WGU C803 HLTH 3315 Data Analytics and Information
Governance – Bachelor of Science in Health
Information Management Study Guide, Original
Practice Questions & Answers, Assessment
Preparation, Comprehensive Healthcare Data
Analytics Review, Data Quality, Information
Governance, Healthcare Analytics, Data Collection,
Regulatory Compliance & Health Information
Management
Question 1: In the context of health information management, which of the
following best defines the "data integrity" principle as it applies to electronic
health records (EHRs)?
A. Ensuring that health data is accessible to all hospital staff at all times.
B. Guaranteeing that health data is accurate, complete, and has not been altered or
destroyed in an unauthorized manner.
C. The process of backing up health data to an off-site server on a weekly basis.
D. The ability of different EHR systems to exchange and use patient information
seamlessly.
CORRECT ANSWER: B. Guaranteeing that health data is accurate, complete,
and has not been altered or destroyed in an unauthorized manner.
Rationale: Data integrity refers to the maintenance and assurance of the accuracy and
consistency of data over its entire lifecycle. In HIM, this is a fundamental principle,
ensuring that patient records are a faithful representation of the clinical encounter and
have not been compromised. Option A describes accessibility, C describes data backup,
and D describes interoperability.
Question 2: A patient requests an amendment to their medical record,
believing a diagnosis is incorrect. Under HIPAA, what is the covered entity's
primary responsibility regarding this request?
A. To automatically approve the amendment as requested by the patient.
B. To deny the amendment if the original clinician is no longer with the practice.
C. To accept or deny the amendment in writing within 60 days of receiving the request.
D. To delete the original entry and replace it with the patient's requested version.
CORRECT ANSWER: C. To accept or deny the amendment in writing within 60
days of receiving the request.
Rationale: HIPAA requires that a covered entity act on a patient's amendment request
within 60 days. They must inform the patient in writing of the acceptance or denial, and
the reasons for a denial. They are not required to automatically approve it (A), the
clinician's departure doesn't affect the process (B), and they must never delete the
original entry; they must append an addendum (D).
,Question 3: Which of the following is considered a primary source of data for a
hospital's cancer registry?
A. The patient's social media activity regarding their illness.
B. The physician's clinical notes and pathology reports.
C. National health surveys conducted by the CDC.
D. Summary data from a state-level vital statistics office.
CORRECT ANSWER: B. The physician's clinical notes and pathology reports.
Rationale: Primary sources are the original records of the patient encounter. In a cancer
registry, primary sources include pathology reports, operative reports, and clinical notes
that contain directly observed data. The other options are considered secondary data
sources, which are interpretations or summaries of primary data.
Question 4: In the ICD-10-CM coding system, what is the purpose of the
"Excludes1" note?
A. It indicates that two codes cannot be reported together because the conditions are
mutually exclusive.
B. It indicates that a condition is not a component of another condition and must be
coded separately.
C. It provides a link to a different chapter for more specific coding.
D. It signifies that the code is a manifestation code that must be sequenced after the
underlying disease code.
CORRECT ANSWER: A. It indicates that two codes cannot be reported together
because the conditions are mutually exclusive.
Rationale: An "Excludes1" note is a pure excludes note. It means "NOT CODED HERE"
and indicates that the code being excluded should never be used with the code in
question. They are mutually exclusive (e.g., a congenital condition vs. an acquired
condition of the same type). Option B describes "Excludes2", C is not a standard
function, and D describes "Code first" or "Use additional code" notes.
Question 5: A healthcare organization is implementing a new EHR system.
Which of the following is the most critical first step in the project's risk
management plan?
A. Purchasing the most expensive and feature-rich software available.
B. Training all staff on the new system before it is purchased.
C. Conducting a thorough risk assessment to identify potential vulnerabilities and
threats.
D. Ensuring the system has a built-in social media platform for patient engagement.
CORRECT ANSWER: C. Conducting a thorough risk assessment to identify
potential vulnerabilities and threats.
Rationale: Risk management begins with a risk assessment. This process identifies and
analyzes potential risks (e.g., data breaches, system downtime, user errors) to the
,project. Without this foundational step, other efforts like mitigation and contingency
planning are ineffective. Training (B) should follow the risk assessment, and purchasing
decisions (A) should be based on organizational needs, not just features.
Question 6: The process of ensuring that data is collected in a standardized
format to allow for easy aggregation and analysis is known as:
A. Data integrity.
B. Data stewardship.
C. Data normalization.
D. Data mapping.
CORRECT ANSWER: C. Data normalization.
Rationale: Data normalization is the process of organizing data to reduce redundancy
and improve data integrity, and in the context of data warehousing and analytics, it often
involves standardizing data into a consistent format. This allows data from various
sources to be compared and aggregated. Data stewardship (B) is about overall
responsibility and accountability for data assets.
Question 7: Under the Common Rule, which of the following is a key
requirement for informed consent in research involving human subjects?
A. Consent can be waived for any research that might benefit the patient's health.
B. Participants must be informed of the purpose, risks, benefits, and procedures of the
study.
C. Consent is only required if the research involves a new drug.
D. The informed consent document does not need to be approved by the IRB.
CORRECT ANSWER: B. Participants must be informed of the purpose, risks,
benefits, and procedures of the study.
Rationale: The Common Rule sets forth the basic requirements for informed consent,
which include providing a clear explanation of the research's purpose, duration,
procedures, reasonably foreseeable risks, and potential benefits. Consent cannot be
waived arbitrarily (A), it applies to all human subjects research, not just new drugs (C),
and the IRB must approve the consent form (D).
Question 8: In a master patient index (MPI), what is the primary purpose of an
enterprise-wide MPI (EMPI)?
A. To track the financial performance of each department within a hospital.
B. To uniquely identify patients across different facilities and information systems within
a healthcare system.
C. To serve as a backup for billing and claims data in case of system failure.
D. To provide a daily schedule of all patient appointments for all providers.
CORRECT ANSWER: B. To uniquely identify patients across different facilities
and information systems within a healthcare system.
, Rationale: An Enterprise Master Patient Index (EMPI) links patient records from
multiple facilities and disparate systems to create a single, comprehensive view of a
patient's health history. Its main goal is to eliminate duplicate records and ensure
accurate patient identification enterprise-wide. The MPI is not a financial tool (A), a
backup (C), or a scheduling tool (D).
Question 9: Which of the following is a key characteristic of a "covered entity"
under HIPAA?
A. Any organization that provides health insurance to its employees.
B. Any individual who works in a healthcare facility, regardless of their role.
C. Health plans, healthcare clearinghouses, and healthcare providers who transmit
health information electronically.
D. Any vendor who sells software to a hospital but does not access patient data.
CORRECT ANSWER: C. Health plans, healthcare clearinghouses, and
healthcare providers who transmit health information electronically.
Rationale: The HIPAA rules define a covered entity as one of three specific categories:
health plans, healthcare clearinghouses, and healthcare providers that conduct certain
standard administrative and financial transactions in electronic form. Individuals (B) are
not entities, and vendors without data access are often business associates, not covered
entities.
Question 10: A patient's blood type is A-positive. According to the HIM coding
guidelines, this is an example of which type of data?
A. Administrative data.
B. Clinical data.
C. Demographic data.
D. Financial data.
CORRECT ANSWER: B. Clinical data.
Rationale: Clinical data is information that describes a patient's health status, condition,
and treatment. Blood type is a physiological characteristic and is part of the clinical
picture of the patient. Demographic data (C) includes name, address, and date of birth.
Administrative (A) and financial (D) data relate to operations and billing.
Question 11: Which of the following is a primary responsibility of a Health
Information Management (HIM) professional in the release of information
process?
A. Determining the clinical necessity of the medical procedure in question.
B. Verifying the identity of the requestor and ensuring they have a legal right to the
information.
C. Diagnosing the patient's condition based on the records.
D. Setting the fee for the patient's upcoming surgery.
Governance – Bachelor of Science in Health
Information Management Study Guide, Original
Practice Questions & Answers, Assessment
Preparation, Comprehensive Healthcare Data
Analytics Review, Data Quality, Information
Governance, Healthcare Analytics, Data Collection,
Regulatory Compliance & Health Information
Management
Question 1: In the context of health information management, which of the
following best defines the "data integrity" principle as it applies to electronic
health records (EHRs)?
A. Ensuring that health data is accessible to all hospital staff at all times.
B. Guaranteeing that health data is accurate, complete, and has not been altered or
destroyed in an unauthorized manner.
C. The process of backing up health data to an off-site server on a weekly basis.
D. The ability of different EHR systems to exchange and use patient information
seamlessly.
CORRECT ANSWER: B. Guaranteeing that health data is accurate, complete,
and has not been altered or destroyed in an unauthorized manner.
Rationale: Data integrity refers to the maintenance and assurance of the accuracy and
consistency of data over its entire lifecycle. In HIM, this is a fundamental principle,
ensuring that patient records are a faithful representation of the clinical encounter and
have not been compromised. Option A describes accessibility, C describes data backup,
and D describes interoperability.
Question 2: A patient requests an amendment to their medical record,
believing a diagnosis is incorrect. Under HIPAA, what is the covered entity's
primary responsibility regarding this request?
A. To automatically approve the amendment as requested by the patient.
B. To deny the amendment if the original clinician is no longer with the practice.
C. To accept or deny the amendment in writing within 60 days of receiving the request.
D. To delete the original entry and replace it with the patient's requested version.
CORRECT ANSWER: C. To accept or deny the amendment in writing within 60
days of receiving the request.
Rationale: HIPAA requires that a covered entity act on a patient's amendment request
within 60 days. They must inform the patient in writing of the acceptance or denial, and
the reasons for a denial. They are not required to automatically approve it (A), the
clinician's departure doesn't affect the process (B), and they must never delete the
original entry; they must append an addendum (D).
,Question 3: Which of the following is considered a primary source of data for a
hospital's cancer registry?
A. The patient's social media activity regarding their illness.
B. The physician's clinical notes and pathology reports.
C. National health surveys conducted by the CDC.
D. Summary data from a state-level vital statistics office.
CORRECT ANSWER: B. The physician's clinical notes and pathology reports.
Rationale: Primary sources are the original records of the patient encounter. In a cancer
registry, primary sources include pathology reports, operative reports, and clinical notes
that contain directly observed data. The other options are considered secondary data
sources, which are interpretations or summaries of primary data.
Question 4: In the ICD-10-CM coding system, what is the purpose of the
"Excludes1" note?
A. It indicates that two codes cannot be reported together because the conditions are
mutually exclusive.
B. It indicates that a condition is not a component of another condition and must be
coded separately.
C. It provides a link to a different chapter for more specific coding.
D. It signifies that the code is a manifestation code that must be sequenced after the
underlying disease code.
CORRECT ANSWER: A. It indicates that two codes cannot be reported together
because the conditions are mutually exclusive.
Rationale: An "Excludes1" note is a pure excludes note. It means "NOT CODED HERE"
and indicates that the code being excluded should never be used with the code in
question. They are mutually exclusive (e.g., a congenital condition vs. an acquired
condition of the same type). Option B describes "Excludes2", C is not a standard
function, and D describes "Code first" or "Use additional code" notes.
Question 5: A healthcare organization is implementing a new EHR system.
Which of the following is the most critical first step in the project's risk
management plan?
A. Purchasing the most expensive and feature-rich software available.
B. Training all staff on the new system before it is purchased.
C. Conducting a thorough risk assessment to identify potential vulnerabilities and
threats.
D. Ensuring the system has a built-in social media platform for patient engagement.
CORRECT ANSWER: C. Conducting a thorough risk assessment to identify
potential vulnerabilities and threats.
Rationale: Risk management begins with a risk assessment. This process identifies and
analyzes potential risks (e.g., data breaches, system downtime, user errors) to the
,project. Without this foundational step, other efforts like mitigation and contingency
planning are ineffective. Training (B) should follow the risk assessment, and purchasing
decisions (A) should be based on organizational needs, not just features.
Question 6: The process of ensuring that data is collected in a standardized
format to allow for easy aggregation and analysis is known as:
A. Data integrity.
B. Data stewardship.
C. Data normalization.
D. Data mapping.
CORRECT ANSWER: C. Data normalization.
Rationale: Data normalization is the process of organizing data to reduce redundancy
and improve data integrity, and in the context of data warehousing and analytics, it often
involves standardizing data into a consistent format. This allows data from various
sources to be compared and aggregated. Data stewardship (B) is about overall
responsibility and accountability for data assets.
Question 7: Under the Common Rule, which of the following is a key
requirement for informed consent in research involving human subjects?
A. Consent can be waived for any research that might benefit the patient's health.
B. Participants must be informed of the purpose, risks, benefits, and procedures of the
study.
C. Consent is only required if the research involves a new drug.
D. The informed consent document does not need to be approved by the IRB.
CORRECT ANSWER: B. Participants must be informed of the purpose, risks,
benefits, and procedures of the study.
Rationale: The Common Rule sets forth the basic requirements for informed consent,
which include providing a clear explanation of the research's purpose, duration,
procedures, reasonably foreseeable risks, and potential benefits. Consent cannot be
waived arbitrarily (A), it applies to all human subjects research, not just new drugs (C),
and the IRB must approve the consent form (D).
Question 8: In a master patient index (MPI), what is the primary purpose of an
enterprise-wide MPI (EMPI)?
A. To track the financial performance of each department within a hospital.
B. To uniquely identify patients across different facilities and information systems within
a healthcare system.
C. To serve as a backup for billing and claims data in case of system failure.
D. To provide a daily schedule of all patient appointments for all providers.
CORRECT ANSWER: B. To uniquely identify patients across different facilities
and information systems within a healthcare system.
, Rationale: An Enterprise Master Patient Index (EMPI) links patient records from
multiple facilities and disparate systems to create a single, comprehensive view of a
patient's health history. Its main goal is to eliminate duplicate records and ensure
accurate patient identification enterprise-wide. The MPI is not a financial tool (A), a
backup (C), or a scheduling tool (D).
Question 9: Which of the following is a key characteristic of a "covered entity"
under HIPAA?
A. Any organization that provides health insurance to its employees.
B. Any individual who works in a healthcare facility, regardless of their role.
C. Health plans, healthcare clearinghouses, and healthcare providers who transmit
health information electronically.
D. Any vendor who sells software to a hospital but does not access patient data.
CORRECT ANSWER: C. Health plans, healthcare clearinghouses, and
healthcare providers who transmit health information electronically.
Rationale: The HIPAA rules define a covered entity as one of three specific categories:
health plans, healthcare clearinghouses, and healthcare providers that conduct certain
standard administrative and financial transactions in electronic form. Individuals (B) are
not entities, and vendors without data access are often business associates, not covered
entities.
Question 10: A patient's blood type is A-positive. According to the HIM coding
guidelines, this is an example of which type of data?
A. Administrative data.
B. Clinical data.
C. Demographic data.
D. Financial data.
CORRECT ANSWER: B. Clinical data.
Rationale: Clinical data is information that describes a patient's health status, condition,
and treatment. Blood type is a physiological characteristic and is part of the clinical
picture of the patient. Demographic data (C) includes name, address, and date of birth.
Administrative (A) and financial (D) data relate to operations and billing.
Question 11: Which of the following is a primary responsibility of a Health
Information Management (HIM) professional in the release of information
process?
A. Determining the clinical necessity of the medical procedure in question.
B. Verifying the identity of the requestor and ensuring they have a legal right to the
information.
C. Diagnosing the patient's condition based on the records.
D. Setting the fee for the patient's upcoming surgery.
