Regulatory Reporting & Data Governance Flashcards
7 cards from real HAC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Reporting & Data Governance flashcards as text
The Office of the National Coordinator (ONC) information blocking rule prohibits practices that interfere with access, exchange, or use of electronic health information (EHI). Which entity is NOT subject to this rule?
Answer: Pharmaceutical manufacturers without EHR products
The ONC information blocking rule applies to health IT developers, HIEs/HINs, and healthcare providers—not to pharmaceutical manufacturers that don't develop certified health IT.
In a healthcare data warehouse, which design pattern best supports regulatory reporting by preserving historical snapshots of slowly changing dimensions?
Answer: Star schema with Type 2 SCD (add new row)
Type 2 SCD adds a new row with effective dates when a dimension changes, preserving history needed for point-in-time regulatory reporting.
CMS's Conditions of Participation (CoPs) for hospitals require medical records to be retained for a minimum of how many years from the date of discharge for adults?
Answer: 5 years
CMS CoPs require hospitals to retain medical records for at least 5 years from the date of discharge, though state laws may require longer retention.
A healthcare analytics team is building a dashboard to monitor hospital-acquired infection (HAI) rates for NHSN reporting. Which data quality dimension is most critical to validate first?
Answer: Data accuracy
Accuracy is paramount for HAI reporting because incorrectly coded infections directly affect public performance scores and regulatory compliance.
Under the HITECH Act's Breach Notification Rule, covered entities must notify affected individuals of a PHI breach within:
Answer: 60 days of discovery
The HIPAA Breach Notification Rule, strengthened by HITECH, requires individual notification without unreasonable delay and within 60 calendar days of discovery.
Which metric is specifically required for ACO participation under the Medicare Shared Savings Program (MSSP)?
Answer: Consumer Assessment of Healthcare Providers and Systems (CAHPS) survey scores
MSSP ACOs must report CAHPS survey results as part of their quality measure requirements for shared savings eligibility.
A data governance policy assigns 'data ownership' to a specific executive role. What is the primary accountability of this data owner?
Answer: Authorizing access rights and accountable for data quality within their domain
Data owners are accountable for the quality, integrity, and appropriate use of data in their business domain, including approving access.