Ambulatory Care Test Documentation and Health Records 1 — Questions and Answers
Question 1: Which federal law primarily governs the privacy and security of patient health information in US ambulatory care settings?
- EMTALA
- HIPAA (Correct answer)
- HITECH Act
- ADA
Correct answer: HIPAA
HIPAA (Health Insurance Portability and Accountability Act) establishes the primary federal standards for protecting patient health information privacy and security.
Question 2: In an ambulatory care electronic health record (EHR), which entry type allows a provider to borrow and build upon a prior note without creating an entirely new assessment?
- Addendum
- Cosignature
- Copy forward (Correct answer)
- Attestation
Correct answer: Copy forward
Copy forward (or auto-populate) brings prior note content into a new note, which improves efficiency but carries risk of outdated or inaccurate information if not updated.
Question 3: A patient requests a copy of their medical records. Under HIPAA, the covered entity must provide access within how many days?
- 10 days
- 30 days (Correct answer)
- 60 days
- 90 days
Correct answer: 30 days
HIPAA requires covered entities to provide patients access to their medical records within 30 days, with one possible 30-day extension.
Question 4: Which of the following constitutes a HIPAA breach requiring patient notification?
- Sharing records with another treating provider
- A locked laptop containing PHI is stolen (Correct answer)
- Discussing a patient case in a private provider meeting
- Sending a patient their own lab results
Correct answer: A locked laptop containing PHI is stolen
A stolen laptop containing protected health information (PHI) is a reportable breach under HIPAA's Breach Notification Rule.
Question 5: What does the acronym SOAP stand for in ambulatory care documentation?
- Subjective, Objective, Assessment, Plan (Correct answer)
- Signs, Observations, Actions, Procedures
- Summary, Outcomes, Analysis, Progress
- Symptoms, Orders, Assessments, Plans
Correct answer: Subjective, Objective, Assessment, Plan
SOAP notes consist of Subjective (patient-reported), Objective (measurable findings), Assessment (diagnosis/impression), and Plan (treatment strategy).
Question 6: Which documentation element is required when a provider corrects an error in an EHR note?
- Delete the original entry and retype the correct information
- Strike through the error, add a correction, and date/initial it
- Add an addendum with the correct information and date/time/signature (Correct answer)
- Mark the entry as invalid without adding any explanation
Correct answer: Add an addendum with the correct information and date/time/signature
Corrections in EHRs should be made as dated, signed addendums that preserve the original entry for legal and clinical accountability.
Which federal law primarily governs the privacy and security of patient health information in US ambulatory care settings?