Health Information Exchanges and Electronic Medical Records (EMRs)

Subscribe to Health Information Exchanges and Electronic Medical Records (EMRs) via RSS

On March 9, 2020, the Department of Health and Human Services (HHS) announced final rules seeking to give patients more access to, and control of, their health data. The final rules were issued by the Office of the National Coordinator for Health Information Technology (ONC) and Centers for Medicare and Medicaid Services (CMS). The ONC rule is available here and the CMS rule here. Both rules implement interoperability and patient access provisions from the 21st Century Cures Act and the Trump administration’s MyHealthEData initiative.
Continue Reading HHS Finalizes Joint Rules on Electronic Health Record Interoperability and Access

On January 27, 2020, the Department of Justice (DOJ) announced a $145 million settlement with Practice Fusion Inc., an electronic health records (EHR) software company that resolves parallel criminal and civil investigations involving allegations of kickbacks, false claims, and non-compliance with federal EHR program requirements. We previously discussed a preliminary settlement in this case here, and in announcing the finalizing of that settlement the DOJ has shed more light on the allegedly improper conduct at issue. According to the DOJ, this is the first criminal action ever brought against an EHR company, and the “unique” deferred prosecution agreement (DPA) imposed by the DOJ against Practice Fusion that seeks “to ensure acceptance of responsibility and transparency as to” underlying conduct may reflect a new approach to settlements with corporate health care defendants.
Continue Reading DOJ Announces Settlement with EHR Company to Resolve Criminal and Civil Kickback Investigations Tied to Opioid Prescribing

The U.S. Department of Health and Human Services’s (HHS) Office for Civil Rights (OCR) issued an Important Notice Regarding Individuals’ Right of Access to Health Records through its email list serve on January 29, 2020.  In the Notice, OCR addressed the recent memorandum Opinion issued in Ciox Health v. Azar, et al, No. 18-cv-00040 (D.D.C. January 23, 2020).

In that case, Ciox Health, LLC, a specialized medical records provider, had challenged certain provisions of the 2013 Omnibus Rule, including provisions pertaining to what can be charged for delivering records containing protected health information (PHI). One cited issue was whether the limitations on fees for these services applied only to requests for PHI that are made by the patient, for use by the patient (the Patient Rate), or whether the limitations also applied to PHI to be delivered to third parties.
Continue Reading OCR Comments on Recent Ciox Case Vacating Certain Omnibus Rule Regulations and Guidance Relating to Fees for Providing Patient Records

On October 9, 2019, the Department of Health and Human Services (HHS) released its long-awaited proposals (the Proposed Rules) to update regulatory exceptions and safe harbors, for the federal Physician Self-Referral Law (also known as the Stark Law), the Anti-Kickback Statute (AKS), and the beneficiary inducement Civil Monetary Penalties Law (CMP). The Centers for Medicare & Medicaid Services (CMS) issued a proposed rule to update exceptions to the Physician Self-Referral Law (the PSR Rule), and the HHS Office of Inspector General (OIG) issued a proposed rule to update the AKS safe harbors and expand exceptions to the CMP’s beneficiary inducements prohibition (the AKS Rule). The Proposed Rules are intended to reduce perceived regulatory barriers to beneficial health care arrangements, and to facilitate the implementation of new approaches to health care service delivery and coordination, including value-based care models.
Continue Reading Government Releases Proposed Rules on Physician Self-Referral Law (Stark Law), Anti-Kickback Statute and CMP Law; Significant Regulatory Changes Intended to Encourage Care Coordination and Value-Based Care

On August 26, 2019, the Department of Health and Human Services Substance Abuse and Mental Health Services Administration (SAMHSA) published a notice of proposed rulemaking (NPRM) to “better align” its substance use disorder (SUD) confidentiality regulations at 42 C.F.R. Part 2 (Part 2) with the needs of providers and patients, and to “facilitate the provision of well-coordinated care” for individuals with SUD.
Continue Reading Spurred by Opioid Crisis, Government Proposes Additional Changes to Substance Use Disorder Confidentiality Regulations to Facilitate Provision of Coordinated Care

In its second quarter Securities Exchange Commission (SEC) filing, Allscripts addressed its announced agreement in principle with the Department of Justice (DOJ) to resolve investigations into certain alleged practices of Practice Fusion, an electronic health records (EHR) vendor acquired by Allscripts in February 2018 for $100 million. Allscripts indicated the agreement is still subject to further negotiation and government approval, and would likely include additional non-monetary terms, including a deferred prosecution agreement, if a finalized settlement is reached.
Continue Reading Allscripts Announces $145 Million Preliminary Settlement with DOJ Related to an Investigation of Practice Fusion, a Recently Acquired EHR Company

On July 30, 2019, the Centers for Medicare & Medicaid Services (CMS) announced “Data at the Point of Care” (DPC), a pilot program that will provide clinicians with access to claims data. The pilot program follows on the heels of the recently proposed Interoperability and Patient Access Proposed Rule, which would require regulated health plans to make patient data available through an application programming interface (API). These actions are also part of the MyHealthEData initiative spearheaded by the White House Office of American Innovation.
Continue Reading CMS Announces Pilot Program for Clinicians to View Claims Data of Medicare Beneficiaries

On June 13, 2019, the U.S. Court of Appeals for the Eighth Circuit affirmed a preliminary injunction granted to the Federal Trade Commission (FTC) and North Dakota Attorney General (NDAG) blocking the proposed acquisition of Mid-Dakota Clinic, P.C. (MDC) – a multispecialty physician group in North Dakota – by Sanford Health, a large South Dakota-based health system (Sanford). This decision may foreclose continued pursuit of MDC by Sanford, and represents another success for the FTC in challenging health care consolidation (see our previous analysis of the granting of the injunction here, and of the FTC’s intervention here).
Continue Reading Eighth Circuit Affirms Preliminary Injunction Blocking Physician Practice Acquisition in North Dakota

In a development that may – understandably – have been overlooked by many heading into Memorial Day weekend, on May 24, 2019, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) issued a Fact Sheet on Direct Liability of Business Associates under the Health Insurance Portability and Accountability Act (HIPAA).

The Fact Sheet provides an important reminder to covered entities, business associates, and their counselors regarding the circumstances in which OCR may – and may not – take enforcement actions directly against business associates for violations of HIPAA regulations. In the Fact Sheet, OCR explains that in 2009 the Health Information Technology for Economic and Clinical Health (HITECH) Act made business associates “directly liable for compliance with certain requirements” under HIPAA’s regulations, as addressed by OCR in its 2013 Omnibus Rule.Continue Reading OCR Issues Fact Sheet Listing Circumstances in which Business Associates May Face Direct Liability for HIPAA Violations

The Department of Justice (DOJ) recently announced two high-dollar False Claims Act (FCA) enforcement actions involving allegedly fraudulent arrangements tied to the implementation and use of electronic health record systems (EHRs). The respective settlements enable recovery by DOJ of over $100 million, and immediately precede the government’s recent proposal of new rules to promote the interoperability of EHRs. The settlements thus serve as an important reminder of the importance of adhering to federal fraud and abuse laws and regulations as hospitals and other health care providers continue to implement EHR technology.
Continue Reading Department of Justice Announces Significant False Claims Act Settlements Tied to Electronic Health Records Arrangements