Source: http://www.hipaasurvivalguide.com/hit-standards/170-302.php
Timestamp: 2016-12-04 01:56:24
Document Index: 32633410

Matched Legal Cases: ['§170', '§170', '§170', '§170', '§170', '§170', '§170', '§170', '§170', '§170']

« Previous Page — HIT Standards Index — Next Page » Make sure you are Omnibus Rule Compliant: HIPAA Privacy Checklist. §170.302 General certification criteria for Complete EHRs or EHR Modules.
(a) Drug-drug, drug-allergy interaction checks. (1) Notifications. Automatically and electronically generate and indicate in real-time, notifications at the point of care for drug-drug and drug-allergy contraindications based on medication list, medication allergy list, and computerized provider order entry (CPOE).
(b) Drug-formulary checks. Enable a user to electronically check if drugs are in a formulary or preferred drug list.
(c) Maintain up-to-date problem list. Enable a user to electronically record, modify, and retrieve a patient’s problem list for longitudinal care in accordance with:
(2) At a minimum, the version of the standard specified in §170.207(a)(2).
(d) Maintain active medication list. Enable a user to electronically record, modify, and retrieve a patient’s active medication list as well as medication history for longitudinal care.
(e) Maintain active medication allergy list. Enable a user to electronically record, modify, and retrieve a patient’s active medication allergy list as well as medication allergy history for longitudinal care.
(f) Record and chart vital signs. (1) Vital signs. Enable a user to electronically record, modify, and retrieve a patient’s vital signs including, at a minimum, height, weight, and blood pressure.
(g) Smoking status. Enable a user to electronically record, modify, and retrieve the smoking status of a patient. Smoking status types must include: current every day smoker; current some day smoker; former smoker; never smoker; smoker, current status unknown; and unknown if ever smoked.
(h) Incorporate laboratory test results--(1) Receive results. Electronically receive clinical laboratory test results in a structured format and display such results in human readable format.
(i) Generate patient lists. Enable a user to electronically select, sort, retrieve, and generate lists of patients according to, at a minimum, the data elements included in:
(j) Medication reconciliation. Enable a user to electronically compare two or more medication lists.
(k) Submission to immunization registries. Electronically record, modify, retrieve, and submit immunization information in accordance with:
(1) The standard (and applicable implementation specifications) specified in §170.205(e)(1) or §170.205(e)(2); and
(m) Patient-specific education resources. Enable a user to electronically identify and provide patient-specific education resources according to, at a minimum, the data elements included in the patient’s: problem list; medication list; and laboratory test results; as well as provide such resources to the patient.
(n) Automated measure calculation. For each meaningful use objective with a percentage-based measure, electronically record the numerator and denominator and generate a report including the numerator, denominator, and resulting percentage associated with each applicable meaningful use measure.
(q) Automatic log-off. Terminate an electronic session after a predetermined time of inactivity.
(r) Audit log. (1) Record actions. Record actions related to electronic health information in accordance with the standard specified in §170.210(b).
(s) Integrity. (1) Create a message digest in accordance with the standard specified in §170.210(c).
(2) Verify in accordance with the standard specified in §170.210(c) upon receipt of electronically exchanged health information that such information has not been altered.
(t) Authentication. Verify that a person or entity seeking access to electronic health information is the one claimed and is authorized to access such information.
(u) General encryption. Encrypt and decrypt electronic health information in accordance with the standard specified in §170.210(a)(1), unless the Secretary determines that the use of such algorithm would pose a significant security risk for Certified EHR Technology.
(v) Encryption when exchanging electronic health information. Encrypt and decrypt electronic health information when exchanged in accordance with the standard specified in §170.210(a)(2).
(w) Optional. Accounting of disclosures. Record disclosures made for treatment, payment, and health care operations in accordance with the standard specified in §170.210(d).