There are no federally recognized HIPAA certification standards for covered entities (CE) and business associates (BA) and it's unlikely one will be. However, that doesn't stop larger CEs from requiring some form of certification to demonstrate compliance with HIPAA and proof that BAs have implemented sound information security programs. The Health Information Trust Alliance (HITRUST) published its first common security framework (CSF) in March 2009 with the goal of focusing on information security as a core pillar of the broad adoption of health information systems and exchanges. Larger CEs, primarily large health plans, now require their BAs to become HITRUST certified.
Q: We recently received a request for a patient's records. The patient transferred to another provider several years ago and we subsequently transferred all the patient's records to the new provider. Should I direct the request to the provider the patient transferred to? I'm unsure that we should be responsible for retrieving and releasing information for this patient since we transferred the patient's entire record to the new provider.
A: If you sent a copy of the patient's records to the new provider and still have the original records, it would be appropriate for you to respond to the request. If you transferred all records to the new provider and no longer have the patient's information, refer the request to the new provider.
Editor's note: Mary Brandt, MBA, RHIA, CHE, CHPS, is a healthcare consultant specializing in healthcare regulatory compliance and operations improvement. She is also an advisory board member for BOH. This information does not constitute legal advice. Consult legal counsel for answers to specific privacy and security questions. Opinions expressed are those of the author and do not represent HCPro or ACDIS. Email your HIPAA questions to Associate Editor Nicole Votta at nvotta@hcpro.com.
Physician advisors (PA) are an important ally for case managers at many organizations when it comes to ensuring proper patient status. But one organization has greatly expanded the role of PAs to include performance improvement and as a result has seen improvements in everything from readmissions to length of stay.
Assigning the correct patient status is a constant challenge for hospitals and the case managers who are charged with ensuring these decisions are accurate.
Hospitals were struggling this summer to comply with the Notice of Observation Treatment and Implication for Care Eligibility (NOTICE) Act, which was signed by President Barack Obama August 6, requiring hospitals to provide a verbal and written notice of outpatient status to any patient in observation who has been in the hospital for more than 24 hours.
CMS is looking to implement the Section 603 provisions of the Bipartisan Budget Act of 2015 regarding off-campus, provider-based departments (PBD) by January 1, 2017, according to the 2017 OPPS proposed rule (https://s3.amazonaws.com/public-inspection.federalregister.gov/2016-16098.pdf). The agency is proposing to pay the nonfacility or office Medicare Physician Fee Schedule (MPFS) amount to the performing/supervising physician and preclude hospitals from billing on a UB-04 form or receiving OPPS payment for services performed at these locations for 2017, but plans to explore other options for 2018 and beyond.
Physicians would be paid at the higher nonfacility rate of the MPFS, but only hospitals that have employed or contracted physicians that reassign their billing to the hospital would get paid under the MPFS for these services.
Hospitals would be able to bill claims on CMS-1500 forms for physicians who have already reassigned their billing to the hospital, as in the case of employed physicians. Otherwise, hospitals would have the option of enrolling the location as the type of provider or supplier it wishes to bill to meet the requirements of that payment system (e.g., ambulatory surgery center or group practice).
"This proposal will be very challenging for hospitals that have community physicians practice at their off-campus outpatient departments that will no longer be paid under OPPS," says Valerie Rinkle, MPA, lead regulatory specialist and instructor for HCPro, a division of BLR, in Middleton, Massachusetts.
"These physicians would bill with the office place of service code and the hospital would have to figure out how to get compensated," she says. "This will likely require hospitals to rewrite their agreements with these physicians."
