News & Analysis

July 6, 2016
Medicare Insider

This week’s updates include new waived tests; appeals of claims decisions, revisions to timeliness requirements for forwarding misfiled appeal requests, reconsideration request form, and guidelines for writing appeals correspondence; and more! 

July 6, 2016
Medicare Insider

The following is an excerpt from Inpatient-Only Procedures Training Handbook, written by Debbie Mackaman, RHIA, CPCO, CCDS. For more information and to purchase, visit the HCPro Marketplace.

July 6, 2016
News & Insights

Q: Have any new procedure codes been implemented for July?

July 1, 2016
Briefings on HIPAA

Tips from this month's issue.

July 1, 2016
Case Management Monthly

Discharge planning has become more important in recent years. Not only is the government putting new focus on ensuring hospitals are helping patients to move to the next level of care more efficiently, but research shows that patients are safer and less likely to return to the hospital if these transitions are well managed.

July 1, 2016
Briefings on HIPAA

HIPAA audits

Phase 2 audit protocol

As Phase 2 of the HIPAA audit program begins, covered entities (CE) and business associates (BA) will be watching their email for an audit letter from OCR. Of those chosen for audit, most will be selected for a desk audit. They'll have 10 days after receipt of the email to gather requested documents for OCR's auditors.

But how will CEs and BAs know they are collecting the right information? A careful reading of the updated Phase 2 audit protocol (www.hhs.gov/hipaa/for-professionals/compliance-enforcement/audit/protocol/index.html) will help guide CEs and BAs. But if the protocol isn't read carefully, and in full, important documents could easily be left out, leading to inaccurate audit reports and even a visit from OCR's investigators.

The Phase 2 audit protocol expands the Phase 1 compliance areas to reflect changes made by the 2013 HIPAA omnibus final rule. The updated audit protocol also includes information for BAs, which were not audited during Phase 1 but will be in the current round of audits. The protocol contains a description of the audit areas, general instructions and definitions, and a keyword-searchable table.

Phase 2 audits will be conducted in three rounds. The first two rounds will consist of desk audits of specific audit targets, while the third round will be comprehensive audits. Round one audits will target CEs and round two audits will target BAs.

Round one CE audit targets will target:

  • Security: risk analysis and risk management
  • Breach: content and timeliness of notifications
  • Privacy: notice and access

 

The round two BA audits will target:

  • Security: risk analysis and risk management
  • Breach: breach reporting to covered entities

 

Pages