May 18, 2010. Dear Director Verdugo,

Similar documents
Establishment of a Temporary and Permanent Testing Program

March 15, Dear Dr. Blumenthal:

May 7, Submitted Electronically

RE: HIPAA Privacy Rule Accounting for Disclosures, RIN 0991-AB62

APTA and Meaningful Use of HIT

May 18, Georgina Verdugo Director Office for Civil Rights United States Department of Health and Human Services

VIA ELCTRONIC March 15, 2010

March 15, Dear Ms. Frizzera,

October 22, CFR PARTS 160 and 164

HEALTH IT! LAW & INDUSTRY

May 7, Dear Dr. Mostashari:

Data Breach, Electronic Health Records and Healthcare Reform

Frequently Asked Questions About the Privacy Rule Under HIPAA

HIPAA Considerations for Small Non-Profits. Jill M. Girardeau July 20, 2011

August 1, HIPAA Privacy Rule Accounting of Disclosures 45CFR164; RIN0991-AB62

Re: Comments on Proposed Establishment of Certification Programs for Health Information Technology (Health IT); Proposed Rule

Health Record Banking Alliance

May 7, Re: RIN 0991-AB82. Dear Secretary Sebelius:

RE: Proposed Establishment of Certification Programs for Health Information Technology Permanent Certification Program, RIN 0991-AB59

RE: CMS-0033-P, Medicare and Medicaid Programs; Electronic Health Record Incentive Program; Proposed Rule (Vol. 75, No. 8), January 13, 2010

REPRODUCTIVE ASSOCIATES OF DELAWARE (RAD) NOTICE OF PRIVACY PRACTICES PLEASE REVIEW IT CAREFULLY.

February 5, Submitted Electronically

May 26, Dear Acting Administrator Slavitt:

RE: File Code CMS-1345-NC2 Medicare Program Waiver Designs in Connection with the Medicare Shared Savings Program and Innovation Center

To: From: Date: Subject: Proposed Rule on Meaningful Use Requirements Stage 2 Measures, Payment Penalties, Hardship Exceptions and Appeals

Welcome. This presentation focuses on Business Associates under the Omnibus Rule of 2013.

May 28, Dear Mr. Slavitt:

RE: Medicare and Medicaid Programs; Electronic Health Record Incentive Program Stage 2 Notice of Proposed Rulemaking (CMS-0044-P)

Re: CMS 3323 NC, Request for Information (RFI): Certification Frequency and Requirements for the Reporting of Quality Measures Under CMS Programs

SDC-League Health Fund

Re: Interim Final Rules Relating to Internal Claims and Appeals and External Review Processes (RIN-0991-AB70)

What Virginia s Free Clinics Need to Know About HIPAA and HITECH

ELECTRONIC HEALTH RECORDS. Nonfederal Efforts to Help Achieve Health Information Interoperability

Resthave Home of Whiteside County, Illinois Resthave Nursing Home Resthave Home Assisted Living. Notice of Privacy Practices

Medical Billing and EHR Implementation

REGULATORY CHANGES DEMAND AN ENTERPRISE-WIDE APPROACH TO DISCLOSURE MANAGEMENT OF PHI

CMS-0033-P; Medicare & Medicaid Programs; Electronic Health Record Incentive Program Proposed Rule

Will the Feds Really Buy Me an EHR?

CMS AND ONC FINAL REGULATIONS DEFINE MEANINGFUL USE AND SET STANDARDS FOR ELECTRONIC HEALTH RECORD INCENTIVE PROGRAM

Answering to HIPAA. Who Answers Your Phone? Prepared by Kenneth E. Rhea, MD, FASHRM. Brought to you by.

April 3, Submitted Electronically Via Federal Rulemaking Portal:

Client Alert. CMS Releases Proposed Rule On Meaningful Use Of Electronic Health Record Technology

9525 Katy Freeway, Suite 312 Houston, Texas Phone (713) Fax (713) Welcome Friend!

April 3, Re: Request for Comment: ONC Interoperability Roadmap. Dear Dr. DeSalvo:

Welcome to the Privacy and Security PowerPoint presentation in the Data Analytics Toolkit. This presentation will provide introductory information

Summary of the Proposed Rule for the Medicare and Medicaid Electronic Health Records (EHR) Incentive Program (Eligible Professionals only)

What Health Care Entities Need to Know about HIPAA and the American Recovery and Reinvestment Act

Business Associates under HITECH: A Chain of Trust

THE STATE OF HEALTHCARE COMPLIANCE: Keeping up with HIPAA, Advancements in EHR & Additional Regulations

COMPLIANCE ALERT 10-12

Entities Covered by the HIPAA Privacy Rule

Signed into law on February 17, 2009, the Stimulus Package known

Business Associate Management Methodology

White Paper THE HIPAA FINAL OMNIBUS RULE: NEW CHANGES IMPACTING BUSINESS ASSOCIATES

April 22, Re: Advancing Interoperability and Health Information Exchange. Dear Dr. Mostashari,

HIPAA PRIVACY AND SECURITY AWARENESS

June 6, Proposed Rule: Medicare Program; Medicare Shared Savings Program: Accountable Care Organizations

Patti Levin, LICSW, Psy.D. Clinical Psychologist

HIPAA and HITECH Compliance for Cloud Applications

How To Fix An Electronic Medical Record

Office Policies Dear Patient: We would like to take the opportunity to explain the policies of our office. Please take notice of the following:

The Proposed Rule of Electronic Health Certification (EHSRT)

HEALTHCARE IN THE CLOUD

29 OIG 2014 Work Plan explores new compliance projects: Part 2. Nathaniel Lacktman

Implications of HIPAA Requirements on Healthcare Payment Processing

HIPAA Notice of Privacy Practices HAND & MICROSURGERY ASSOCIATES, INC.

The undersigned provider groups would like to draw your attention to implementation concerns regarding two administrative simplification issues:

Meaningful Use, ICD-10 and HIPAA 5010 Overview, talking points and FAQs

HIPAA Privacy Rule Policies

The Meaningful Use Stage 2 Final Rule: Overview and Outlook

AGREEMENT BETWEEN WEB-BROKERS AND THE CENTERS FOR MEDICARE & MEDICAID SERVICES ( CMS )

The basics of Health Information Technology

NEW PERSPECTIVES. Professional Fee Coding Audit: The Basics. Learn how to do these invaluable audits page 16

Sunday March 30, 2014, 9am noon HCCA Conference, San Diego

Understanding the HIPAA standard transactions: The HIPAA Transactions and Code Set rule

Meaningful Use and Security Risk Analysis

Health Care Information Privacy The HIPAA Regulations What Has Changed and What You Need to Know

UNIVERSITY PHYSICIANS OF BROOKLYN, INC. POLICY AND PROCEDURE. No: Supersedes Date: Distribution: Issued by:

Executive Memorandum No. 27

Dissecting New HIPAA Rules and What Compliance Means For You


Meaningful Use: Terms & Timelines, Changes to Stage 1, and Stage 2 Overview

How to select a practice management system

Increase Participation Through Partial Incentives

The HITECH Act: Implications to HIPAA Covered Entities and Business Associates. Linn F. Freedman, Esq.

GE Healthcare Healthcare IT

HHS Issues New HITECH/HIPAA Rule: Implications for Hospice Providers

ICD-10 Frequently Asked Questions

Am I a Business Associate?

Is your practice prepared for ICD-9 to ICD-10 Transition?

Meaningful Reporting From the EHR

Meaningful Use Audits. NextGen Physician Consulting Services

CMA BUSINESS ASSOCIATE AGREEMENT WITH CMA MEMBERS

Understanding Health Insurance Portability Accountability Act AND HITECH. HIPAA s Privacy Rule

Enclosure. Dear Vendor,

May 26, Attention: RIN 0991-AB93 Submitted electronically to: Dear Dr. DeSalvo:

RE: CMS 0033 P; Comments to Meaningful Use Notice of Proposed Rulemaking

ELECTRONIC HEALTH RECORDS

Stark and Anti-kickback Regulations: Proposed Changes for E-prescribing and Electronic Health Records

April 3, Dear Dr. DeSalvo:

Transcription:

May 18, 2010 Director Georgina Verdugo U.S. Department of Health and Human Services, Office for Civil Rights Attention: HITECH Accounting of Disclosures Hubert H. Humphrey Building, Room 509F 200 Independence Avenue, SW Washington, DC 20201 Dear Director Verdugo, On behalf of the 74,000 members of the American Physical Therapy Association (APTA), I would like to thank you for the opportunity to respond to the request for information related to the accounting for disclosures for treatment, payment, and health care operations made through electronic health records (EHRs) as published in the Federal Register on May 3, 2010. APTA is a professional association representing physical therapists, physical therapist assistants, and students of physical therapy. As covered entities and users of EHRs, physical therapists will be significantly impacted by any requirement for an accounting of disclosures made via an EHR. Of particular concern is the administrative burden that would be placed on healthcare providers, such as physical therapists, to maintain an accounting of disclosures made for the purposes of treatment, payment, and health care operations. The extent of this burden will be largely determined by how any regulations implementing a requirement for an accounting of disclosures for treatment, payment, and health care operations define these terms. For instance, if disclosures for treatment purposes include activities such as obtaining a required referral or certification of a plan of care, this type of accounting may not prove to be extensively burdensome. However, if disclosure for treatment purposes includes informal discussions between providers regarding a patient s care, this could prove tremendously burdensome. For example, if a physical therapist treating a patient with a traumatic brain injury informally discusses with a fellow physical therapist who works in the same practice setting, the patient s characteristics, treatment plan, and initial outcomes of the treatment in order to better meet the patient s need, will this be a form of disclosure the physical therapist will be required to include in an accounting? Consider the number of such informal discussions which may occur on a daily basis. The regulatory process that first implemented the provisions of the Health Insurance Portability and Accountability Act (HIPAA) recognized the potentially significant administrative burden of accounting for disclosures for these three purposes and it was ultimately determined that it would be extremely burdensome for providers to manage such an accounting system. The burdens associated with accounting for disclosures made for treatment, payment, and healthcare operations are not self-imposed by the healthcare provider or, perhaps more importantly, uniform. Rather these obligations are imposed as a condition of payment established by the payer or state law. The variations in the conditions for payment can therefore lead to a variation in the need to account for disclosures based on payer or applicable laws. As a result, the burden is not only in

maintaining an accounting and the development of a mechanism to do so but the maintenance of effort to ensure that the accounting takes into consideration the requirements of a particular payer or law. For example, Medicare requires as a condition of payment for physical therapy services provided under the Part B benefit that a physical therapist obtain the certification of the physician for the plan of care developed by the physical therapist that maps the patient s course of treatment over the episode of care. Because this is a disclosure made for treatment purposes, this would likely be a disclosure for which an accounting must be made. However, a private insurer might not require the certification of the plan of care by a physician as a condition for payment. A variation in state law also raises concerns about the accounting of disclosure requirements. Some states require a referral from a physician for physical therapy services. If a physical therapist practices in two states, it could require accounting for the disclosure associated with a referral for the state which requires the referral while this same accounting for disclosure would not be required for the state in which a referral was not a requirement of law. Also important to consider is the burden of maintaining an accounting of each time a physical therapist submits a claim, or documentation to support the submission of the claim, for a particular patient. In many instances a physical therapist in an outpatient setting provides services to a patient multiple times a week as part of an established plan of care. This could require an audit log which captures payment and treatment disclosures multiple times per week per patient. If, through the regulatory process, the definitions of treatment, payment, and health care operations is so broad, and the subsequent administrative burden is highly increased, it could undermine the significant efforts the federal government has undertaken to encourage the adoption and use of EHRs. If providers will be required to account for these types of disclosures via an EHR but not via a paper record, they may very well elect to walk away from an EHR to avoid the administrative burden. This further speaks to the need for a delicate balance and careful consideration of how these terms will be defined and under what circumstances an accounting of disclosures for these reasons will be required. For physical therapy patients, an accounting of disclosures for one episode of care could be lengthy and confusing. For instance, consider a patient who is eligible for both Medicare and Medicaid. If a patient is seen by a physical therapist three times a week for six weeks, there could be at least 18 disclosures related to payment. Then consider the need for the certification of the plan of care, communication with the physician related to the ordering of related services or items such as power mobility equipment, and the disclosures currently required under HIPAA. It is not clear if this amount of information could truly benefit the patient. Again, determining under what circumstances an accounting of disclosures for treatment, payment, and healthcare operations is crucial to ensuring the information collected is meaningful and useful. 2

We would also like to address specific questions related to the request for information. 1. What are the benefits to the individual of an accounting of disclosures, particularly of disclosures made for treatment, payment, and health care operations purposes? While the sheer volume of information might be confusing or overwhelming to the patient, there are instances in which having access to an accounting of disclosures made for treatment, payment, or healthcare operations could be beneficial. For example, a patient may discover that in the course of collaboration between healthcare providers related to his or her care that incorrect information related to allergies or blood type was disclosed. Obviously, correction of this information is crucial in an effort to reduce medical errors and improve patient health outcomes. 5. With respect to treatment, payment, and health care operations disclosures, 45 CFR 170.210(e) currently provides the standard that an electronic health record system record the date, time, patient identification, user identification, and a description of the disclosure. In response to its interim final rule, the Office of the National Coordinator for Health Information Technology received comments on this standard and the corresponding certification criterion suggesting that the standard also include to whom a disclosure was made (i.e., recipient) and the reason or purpose for the disclosure. Should an accounting for treatment, payment, and health care operations disclosures include these or other elements and, if so, why? How important is it to individuals to know the specific purpose of a disclosure i.e., would it be sufficient to describethe purpose generally (e.g., for for treatment, for payment, or for health care operations purposes ), or is more detail necessary for the accounting to be of value? To what extent are individuals familiar with the different activities that may constitute health care operations? On what do you base this assessment? We agree that many of the elements listed above are an important part of the accounting for disclosure. Elements such as time, date, patient identification, user identification, a description of the disclosure, and to whom the disclosure was made would be helpful. However, a detailed description of the purpose of the disclosure could prove burdensome for the provider and an appropriate balance between patient needs and provider burden needs to be found. Perhaps the accounting could provide that further details as to the purpose of the disclosure will be made upon request by the patient. 6. For existing electronic health record systems: a) Is the system able to distinguish between uses and disclosures as those terms are defined under the HIPAA Privacy Rule? Note that the term disclosure includes the sharing of information between a hospital and physicians who are on the hospital s medical staff but who are not members of its workforce. 3

The ability to distinguish between a use and a disclosure would depend on the sophistication of the EHR and if the communication function is part of the software. For example, some EHR products track who performed activities, such as accessing information for payment purposes, and when (e.g. date, time). However if the individual disclosing the information prints a report and faxes it to another healthcare professional s office that might not be collected in the EHR. Depending on the capabilities of the EHR, a provider might be required to upgrade or replace the EHR product currently in use leading to additional financial and administrative costs. (c) If the system is able to distinguish between uses and disclosures of information, what data elements are automatically collected by the system for disclosures (i.e., collected without requiring any additional manual input by the person making the disclosure)? What information, if any, is manually entered by the person making the disclosure? The ability of an EHR product to distinguish between uses and disclosures would depend on a few factors. First, as mentioned above, how much of the process is incorporated into the software and under what circumstances is it recorded. For instance, if the information is used for claims submission it might be captured but if a record is printed and faxed, this type of disclosure or use might not be captured. The capability of the EHR product really helps to define cost and practicality. Second, if the program allows for storing specific user elements that would be required (we would want to know this early to provide vender the opportunity to add the data fields to be collected.) The end user would have to take the upfront time to set up the profile for each person that they would send information. 7. The HITECH Act provides that a covered entity that has acquired an electronic health record after January 1, 2009 must comply with the new accounting requirement beginning January 1, 2011 (or anytime after that date when it acquires an electronic health record), unless we extend this compliance deadline to no later than 2013. Will covered entities be able to begin accounting for disclosures through an electronic health record to carry out treatment, payment, and health care operations by January 1, 2011? If not, how much time would it take vendors of electronic health record systems to design and implement such a feature? Once such a feature is available, how much time would it take for a covered entity to install an updated electronic health record system with this feature? APTA is concerned that it might not be possible for this requirement to be met by 2011. We request that HHS consider extending this deadline. I would like to thank you again for the opportunity to submit these comments. We look forward to working with you as the regulations implementing the provisions of the Health Information for Economic and Clinical Health (HITECH) Act related to the accounting of 4

disclosures made via an EHR are developed. If you have any questions, please feel free to contact Sarah Nicholls at 703-706-3189 or sarahnicholls@apta.org. Sincerely, R. Scott Ward, PT, PhD President RSW: sn 5