R4
CMS mandates HL7 FHIR R4 for patient-facing API access under the Promoting Interoperability Program.
A hospital's data governance committee discovers that the same patient metric is defined differently across three departments. Which governance artifact should be created to resolve this?
Answer: A business glossary entry with agreed-upon definition
A business glossary establishes authoritative, organization-wide definitions to eliminate metric inconsistencies.
Which regulation specifically governs the privacy and security of substance use disorder patient records in the US?
Answer: 42 CFR Part 2
42 CFR Part 2 imposes stricter confidentiality protections on substance use disorder treatment records than HIPAA.
In healthcare data governance, what is the primary role of a data steward?
Answer: Managing day-to-day data quality and policy compliance within a domain
Data stewards are responsible for maintaining data quality, definitions, and adherence to governance policies within their assigned domain.
When submitting the CMS Hospital Inpatient Quality Reporting (IQR) measures, what is the consequence of missing the annual deadline?
Answer: A 2-percentage-point reduction in the annual market basket update
Hospitals that fail to meet IQR submission requirements receive a 2-percentage-point reduction in their annual payment update.
A data lineage map in healthcare analytics is primarily used to:
Answer: Document the origin, movement, and transformation of data from source to report
Data lineage maps trace how data moves and changes from its source systems through transformations to final analytical outputs.
Which of the following is an example of a 'minimum necessary' standard violation under the HIPAA Privacy Rule?
Answer: A billing clerk downloading the entire patient database to process one claim
Accessing more PHI than needed for the specific task—such as downloading an entire database to process one claim—violates the minimum necessary standard.