New HIPAA compliance requirements are coming!
In an effort to make the HIPAA Privacy Rule as easy to understand as possible, the Office for Civil Rights (OCR) has come up with a list of rules that clearly explain what Business Associates are now “directly liable” for. As OCR Director Roger Severino explains, “We want to make it as easy as possible for regulated entities to understand, and comply with, their obligations under the law.” The list consists of ten rules that, if failed to follow, can result in penalties and monetary fines.
[ Note: Check out our previous post to access this list ].
As we enter the fourth quarter of the year, you may be wondering what immediate requirements should a Business Associate complete before the end of the year?
One of the most important rules also includes information about Business Associates, and their need for proof of satisfactory assurance when the covered entity requests this of them. Satisfactory assurance is crucial, because it ensures the Business Associate is HIPAA compliant, and therefore, must also be in the form of a contract.
The Satisfactory Assurance contract is oftentimes outlined in the form of a questionnaire, and requires the Business Associate to disclose the date of completion for various compliance requirements.
These include distribution and completion of workforce HIPAA training, implementation and distribution of policies and procedures, Business Associate documentation, and completion of an annual HIPAA Security Risk Assessment.
Are You Prepared?:
If a Covered Entity requests this proof from your organization, would you be able to successfully complete it without outdated completion?
If you are uncertain that your organization would be able to easily and efficiently provide that documentation, you may be facing thousands of dollars in fines for each vulnerability!
HIPAA Compliance Myths:
False: The security risk analysis is optional for small providers: All providers who are “Covered Entities” under HIPAA are required to perform a risk analysis. In addition, all providers who want to receive MU, and MIPS incentive payments must conduct a risk analysis.
False: Our office uses the Cloud, so we don’t need a risk assessment: Even if you have a fully HIPAA compliant cloud vendor, your patient data (ePHI and PII) still must go through all your systems to get to the cloud. So, you are still required to perform technical, administrative, and physical security risk analyses.
False: Our EHR makes us compliant, so we’re fine: While your EHR may provide excellent privacy and security features, it definitely doesn’t exempt you from the HIPAA security requirements.
Live Compliance helps their clients meet the ever changing and complex HIPAA State and Federal regulations. They protect the information they are entrusted with, and ensure their clients pass any Health and Human Services audits. If you are unsure or need assistance, call Jim Johnson with Live Compliance at (980) 999-1585.
Live Compliance is a partner of EZClaim, a medical billing software company. For more details about their solutions, visit their website at ezclaim.com.
A group of senators introduced the “Health Care PRICE Transparency Act” in a move to empower patients to lower their healthcare costs.
On a basic level, the Act will require all medical facilities to post payer-negotiated rates for all shoppable services, so the patient can find the most inexpensive way to take care of their medical needs. This legislation will give Americans the chance to see the actual costs of their healthcare visits, which in theory, will increase competition and lower healthcare costs for everyone.
The added transparency of the Act will bring more accountability and competition to the healthcare industry, and gives American’s more control over their healthcare costs. However, if you are a medical practice, a hospital, or a member of the medical billing community, you need to know how you can best respond.
• “What is this procedure going to cost?”: There is going to be mounting pressure on practitioners, medical billers, and hospitals to have answers for the cost of procedures. Jeff Leibach, a director with Guidehouse’s healthcare strategic solutions team, says that “regardless of the legal fate of the final rule, hospitals need to be prepared for more price transparency in the future.” So, to get in front of this—and help you compete against your competitors—you should be prepared with both what it will cost for individual services and procedures, as well as, a ‘value statement’ on why it will cost what you are charging.
• Prepare to Comply or Cover the Costs: As it stands now, the legislation is moving towards technology assisting with the billing transparency. This will aid the patients to better understand the cost of services. This is a ‘clarion call’ for you to begin preparing for this reality or you will struggle with being fined and potentially publicly shamed in publications for being offenders. We recommend starting to comply NOW before the deadline ‘sneaks up’ on you.
• Use It To Improve: Currently, healthcare practices are, in many cases, already working at capacity. The added effort of defining cost and selling procedures are enough to make some healthcare facilities put this off until it is too late. Yet, while many may be considering accepting the fines and fees associated with non-compliance, we advise using this as an opportunity to improve—to better establish your medical practice’s services, and promote your ability to be proactive to change. Getting ahead of the coming ‘wave’ of consumer expectations of healthcare will be a benefit.
• Seek Out Vendors That Can Assist: The changes that are coming for individual practices and healthcare providers can be overwhelming, and potentially it might just be more than what an IT team or private practice can handle. Forward-thinking billing departments should be investing in software vendors that can help fill that gap. EZClaim is a medical billing software company that partners with Trizetto to provide a tool called, Patient Responsibility Estimation (PRE). This tool assists in clarifying costs to consumers by providing a cheap and fast way for them to pay for out-of-pocket costs. [ Click here to learn more about how EZClaim can help you ].
It is clear that the expectations of consumers are changing, and the wave of medical transparency is on its way. Accepting it, preparing for it, and using vendor software to help overcome it, can be the difference of your practice avoiding fines and fees. For those forward-thinking and proactive practices who want to learn about how EZClaim can help, e-mail one of their sales representatives, go to their website for more details, or download a FREE 30-day trial today!