Abstract:The Privacy Rule: Limits the use and disclosure of PHI to purposes of treatment, payment, or routine health care operations. Requires covered entities to provide advance notice to the public of its policy governing disclosure of PHI. Requires entities covered by the Standard to secure general client consent to use and to disclose PHI for treatment, payment, or routine health care operations and to obtain specific client authorization to use or to disclose PHI for all other purposes unless the disclosure is specifically permitted without consent or authorization (e.g., a covered entity may disclose PHI to a health care oversight agency such as the Office of the Inspector General without first obtaining client authorization). In certain situations, a covered entity need only obtain client agreement to disclose PHI which may be oral or inferred from the circumstances surrounding the disclosure. For example, a covered entity could disclose PHI to a relative caring for the individual who is the subject of the health information. Expects covered entities to take measures to protect PHI from both inadvertent and deliberate misuse and disclosure. Requires, except in certain circumstances, the amount of PHI disclosed on any occasion to be limited to the minimum necessary to achieve the purpose of the disclosure. Gives individuals more control of their health information by permitting them to review and amend health information pertaining to themselves and to demand an accounting of persons to whom their health information has been disclosed. Establishes terms under which a covered entity may disclose PHI to a business associate. Permits states to maintain state laws that are more stringent than the Privacy Rule. The statute provides for significant civil and criminal penalties for failure to comply with the Standards. Violations are punishable by fines as much as $250,000 and 10 years imprisonment. The HHS, Office of Civil Rights is charged with enforcing the Standards. The HHS is expected to issue a single Enforcement Rule applicable to all three of the HIPAA Administrative Simplification Standards. Many worksite records will not be protected under the HIPAA Privacy Rule because employers are not covered entities and few occupational health professionals meet the criteria of being considered a covered entity. Nevertheless, occupational health professionals need to be knowledgeable about the application of HIPAA in the occupational health care setting. Furthermore, given that the Rule does not preempt state privacy laws that are more stringent than the Standards, occupational health professionals should monitor legislative activity related to privacy in the states in which they practice. To date, Oregon, Texas, and New Jersey have broadened HIPAA's definitions to create more covered entities and services.

Medicare and state health care programs: fraud and abuse; clarification of the initial OIG safe harbor provisions and establishment of additional safe harbor provisions under the anti-kickback statute. Office of Inspector General (OIG), HHS. Final rule

Health care programs: fraud and abuse; revised OIG civil money penalties resulting from public law 104-191. Office of Inspector General (OIG), HHS. Final rule

Medicare, Medicaid, and Maternal and Child Health Services Block Grant programs; civil money penalties and assessments for false or improper claims--Department of Health and Human Services. Notice of proposed rulemaking

Consolidated billing and compliance program--Part 2

Medicaid program; imposition of cost sharing charges under Medicaid--Health Care Financing Administration. Final rule with comment period

Recent hospital charity care controversies highlight ambiguities and outdated features of government regulations

Hanlester Laboratories decision: how is it affected by new sanctions and penalties regulations?

Radiology quick cash? Kickbacks, compliance, and consequences

Don't let your revenue be part of the $4.9 billion returned to taxpayers!

Medicare Program; Prospective Payment System and Consolidated Billing for Skilled Nursing Facilities (SNFs) for FY 2016, SNF Value-Based Purchasing Program, SNF Quality Reporting Program, and Staffing Data Collection. Final Rule

Kickbacks, courtesies or cost-effectiveness?: Application of the Medicare antikickback Law to the marketing and promotional practices of drug and medical device manufacturers

Unraveling Medicare and Medicaid Prescription Drug Fraud and Abuse

Solicitation of comments on the OIG/HCFA Special Advisory Bulletin on the patient anti-dumping statute--OIG and HCFA. Notice of proposed special advisory bulletin

National Practitioner Data Bank for Adverse Information on Physicians and Other Health Care Practitioners: reporting on adverse and negative actions. Final rule

Medicare program; electronic submission of cost reports. Final rule

Complying with the Health Insurance Portability and Accountability Act. Privacy standards

Third-party biller compliance guidance emphasizes risk awareness

Administrative simplification: adoption of operating rules for health care electronic funds transfers (EFT) and remittance advice transactions. Interim final rule with comment period

CMS gives the RA program a makeover with more changes in store