A
API (Application Programming Interface)
A set of protocols and tools that allows different software applications to communicate with each other. In healthcare, APIs enable systems like EHRs, pharmacy networks, and patient apps to exchange data securely.
B
BAA (Business Associate Agreement)
A legally binding contract required by HIPAA between a covered entity (like a healthcare provider) and a business associate (like a software vendor) that handles protected health information. BeyondRxAid signs BAAs with all healthcare clients.
C
CCM (Chronic Care Management)
A Medicare program that provides reimbursement for non-face-to-face care coordination services for patients with multiple chronic conditions. Requires at least 20 minutes of clinical staff time per month.
Covered Entity
Under HIPAA, a health plan, healthcare clearinghouse, or healthcare provider that transmits health information electronically. Covered entities must comply with HIPAA Privacy and Security Rules.
E
E-Prescribing (Electronic Prescribing)
The computer-based electronic generation, transmission, and filling of a prescription, replacing paper and faxed prescriptions. Surescripts is the primary e-prescribing network in the United States.
EHR (Electronic Health Record)
A digital version of a patient's paper chart containing medical history, diagnoses, medications, treatment plans, immunization dates, allergies, and lab results. EHRs are designed to be shared across healthcare organizations.
EPCS (Electronic Prescribing for Controlled Substances)
The ability to electronically prescribe Schedule II-V controlled substances. EPCS requires additional identity proofing, two-factor authentication, and DEA certification.
F
FHIR (Fast Healthcare Interoperability Resources)
A standard for exchanging healthcare information electronically, developed by HL7. FHIR uses modern web technologies (REST, JSON, OAuth) and is becoming the standard for healthcare API development.
H
HIPAA (Health Insurance Portability and Accountability Act)
U.S. legislation from 1996 that provides data privacy and security provisions for safeguarding medical information. HIPAA compliance is mandatory for healthcare applications handling protected health information.
HITECH Act
The Health Information Technology for Economic and Clinical Health Act (2009) that strengthened HIPAA enforcement, increased penalties for violations, and promoted meaningful use of electronic health records.
HL7 (Health Level Seven)
A set of international standards for the exchange, integration, sharing, and retrieval of electronic health information. HL7 v2.x is widely used for clinical messaging, while FHIR is the modern evolution.
I
Interoperability
The ability of different information systems, devices, and applications to access, exchange, integrate, and cooperatively use data. Healthcare interoperability enables seamless data sharing between providers, payers, and patients.
L
LIS (Laboratory Information System)
Software that receives, processes, and stores information generated by laboratory processes. LIS systems interface with laboratory instruments and healthcare information systems.
M
Medication History
A comprehensive record of medications a patient has been prescribed, filled, or administered. Surescripts provides access to medication history from pharmacies, PBMs, and health plans across the country.
Middleware
Software that acts as a bridge between different applications or systems. In laboratories, middleware connects diagnostic instruments to LIS systems and enables data transformation and routing.
N
NewRx
The Surescripts transaction type for transmitting a new prescription electronically from a prescriber to a pharmacy. NewRx is the foundation of electronic prescribing.
P
PBM (Pharmacy Benefit Manager)
A third-party administrator of prescription drug programs that negotiates with pharmacies and drug manufacturers on behalf of health plans. PBMs manage formularies, process claims, and provide drug utilization review.
PHI (Protected Health Information)
Any information about health status, provision of healthcare, or payment for healthcare that can be linked to an individual. PHI is protected under HIPAA and must be secured in healthcare applications.
Prior Authorization (PA)
A requirement that a healthcare provider obtain approval from a health plan before a specific service, procedure, or medication is delivered. Electronic prior authorization (ePA) automates this process.
R
RPM (Remote Patient Monitoring)
The use of digital technologies to collect medical and health data from individuals in one location and electronically transmit it to healthcare providers in a different location. RPM is reimbursable under Medicare.
RTPB (Real-Time Prescription Benefit)
A Surescripts service that provides prescribers with patient-specific medication coverage and cost information at the point of prescribing, enabling more informed prescribing decisions.
S
SOC 2 (Service Organization Control 2)
An auditing procedure developed by AICPA that ensures service providers securely manage data. SOC 2 Type II certification requires demonstrated security controls over a period of time (typically 6-12 months).
Surescripts
The largest health information network in the United States, connecting pharmacies, PBMs, health plans, and healthcare providers. Surescripts processes billions of prescription transactions annually.
T
Telehealth
The delivery of health-related services via electronic information and telecommunications technologies. Includes video consultations, remote monitoring, mobile health apps, and asynchronous communications.
Telemedicine
The practice of medicine using technology to deliver care at a distance. A subset of telehealth specifically focused on clinical services provided remotely by physicians and other healthcare providers.
W
WCAG (Web Content Accessibility Guidelines)
International standards for making web content accessible to people with disabilities. Healthcare applications should meet WCAG 2.1 or 2.2 Level AA compliance to ensure accessibility for all users.
WebRTC (Web Real-Time Communication)
An open-source project providing web browsers and mobile applications with real-time communication via APIs. WebRTC enables HIPAA-compliant video consultations when implemented with proper security measures.
Need Help Understanding Healthcare Requirements?
Our team can explain how these concepts apply to your specific project and guide you through the compliance landscape.
Schedule Free Consultation