DIGITAL DETECTIVES 🔎
What Philippine law protects personal information, including sensitive personal information such as health records?
Republic Act No. 10173 – Data Privacy Act of 2012.
What is the medical term for the presence of air in the pleural cavity that can cause lung collapse?
Pneumothorax
What does HIPAA stand for?
Health Insurance Portability and Accountability Act
What device do nurses use to check a patient's oxygen saturation digitally?
Pulse oximeter
What is the term for fraudulent messages designed to trick users into revealing passwords or personal information?
Phishing
A nurse posts a patient's photo but covers the patient's eyes with an emoji. Is the patient automatically anonymous?
No. Other identifying details, context, or metadata may still reveal the patient's identity.
What is the name of the condition characterized by the classic triad of hypertension, bradycardia, and irregular respirations?
Cushing's triad
What does the abbreviation EHR mean in healthcare technology?
Electronic Health Record.
What is the term for providing healthcare consultations through video calls or online platforms?
Telehealth
What does two-factor authentication provide that a password alone does not?
An additional verification factor to strengthen account security.
A nurse shares patient information in a private Facebook group consisting only of healthcare workers. Does the private setting automatically make the disclosure ethical?
No. Access restrictions do not automatically authorize disclosure.
What is the term for the abnormal accumulation of fluid in the pericardial sac that restricts cardiac filling?
Cardiac tamponade
What is the difference between telehealth and telemedicine?
Telehealth is the broader term for remote healthcare-related services; telemedicine generally refers to remote clinical care.
What technology helps nurses detect irregular heart rhythms by recording the heart's electrical activity?
Electrocardiogram (ECG/EKG)
What type of malware encrypts or locks files and demands payment to restore access?
Ransomware
A patient signs a consent form allowing hospital photography for documentation. A nurse uses the same photograph for a personal TikTok account. Is the original consent sufficient? Explain.
No. Consent for hospital documentation does not automatically authorize personal social media use. The purpose, scope of consent, institutional authorization, and privacy requirements must be considered.
Which type of shock is characterized by a decrease in systemic vascular resistance despite adequate or increased cardiac output?
Distributive shock.
What is the name of the international classification system used to standardize medical diagnoses and health conditions?
International Classification of Diseases (ICD), developed by the World Health Organization.
What is the term for protecting patient information from unauthorized access or disclosure?
Data security
A nurse receives an urgent email from someone pretending to be the hospital director, requesting an immediate transfer of patient records. What type of cyberattack could this be?
Spear phishing or social engineering, depending on the targeting and method.
A nurse discusses a patient's unusual diagnosis online without using the patient's name. A family member recognizes the story. What privacy principle was overlooked?
The possibility of re-identification through indirect identifiers and contextual information.
What is the name of the specialized cardiac conduction pathway that carries impulses from the AV node to the bundle branches?
Bundle of His (AV bundle)
What is the difference between interoperability and data portability in healthcare ICT?
Interoperability is the ability of different systems to exchange and use information; data portability is the ability to transfer or obtain data between systems or services
Who is considered the founder of modern nursing informatics?
Virginia K. Saba
A hospital discovers that an employee's account has been compromised. The attacker may have accessed patient records, but the full extent is unknown. What is the appropriate incident-response sequence?
Contain the incident, notify the authorized IT/security and privacy teams, preserve evidence, investigate the scope, secure affected accounts and systems, assess notification obligations, and implement corrective measures.