A CDI specialist is writing a query and including information from another facility's EHR via shared notes. Understanding that the ability to view shared notes may be revoked by the patient at any time, and to ensure HIPAA guidelines are followed, which of the following elements are BEST to include when sending the query?
When a CDI query references information from an externally shared note, best practice is to include enough identifying detail so the provider can locate and validate the source even if access is later revoked or if the shared record becomes unavailable. From an outpatient CDI and HIPAA-aligned workflow perspective, the query should clearly cite: where the information came from (the location of the shared note within the EHR/external record set), who authored it (provider name), when it was created (date of shared note), and the specific clinical documentation being referenced (the relevant statement/findings). This supports transparency, auditability, and minimizes the risk of misattribution or relying on inaccessible information. Options B--D are missing one or more critical elements---most notably the date and/or location of the shared note---making it harder to verify the source. Including ''follow-up procedure'' is not the priority for HIPAA-compliant source identification; the key need is traceability of the external documentation used to support the clarification request.
Currently there are no comments in this discussion, be the first to comment!