Individually complete the discussion assigned to you. Your two response replies should be to each of the other topics you were not assigned. Your reply posts should evaluate health information technology compliance strategies and tools to manage risk.

Use only classroom materials to complete the discussion. This would include the textbooks, web links, and the Classroom law library.

All groups should read In the Tracks We Leave, 3^rd Ed. Ch. 9 Information Technology Setback: Heartland Healthcare System (UMGC Library)

Group 1/Medical Records in Health Care

Part 1: Critical Analysis of the Law

1. Evaluate medical record requirements under the law. What should be included in the medical records to meet state and federal law requirements?
2. Evaluate state, federal, and statute of limitations medical record retention requirements. Recommend components of a medical record retention policy for your organization in Maryland that includes the following.
   • Length of medical record retention
   • Indication of how and where medical records will be retained
   • How and when medical records will be released

   • How would a medical record release be different for a patient who was from Europe, treated at your facility in Maryland, returned home after treatment so the patient and records are subject to the GDPR?

3. Describe a HIPAA right to accounting disclosures. How would you comply with this HIPAA requirement for your organization?

4. How is the health information technology (HIT) that is used for the electronic medical record a compliance tool? What are ways you can use HIT for compliance? How could a strong HIT system and strong Chief Information Officer (CIO) serve to prevent the situation described in The Tracks We Leave: Chapter 9 Information Technology Setback: Heartland Health care System? Evaluate how the AHIMA Code of Ethics and guidelines would apply to this situation.