Category Archives: Health Information

April 24, 2020

More Provider Relief Funds On the Way: Beware Updated Terms and Conditions

By Kim Stanger

On April 22, 2020, HHS announced specifics concerning the next round of the $100 billion Provider Relief Fund payments, some of which should reach provider bank accounts today. https://www.hhs.gov/coronavirus/cares-act-provider-relief-fund/index.html. As with the initial $30 billion, the additional payments come with more strings attached.

Additional Payments.

1. General allocation. An additional $20 billion will go to providers who rendered diagnoses, testing or care of individuals with possible or actual cases of COVID-19 after January 31, 2020, including such providers who were largely left out of the initial $30 billion disbursement. The initial $30 billion was allocated based on the providers’ 2019 Medicare fee for services payments. The next $20 billion will also reach providers who receive only a small amount of Medicare revenue, e.g., children’s hospitals. The $20 billion will be allocated so that the combined $50 billion in payments reflects the providers’ 2018 net patient revenue.

Continue reading

March 31, 2020

CMS Expands Blanket Waivers to Help Hospitals and Other Providers

By Kim Stanger

On March 30, 2020, CMS issued numerous additional blanket waivers to give providers greater flexibility in responding to COVID-19. (See https://www.cms.gov/files/document/summary-covid-19-emergency-declaration-waivers.pdf). Highlights include the following, but providers should review the entire list of waivers to confirm their scope and conditions. Many of the waivers only apply to the extent consistent with the state emergency preparedness or pandemic plan and/or state law. Continue reading

May 29, 2019

Liability of Business Associates for HIPAA Penalties

The HITECH Act extended certain HIPAA obligations to business associates, including those entities that create, receive, maintain or transmit protected health information (“PHI”) on behalf of covered entities. Business associates who fail to comply with their HIPAA obligations may be directly liable for HIPAA penalties ranging from $114 to $57,0511 per violation.

Continue reading

October 10, 2018

Producing Records of Other Providers

by Kim Stanger

There is a common misunderstanding that healthcare providers may not or should not produce medical records that were created by another healthcare provider.

Under HIPAA, patients have a right to access all records that a provider maintains in a designated record set, i.e., documents the provider uses to make decisions about a patient’s healthcare or payment for healthcare. (45 CFR 164.524). This would generally include records the provider obtains or receives from other providers relating to the patient’s care. Thus, providers generally must produce such records in response to the patient’s request; failure to do so would violate HIPAA. The OCR published the following FAQ relevant to this issue:

A provider might have a patient’s medical record that contains older portions of a medical record that were created by another previous provider. Will the HIPAA Privacy Rule permit a provider who is a covered entity to disclose a complete medical record even though portions of the record were created by other providers?

Answer: Yes, the Privacy Rule permits a provider who is a covered entity to disclose a complete medical record including portions that were created by another provider, assuming that the disclosure is for a purpose permitted by the Privacy Rule, such as treatment. Continue reading

October 10, 2016

Office of the National Coordinator for Health Information Technology Issues Formal Guidance for Selecting and Negotiating Contracts with Electronic Health Record Vendors

by Teresa Locke, Holland & Hart LLP

On September 26, 2016, the U.S. Department of Health and Human Services’ (HHS) Office of the National Coordinator for Health Information Technology (ONC) released a practical and straightforward tool to assist health care providers as they select and negotiate the acquisition of an electronic health record system (EHR). The document’s title accurately encapsulates the content of the 53-page guide: “EHR Contracts Untangled: Selecting Wisely, Negotiating Terms, and Understanding the Fine Print.” The guide can be found at https://www.healthit.gov/sites/default/files/EHR_Contracts_Untangled.pdf. The new contract guide explains important concepts in EHR contracts and includes example contract language to help providers and health administrators in planning to acquire an EHR system and negotiating contract terms with vendors. Continue reading