ACCURATE
Type of organization and federal/state laws - ANSWER What two main factors does the retention of
health records depend on
The period specified by the state statute of limitations - ANSWER How long should health records be
retained for malpractice, and other claims
five years - ANSWER The Medicare conditions of Participation require hospitals, long-term care facilities,
specialized providers and home-health agencies to retain medical records for a period of no less than
than ___
Until patient reaches age of majority (as defined by state law) - ANSWER The Medicare Conditions of
Participation requires hospitals, long-term care facilities, specialized providers and home-health agencies
retain the health information of a minor until
Legal Health Record - ANSWER The official business record created by or for the healthcare organization
Informed Consent - ANSWER The process of advising a patient about treatment options
Advance directive - ANSWER A legal document in which patient's provide instructions on how they want
to be treated in an event they become unable to communicate their wishes
Priveldged communication - ANSWER Any information communicated by a patient to a health care
provider is considered ____
Breach of confidentiality - ANSWER When patient information is disclosed to others who do not have a
right to access information
, HIPAA - ANSWER Protects health insurance coverage for workers and their families when they change or
lose their jobs
HIPAA - ANSWER Governs privacy and security of health info
Security Rule - ANSWER Provides standards to protect confidentiality
Risk analysis - ANSWER Asses potential risk
Risk management - ANSWER Reduces risks
Sanction policy - ANSWER Penalties for those who do not comply with security policies
Information system activity review - ANSWER Audit logs, tracking reports, monitoring
Noncompliance - ANSWER - Leaving a sheet of paper containing PHI at the front desk which is visible to
others
- A computer screen that is unattended and logged in to PHI
- Knowingly releasing PHI to unauthorized individuals
- Selling PHI to marketing firms
Safeguards - ANSWER policies to change passwords, data backup processes, login monitoring and
disaster recovery plan. Limitation of access to health record
Health Information Technology for Economic and Clinical Health Act - ANSWER what is HITECH stand for
HITECH - ANSWER Addresses the privacy and security concerns associated with the electronic
transmission of health info, in part, through several provisions that strengthen the civil; and criminal
enforcement of HIPAA rules