🚧 Under construction — VoTechWorks is being built. A free tech program — complimentary, as our commitment to get America working.
voTechWorksGrade 13 · a vocational technology learning center, by urbanicity
newSchoolWorks.com › VoTechWorks › Health & Personal Services › Nursing Assistant (CNA) › Universal Core: Safety, Math, Communication & Career for Nursing Assistants › Lesson 6
HLT-CNA36-01 · Lesson 6 · 16 clock hours · lab

Digital Literacy and Electronic Health Records for CNAs

Objective. Students will navigate an electronic health record (EHR) training environment to locate patient assignments, enter vital signs and I&O data, and send secure internal messages, while identifying behaviors that protect patient data and comply with facility digital-security policies.

⚠ Pending professional review

This lesson, its worked examples and its practice questions has not yet been verified by a licensed clinician in the field or by a certification or approval body. It is a study draft and may contain errors. Do not use it to make decisions about any patient or medication. Always follow your instructor, your supervising professional, and current official references and regulations.

VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.

Why Digital Literacy Matters for CNAs

Most US healthcare facilities now document patient care electronically. As a CNA, you will use an Electronic Health Record (EHR) every shift to look up patient assignments, review care plans, record vital signs and intake-and-output (I&O) data, and communicate with the nursing team. Errors in the EHR can reach a physician or pharmacist within seconds and affect patient care decisions. That is why accuracy, correct entry habits, and data security are not optional skills — they are patient-safety requirements.

What Is an EHR?

An Electronic Health Record is a digital version of a patient's paper chart. It contains the patient's medical history, current diagnoses, care plan, medication list, orders, and flow sheets where CNAs enter observations such as vital signs and fluid totals. Multiple authorized staff members can view the same record simultaneously, which improves communication. However, this also means a wrong entry — or an entry in the wrong patient's chart — is visible to the entire care team immediately.

CNA responsibilities within the EHR typically include:

You do not enter physician orders, modify medication records, or access charts for patients not assigned to you.

Navigating an EHR: Core Steps

EHR software varies by facility, but the workflow is similar across systems.

Step 1 — Log in with your own credentials. Use only your personal username and password. Never share your login with a coworker, and never use someone else's login. Every action you take is time-stamped under your name; if another person uses your credentials and makes an error, you are legally responsible.

Step 2 — Locate your patient's chart. Search by last name, room number, or patient ID exactly as assigned. Confirm the patient's full name and date of birth before entering any data. Entering data in the wrong patient's chart is a serious error that can cause real harm.

Step 3 — Review the care plan. Identify the patient's current orders, activity level, diet type, and any special precautions (fall risk, isolation, fluid restriction) before beginning care.

Step 4 — Enter data promptly and accurately. Record vital signs and I&O as soon as possible after measurement. Use the correct fields — do not type a blood pressure value into the pulse field. Double-check numbers before saving.

Step 5 — Log out completely. When you step away from a workstation — even for one minute — log out or lock the screen. An unlocked workstation allows anyone nearby to view or alter patient records under your name.

HIPAA and Digital Security

The Health Insurance Portability and Accountability Act (HIPAA) requires healthcare workers to protect Protected Health Information (PHI) — any information that could identify a patient and is related to their health condition, care, or payment. PHI includes names, room numbers, diagnoses, photographs, and even the fact that a person is a patient.

Digital security rules that apply to every CNA:

Violations — even unintentional ones — can result in disciplinary action, termination, fines, and loss of your CNA registry status.

Secure Internal Messaging

Many facilities use encrypted internal messaging systems so CNAs can notify the charge nurse about observations without leaving the unit. Whether you use a digital system or a written communication, apply the same standards:

Example message:

*"Rm 204 [patient last name], 0930 — c/o increased shortness of breath. SpO₂ 92% on room air, RR 24. Positioned HOB 45°. Please advise. — [Your Name], CNA"

Safety Reminders

Key terms10

Electronic Health Record (EHR)A secure digital system that stores a patient's medical information and allows authorized healthcare team members to document and review care in real time.
Protected Health Information (PHI)Any individually identifiable information related to a patient's health, care, or payment that is protected under HIPAA from unauthorized disclosure.
HIPAAThe Health Insurance Portability and Accountability Act; the federal law that establishes standards for protecting patient health information privacy and security.
Login credentialsA personal username and password assigned to an individual healthcare worker that provides authorized access to the EHR; must never be shared.
Intake and Output (I&O)A measurement and documentation system tracking all fluids a patient takes in (by mouth, IV, tube feeding) and all fluids the patient expels (urine, emesis, drainage), usually recorded in milliliters.
Workstation lockA security feature that requires re-entry of login credentials after a period of inactivity or when manually activated; prevents unauthorized access to the EHR when staff step away.
Secure internal messagingAn encrypted communication tool built into or affiliated with the EHR that allows staff to exchange patient-related information within the facility without using unsecured personal devices or apps.
Objective documentationRecording only observable, measurable facts (what was seen, heard, or measured) rather than personal opinions or conclusions about a patient's condition.
Scope of practiceThe legally and professionally defined tasks a CNA is permitted to perform and document; in the EHR, CNAs document only observations and care within their authorized role.
Data breachAn incident in which PHI is accessed, used, or disclosed without authorization, whether accidental or intentional; must be reported to a supervisor immediately.
In class: EHR navigation guided walkthrough: using a free EHR training environment (such as the open-source OpenEMR training demo or a vendor-provided sandbox), students follow a step-by-step lab guide to locate a simulated patient chart, review the care plan, and enter a set of pre-determined vital signs; instructor circulates and corrects entry errors in real time. · Data-security scenario quiz: students read five short scenarios describing CNA behavior with digital devices (e.g., leaving a workstation unlocked, texting patient information on a personal phone, sharing login credentials) and identify the HIPAA risk, the correct action, and the potential consequence for each. · Digital communication simulation: using a secure-messaging simulation tool or a classroom role-play format with written message cards, students compose three internal messages to a charge nurse describing a patient observation, apply correct medical abbreviations and objective language, and receive peer feedback using a message-quality rubric.
Materials: Computers or tablets with internet access; EHR training environment access (OpenEMR demo, vendor sandbox, or simulated EHR software); HIPAA data-security handout; secure-messaging rubric; lab guide handout; projector for instructor demonstration
Check: EHR lab guide completed with all required data fields entered correctly (pass = ≥90% of fields accurate with no entries in wrong patient record); data-security quiz scored ≥80%; all three digital messages meet rubric standard of objective, grammatically correct, and appropriately abbreviated.

Practice check8

Answer each question, then check it. Nothing is recorded; this is your own practice.

Safety and Infection Control / Legal and Ethical Responsibilities
1. A CNA finishes entering vital signs and steps away from the computer to answer a call light. She leaves the EHR open on the screen. Which HIPAA principle does this action violate?
Safety and Infection Control / Documentation
2. Before entering a patient's blood pressure reading into the EHR, what is the most important action the CNA should take?
Legal and Ethical Responsibilities
3. A coworker asks to use your EHR login because she forgot her password and needs to check a patient assignment quickly. The best response is to:
Documentation / Safety
4. A CNA notices that the I&O entry she just saved shows the urine output recorded in the intake column. She should:
Communication / Documentation
5. Which of the following internal messages best reflects objective, professional EHR communication from a CNA to a charge nurse?
Legal and Ethical Responsibilities / HIPAA
6. Under HIPAA, which of the following is considered Protected Health Information (PHI)?
Legal and Ethical Responsibilities / HIPAA
7. A CNA accidentally opens the chart of a patient who is not on her assignment. She realizes the mistake immediately. What should she do?
Role and Responsibilities / Scope of Practice
8. Which behavior correctly demonstrates EHR scope of practice for a CNA?
Record this lesson on my transcript. Sign in with your key and enrollment email to record lessons (enroll free if you have no key). This page stays open to read and practise.