Much of today's healthcare industry is reliant on third-party vendors. If you haven't asked your vendors whether they are compliant with HIPAA and have implemented sound information privacy and security programs, you are likely facing unknown?and possibly significant?risks. Covered entities (CE) and business associates (BA) are required by HIPAA to exercise due diligence when it comes to their BAs and BA subcontractors. Assessing the risk of those vendors is necessary, especially if those vendors support critical functions in support of CE operations.
HIPAA breaches haven't become less common. If the law was, in part, meant to reduce the amount of PHI released to unauthorized individuals, some may say its success is uncertain. HIPAA's requirements aren't prohibitively stringent: they provide a basic floor of privacy and security. If a covered entity (CE) or business associate (BA) does no more than comply with HIPAA, it will simply be doing the bare minimum to safeguard PHI. Although that may not sound difficult, some organizations continue to fall short and leave others wondering if HIPAA is enough to meet today's information security and privacy challenges.
Orders for services are a vital component of ensuring Medicare coverage. With the advent of computerized provider order entry (CPOE), it is important to review order templates in the electronic medical record (EMR) and the resulting order produced or printed in the formal legal medical record to ensure the templates meet requirements.
With only 60 days between the OPPS final rule's release and the January 1 implementation date, providers will be ahead of the curve by spending time now and thinking about the processes they may need to review, change, or implement based on what CMS finalizes and the sort of financial impact the final rule is likely to have.
Just like the lyrics to the popular Gap Band song say, "You dropped a bomb on me… I won't forget it," there are definitely some changes in the 2017 ICD-10-CM Official Guidelines for Coding and Reporting that some of us may wish the Cooperating Parties will forget were ever mentioned.
