WGU C803 HLTH 3315 Data Analytics and
Information Governance – Bachelor of Science
in Health Information Management Study
Guide, Original Practice Questions & Answers,
Assessment Preparation, Healthcare Data
Analytics, Information Governance, Data
Quality, EHRs, Healthcare Regulations & Data
Management
Question 1: In the context of health information management, which of the
following best describes the primary purpose of a data dictionary?
A. To store patient demographic information for billing purposes.
B. To provide a centralized repository of data definitions, structures, and relationships.
C. To serve as a backup system for electronic health records.
D. To manage the hospital's financial accounting system.
CORRECT ANSWER: B. To provide a centralized repository of data definitions,
structures, and relationships.
Rationale: A data dictionary is a critical metadata repository that defines the structure,
format, and relationships of data elements within a system. While it may indirectly
support billing or record management, its core purpose is to ensure data consistency,
integrity, and usability across an organization, not to serve as a backup or financial tool.
Question 2: Under the Health Insurance Portability and Accountability Act
(HIPAA) Privacy Rule, which of the following is considered a permitted
disclosure of protected health information (PHI) without patient
authorization?
A. Marketing communications for a new hospital service.
B. A covered entity’s own treatment, payment, and healthcare operations.
C. Sale of PHI to a third-party data aggregator.
D. Disclosure to a life insurance company for underwriting purposes.
CORRECT ANSWER: B. A covered entity’s own treatment, payment, and
healthcare operations.
Rationale: The HIPAA Privacy Rule permits covered entities to use and disclose PHI for
their own treatment, payment, and healthcare operations (TPO) without patient
authorization. Marketing, sale of PHI, and underwriting purposes generally require
specific, written patient authorization unless exceptions apply.
,Question 3: In the ICD-10-CM coding system, what is the fundamental
difference between a diagnosis code and a procedure code?
A. Diagnosis codes are numeric, while procedure codes are alphanumeric.
B. Diagnosis codes describe the patient's condition, while procedure codes describe
services performed.
C. Procedure codes are used only for outpatient services.
D. Diagnosis codes are updated annually; procedure codes are static.
CORRECT ANSWER: B. Diagnosis codes describe the patient's condition, while
procedure codes describe services performed.
Rationale: In ICD-10, diagnosis codes (ICD-10-CM) classify diseases and health
conditions, while procedure codes (ICD-10-PCS) classify the specific medical or surgical
interventions performed. While there are alphanumeric components in both, and both
are updated, the key distinction is the type of clinical information they represent.
Question 4: Which of the following is a key characteristic of a longitudinal
patient record?
A. It contains information from a single episode of care.
B. It is organized primarily by the date of service.
C. It consolidates a patient's health information from multiple encounters and providers
over time.
D. It is exclusively used for billing and reimbursement purposes.
CORRECT ANSWER: C. It consolidates a patient's health information from
multiple encounters and providers over time.
Rationale: A longitudinal patient record, sometimes called a lifetime health record,
aggregates clinical data from all care settings and encounters across a patient's lifetime.
This contrasts with an episodic record, which is limited to a specific illness or event.
Question 5: When calculating the hospital-wide infection rate, what is the
correct formula to use?
A. (Number of hospital-acquired infections / Total number of admissions) x 100.
B. (Number of hospital-acquired infections / Total number of patient days) x 1000.
C. (Number of community-acquired infections / Total number of discharges) x 100.
D. (Number of surgical site infections / Total number of surgeries) x 100.
CORRECT ANSWER: B. (Number of hospital-acquired infections / Total
number of patient days) x 1000.
Rationale: The hospital-wide infection rate is a standard epidemiological measure. It is
calculated by dividing the number of new hospital-acquired infections by the total
,number of patient days during the same period, then multiplying by 1,000 to express the
rate per 1,000 patient days. This accounts for the length of exposure.
Question 6: What is the primary role of a release of information (ROI)
specialist in a health information management department?
A. To encode diagnoses for billing purposes.
B. To ensure protected health information is disclosed appropriately and in compliance
with regulations.
C. To manage the hospital's electronic health record system upgrades.
D. To provide direct patient care in the clinical setting.
CORRECT ANSWER: B. To ensure protected health information is disclosed
appropriately and in compliance with regulations.
Rationale: The ROI specialist is responsible for processing requests for PHI from
patients, providers, attorneys, and other parties. Their primary duty is to verify the
legality and validity of the request, authenticate the requester, and release only the
minimum necessary information in compliance with HIPAA and other regulations.
Question 7: In the context of data quality management, the characteristic of
"timeliness" means that data should be:
A. Available in multiple formats for different users.
B. Consistently formatted according to established standards.
C. Collected and available at the time it is needed.
D. Presented in a summarized format to facilitate reporting.
CORRECT ANSWER: C. Collected and available at the time it is needed.
Rationale: Data quality is assessed across several dimensions. Timeliness refers to the
availability of data when it is required for its intended purpose, such as clinical decision-
making or operational reporting. It is distinct from characteristics like consistency,
accessibility, and accuracy.
Question 8: The transition from ICD-9-CM to ICD-10-CM/PCS was significant
because:
A. ICD-10 uses only numeric characters, which simplified coding.
B. ICD-10 codes are shorter and easier to memorize.
C. ICD-10 provides a much higher level of clinical specificity and detail.
D. ICD-10 is only used for reporting morbidity, not mortality.
CORRECT ANSWER: C. ICD-10 provides a much higher level of clinical
specificity and detail.
, Rationale: ICD-10-CM/PCS expanded the code set from approximately 13,000 codes in
ICD-9 to over 70,000, allowing for a more precise representation of diagnoses and
procedures. This specificity supports better data for clinical research, quality
measurement, and reimbursement.
Question 9: Which federal regulation establishes the requirements for the
security of electronic protected health information (ePHI)?
A. The HIPAA Privacy Rule.
B. The HITECH Act.
C. The HIPAA Security Rule.
D. The Health Information Technology for Economic and Clinical Health (HITECH)
Breach Notification Rule.
CORRECT ANSWER: C. The HIPAA Security Rule.
Rationale: The HIPAA Security Rule specifically establishes national standards to protect
individuals' ePHI that is created, received, used, or maintained by a covered entity. The
Privacy Rule protects all PHI (paper and electronic), while the HITECH Act expanded
requirements and enforcement.
Question 10: What is the primary purpose of a "master patient index" (MPI)?
A. To store all clinical notes from a patient's current hospital stay.
B. To uniquely identify and link all records for a single patient across an organization.
C. To calculate the hospital's average length of stay for a given diagnosis.
D. To generate billing statements for patients and insurance companies.
CORRECT ANSWER: B. To uniquely identify and link all records for a single
patient across an organization.
Rationale: The MPI is a fundamental database that serves as a central index of all
patients registered within a healthcare organization. Its core function is to assign a
unique identifier to each patient and link all disparate records to ensure that a complete
and accurate patient record can be retrieved.
Question 11: According to the AHIMA Code of Ethics, which action represents
a breach of the HIM professional's duty to the public?
A. Refusing to provide PHI to a patient who has not completed a formal request form.
B. Ensuring continuing education to maintain professional competency.
C. Participating in a peer review process for a colleague.
D. Safeguarding the privacy and security of patient health information.
Information Governance – Bachelor of Science
in Health Information Management Study
Guide, Original Practice Questions & Answers,
Assessment Preparation, Healthcare Data
Analytics, Information Governance, Data
Quality, EHRs, Healthcare Regulations & Data
Management
Question 1: In the context of health information management, which of the
following best describes the primary purpose of a data dictionary?
A. To store patient demographic information for billing purposes.
B. To provide a centralized repository of data definitions, structures, and relationships.
C. To serve as a backup system for electronic health records.
D. To manage the hospital's financial accounting system.
CORRECT ANSWER: B. To provide a centralized repository of data definitions,
structures, and relationships.
Rationale: A data dictionary is a critical metadata repository that defines the structure,
format, and relationships of data elements within a system. While it may indirectly
support billing or record management, its core purpose is to ensure data consistency,
integrity, and usability across an organization, not to serve as a backup or financial tool.
Question 2: Under the Health Insurance Portability and Accountability Act
(HIPAA) Privacy Rule, which of the following is considered a permitted
disclosure of protected health information (PHI) without patient
authorization?
A. Marketing communications for a new hospital service.
B. A covered entity’s own treatment, payment, and healthcare operations.
C. Sale of PHI to a third-party data aggregator.
D. Disclosure to a life insurance company for underwriting purposes.
CORRECT ANSWER: B. A covered entity’s own treatment, payment, and
healthcare operations.
Rationale: The HIPAA Privacy Rule permits covered entities to use and disclose PHI for
their own treatment, payment, and healthcare operations (TPO) without patient
authorization. Marketing, sale of PHI, and underwriting purposes generally require
specific, written patient authorization unless exceptions apply.
,Question 3: In the ICD-10-CM coding system, what is the fundamental
difference between a diagnosis code and a procedure code?
A. Diagnosis codes are numeric, while procedure codes are alphanumeric.
B. Diagnosis codes describe the patient's condition, while procedure codes describe
services performed.
C. Procedure codes are used only for outpatient services.
D. Diagnosis codes are updated annually; procedure codes are static.
CORRECT ANSWER: B. Diagnosis codes describe the patient's condition, while
procedure codes describe services performed.
Rationale: In ICD-10, diagnosis codes (ICD-10-CM) classify diseases and health
conditions, while procedure codes (ICD-10-PCS) classify the specific medical or surgical
interventions performed. While there are alphanumeric components in both, and both
are updated, the key distinction is the type of clinical information they represent.
Question 4: Which of the following is a key characteristic of a longitudinal
patient record?
A. It contains information from a single episode of care.
B. It is organized primarily by the date of service.
C. It consolidates a patient's health information from multiple encounters and providers
over time.
D. It is exclusively used for billing and reimbursement purposes.
CORRECT ANSWER: C. It consolidates a patient's health information from
multiple encounters and providers over time.
Rationale: A longitudinal patient record, sometimes called a lifetime health record,
aggregates clinical data from all care settings and encounters across a patient's lifetime.
This contrasts with an episodic record, which is limited to a specific illness or event.
Question 5: When calculating the hospital-wide infection rate, what is the
correct formula to use?
A. (Number of hospital-acquired infections / Total number of admissions) x 100.
B. (Number of hospital-acquired infections / Total number of patient days) x 1000.
C. (Number of community-acquired infections / Total number of discharges) x 100.
D. (Number of surgical site infections / Total number of surgeries) x 100.
CORRECT ANSWER: B. (Number of hospital-acquired infections / Total
number of patient days) x 1000.
Rationale: The hospital-wide infection rate is a standard epidemiological measure. It is
calculated by dividing the number of new hospital-acquired infections by the total
,number of patient days during the same period, then multiplying by 1,000 to express the
rate per 1,000 patient days. This accounts for the length of exposure.
Question 6: What is the primary role of a release of information (ROI)
specialist in a health information management department?
A. To encode diagnoses for billing purposes.
B. To ensure protected health information is disclosed appropriately and in compliance
with regulations.
C. To manage the hospital's electronic health record system upgrades.
D. To provide direct patient care in the clinical setting.
CORRECT ANSWER: B. To ensure protected health information is disclosed
appropriately and in compliance with regulations.
Rationale: The ROI specialist is responsible for processing requests for PHI from
patients, providers, attorneys, and other parties. Their primary duty is to verify the
legality and validity of the request, authenticate the requester, and release only the
minimum necessary information in compliance with HIPAA and other regulations.
Question 7: In the context of data quality management, the characteristic of
"timeliness" means that data should be:
A. Available in multiple formats for different users.
B. Consistently formatted according to established standards.
C. Collected and available at the time it is needed.
D. Presented in a summarized format to facilitate reporting.
CORRECT ANSWER: C. Collected and available at the time it is needed.
Rationale: Data quality is assessed across several dimensions. Timeliness refers to the
availability of data when it is required for its intended purpose, such as clinical decision-
making or operational reporting. It is distinct from characteristics like consistency,
accessibility, and accuracy.
Question 8: The transition from ICD-9-CM to ICD-10-CM/PCS was significant
because:
A. ICD-10 uses only numeric characters, which simplified coding.
B. ICD-10 codes are shorter and easier to memorize.
C. ICD-10 provides a much higher level of clinical specificity and detail.
D. ICD-10 is only used for reporting morbidity, not mortality.
CORRECT ANSWER: C. ICD-10 provides a much higher level of clinical
specificity and detail.
, Rationale: ICD-10-CM/PCS expanded the code set from approximately 13,000 codes in
ICD-9 to over 70,000, allowing for a more precise representation of diagnoses and
procedures. This specificity supports better data for clinical research, quality
measurement, and reimbursement.
Question 9: Which federal regulation establishes the requirements for the
security of electronic protected health information (ePHI)?
A. The HIPAA Privacy Rule.
B. The HITECH Act.
C. The HIPAA Security Rule.
D. The Health Information Technology for Economic and Clinical Health (HITECH)
Breach Notification Rule.
CORRECT ANSWER: C. The HIPAA Security Rule.
Rationale: The HIPAA Security Rule specifically establishes national standards to protect
individuals' ePHI that is created, received, used, or maintained by a covered entity. The
Privacy Rule protects all PHI (paper and electronic), while the HITECH Act expanded
requirements and enforcement.
Question 10: What is the primary purpose of a "master patient index" (MPI)?
A. To store all clinical notes from a patient's current hospital stay.
B. To uniquely identify and link all records for a single patient across an organization.
C. To calculate the hospital's average length of stay for a given diagnosis.
D. To generate billing statements for patients and insurance companies.
CORRECT ANSWER: B. To uniquely identify and link all records for a single
patient across an organization.
Rationale: The MPI is a fundamental database that serves as a central index of all
patients registered within a healthcare organization. Its core function is to assign a
unique identifier to each patient and link all disparate records to ensure that a complete
and accurate patient record can be retrieved.
Question 11: According to the AHIMA Code of Ethics, which action represents
a breach of the HIM professional's duty to the public?
A. Refusing to provide PHI to a patient who has not completed a formal request form.
B. Ensuring continuing education to maintain professional competency.
C. Participating in a peer review process for a colleague.
D. Safeguarding the privacy and security of patient health information.
