HITECH Act and Technology Requirements Flashcards
7 cards from real HIPAA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 HITECH Act and Technology Requirements flashcards as text
Under HITECH, which type of health information technology must be 'certified' to qualify for Meaningful Use incentive payments?
Answer: ONC-certified Electronic Health Record Technology (CEHRT)
Meaningful Use incentives require use of ONC-certified Electronic Health Record Technology (CEHRT) that meets federal functionality and interoperability standards.
What HITECH requirement applies when a covered entity uses an EHR and a patient requests their PHI be sent to a third party?
Answer: The CE must transmit the PHI electronically if the patient requests it
HITECH requires covered entities using EHRs to transmit PHI electronically to a designated third party when a patient makes that specific request.
Which HITECH provision most significantly expanded state attorneys general authority regarding HIPAA enforcement?
Answer: Power to bring civil actions on behalf of state residents for HIPAA violations
HITECH granted state attorneys general the authority to bring civil actions on behalf of state residents harmed by HIPAA violations, creating a new enforcement pathway.
Under the HITECH Act, what is required of covered entities regarding the use of PHI for marketing communications sent via electronic means?
Answer: Written authorization is required for all electronic marketing using PHI
HITECH requires written authorization before covered entities may use PHI for marketing communications, including those delivered electronically.
A business associate discovers a breach on March 1 and notifies the covered entity on April 20. Is this compliant with HITECH?
Answer: Yes, notification within 60 days of discovery is compliant
April 20 is 50 days after March 1, which falls within the 60-day window business associates have to notify covered entities under HITECH.
Which HITECH provision prohibits covered entities from conditioning treatment on a patient's agreement to receive fundraising communications?
Answer: Prohibition on conditioning treatment
HITECH explicitly prohibits covered entities from making treatment conditional on a patient's agreement to receive fundraising communications.
What is the primary purpose of the ONC Health IT Certification Program established under HITECH?
Answer: To certify that EHR technology meets standards for security, functionality, and interoperability
The ONC certification program ensures EHR products meet established standards for security, functionality, and interoperability before providers can use them for Meaningful Use incentives.