HLT-CNA36-01 · Lesson 6 · 16 clock hours · lab
Digital Literacy and Electronic Health Records for CNAs
Objective. Students will navigate an electronic health record (EHR) training environment to locate patient assignments, enter vital signs and I&O data, and send secure internal messages, while identifying behaviors that protect patient data and comply with facility digital-security policies.
⚠ Pending professional review
This lesson, its worked examples and its practice questions has not yet been verified by a licensed clinician in the field or by a certification or approval body. It is a study draft and may contain errors. Do not use it to make decisions about any patient or medication. Always follow your instructor, your supervising professional, and current official references and regulations.
VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.
Why Digital Literacy Matters for CNAs
Most US healthcare facilities now document patient care electronically. As a CNA, you will use an Electronic Health Record (EHR) every shift to look up patient assignments, review care plans, record vital signs and intake-and-output (I&O) data, and communicate with the nursing team. Errors in the EHR can reach a physician or pharmacist within seconds and affect patient care decisions. That is why accuracy, correct entry habits, and data security are not optional skills — they are patient-safety requirements.
What Is an EHR?
An Electronic Health Record is a digital version of a patient's paper chart. It contains the patient's medical history, current diagnoses, care plan, medication list, orders, and flow sheets where CNAs enter observations such as vital signs and fluid totals. Multiple authorized staff members can view the same record simultaneously, which improves communication. However, this also means a wrong entry — or an entry in the wrong patient's chart — is visible to the entire care team immediately.
CNA responsibilities within the EHR typically include:
- Locating your assigned patient's chart
- Reading the current care plan and activity/diet orders
- Entering vital signs (temperature, pulse, respirations, blood pressure, oxygen saturation, pain level when directed)
- Recording I&O (fluid intake in milliliters and urine or other output amounts)
- Flagging observations for the charge nurse using the system's internal messaging or communication tool
You do not enter physician orders, modify medication records, or access charts for patients not assigned to you.
Navigating an EHR: Core Steps
EHR software varies by facility, but the workflow is similar across systems.
Step 1 — Log in with your own credentials. Use only your personal username and password. Never share your login with a coworker, and never use someone else's login. Every action you take is time-stamped under your name; if another person uses your credentials and makes an error, you are legally responsible.
Step 2 — Locate your patient's chart. Search by last name, room number, or patient ID exactly as assigned. Confirm the patient's full name and date of birth before entering any data. Entering data in the wrong patient's chart is a serious error that can cause real harm.
Step 3 — Review the care plan. Identify the patient's current orders, activity level, diet type, and any special precautions (fall risk, isolation, fluid restriction) before beginning care.
Step 4 — Enter data promptly and accurately. Record vital signs and I&O as soon as possible after measurement. Use the correct fields — do not type a blood pressure value into the pulse field. Double-check numbers before saving.
Step 5 — Log out completely. When you step away from a workstation — even for one minute — log out or lock the screen. An unlocked workstation allows anyone nearby to view or alter patient records under your name.
HIPAA and Digital Security
The Health Insurance Portability and Accountability Act (HIPAA) requires healthcare workers to protect Protected Health Information (PHI) — any information that could identify a patient and is related to their health condition, care, or payment. PHI includes names, room numbers, diagnoses, photographs, and even the fact that a person is a patient.
Digital security rules that apply to every CNA:
- Never photograph or screenshot patient information on a personal phone or device.
- Never text, email, or post patient information using personal apps or social media.
- Do not share your login under any circumstances, including to help a busy coworker.
- Lock or log out of workstations every time you walk away.
- Use only facility-approved communication tools for sharing patient information internally.
- Report suspected breaches immediately to your supervisor. If you accidentally access the wrong chart, report it; most facilities have a correction protocol.
Violations — even unintentional ones — can result in disciplinary action, termination, fines, and loss of your CNA registry status.
Secure Internal Messaging
Many facilities use encrypted internal messaging systems so CNAs can notify the charge nurse about observations without leaving the unit. Whether you use a digital system or a written communication, apply the same standards:
- Be objective. Describe what you observed, not what you think the diagnosis is. Write "Patient reports pain of 7/10 in left leg" rather than "Patient's leg looks infected."
- Use standard medical abbreviations your facility has approved (e.g., BP, HR, RR, SpO₂, I&O, c/o for complains of).
- Be complete but brief. Include the patient identifier (as your facility policy requires), the observation, the time, and your name/title.
- Send to the correct recipient. Confirm you have selected the charge nurse for your unit before sending.
Example message:
*"Rm 204 [patient last name], 0930 — c/o increased shortness of breath. SpO₂ 92% on room air, RR 24. Positioned HOB 45°. Please advise. — [Your Name], CNA"
Safety Reminders
- Verify patient identity before every data entry.
- If you are unsure which field to use, ask the charge nurse before guessing.
- Never correct or delete another staff member's entry; report discrepancies to your supervisor.
- EHR documentation is a legal record; accurate, timely entries protect patients and protect you.
- Scope of practice applies digitally as well as physically: document only what you are authorized to observe and record.
Key terms10
Electronic Health Record (EHR)A secure digital system that stores a patient's medical information and allows authorized healthcare team members to document and review care in real time.
Protected Health Information (PHI)Any individually identifiable information related to a patient's health, care, or payment that is protected under HIPAA from unauthorized disclosure.
HIPAAThe Health Insurance Portability and Accountability Act; the federal law that establishes standards for protecting patient health information privacy and security.
Login credentialsA personal username and password assigned to an individual healthcare worker that provides authorized access to the EHR; must never be shared.
Intake and Output (I&O)A measurement and documentation system tracking all fluids a patient takes in (by mouth, IV, tube feeding) and all fluids the patient expels (urine, emesis, drainage), usually recorded in milliliters.
Workstation lockA security feature that requires re-entry of login credentials after a period of inactivity or when manually activated; prevents unauthorized access to the EHR when staff step away.
Secure internal messagingAn encrypted communication tool built into or affiliated with the EHR that allows staff to exchange patient-related information within the facility without using unsecured personal devices or apps.
Objective documentationRecording only observable, measurable facts (what was seen, heard, or measured) rather than personal opinions or conclusions about a patient's condition.
Scope of practiceThe legally and professionally defined tasks a CNA is permitted to perform and document; in the EHR, CNAs document only observations and care within their authorized role.
Data breachAn incident in which PHI is accessed, used, or disclosed without authorization, whether accidental or intentional; must be reported to a supervisor immediately.
In class: EHR navigation guided walkthrough: using a free EHR training environment (such as the open-source OpenEMR training demo or a vendor-provided sandbox), students follow a step-by-step lab guide to locate a simulated patient chart, review the care plan, and enter a set of pre-determined vital signs; instructor circulates and corrects entry errors in real time. · Data-security scenario quiz: students read five short scenarios describing CNA behavior with digital devices (e.g., leaving a workstation unlocked, texting patient information on a personal phone, sharing login credentials) and identify the HIPAA risk, the correct action, and the potential consequence for each. · Digital communication simulation: using a secure-messaging simulation tool or a classroom role-play format with written message cards, students compose three internal messages to a charge nurse describing a patient observation, apply correct medical abbreviations and objective language, and receive peer feedback using a message-quality rubric.
Materials: Computers or tablets with internet access; EHR training environment access (OpenEMR demo, vendor sandbox, or simulated EHR software); HIPAA data-security handout; secure-messaging rubric; lab guide handout; projector for instructor demonstration
Check: EHR lab guide completed with all required data fields entered correctly (pass = ≥90% of fields accurate with no entries in wrong patient record); data-security quiz scored ≥80%; all three digital messages meet rubric standard of objective, grammatically correct, and appropriately abbreviated.
Practice check8
Answer each question, then check it. Nothing is recorded; this is your own practice.
Record this lesson on my transcript. Sign in with your key and enrollment email to record lessons (enroll free if you have no key). This page stays open to read and practise.