On February 8, 2024, the U.S. Department of Health and Human Services (HHS) issued a final rule (Final Rule) updating federal “Part 2” regulations to more closely align the requirements applicable to substance use disorder (SUD) treatment records with the HIPAA privacy rule, and to make certain other changes. The regulations at 42

On February 28, 2022, the Office of the National Coordinator for Health Information Technology (ONC) issued data on information blocking claims received since April 5, 2021, the effective date of information blocking regulations enacted under the 21st Century Cures Act (Cures Act). As a reminder, in accordance with the Cures Act’s prohibition on certain information blocking practices, in 2020 ONC issued a pair of rules (available here and here) to implement information blocking regulations (now found at 45 CFR Part 171).  Due to COVID-related delays, ONC ultimately set a compliance date for such regulations of April 5, 2021. ONC is now sharing preliminary data on the information blocking claims received for the first time.
Continue Reading ONC Information Blocking Data Show Majority of Claims Against Health Care Providers

The Office for Civil Rights (OCR) recently announced that it has entered into the 20th settlement under its Right of Access Initiative. The settlement with Children’s Hospital and Medical Center in Nebraska includes an $80,000 payment by the hospital for failing to provide a mother with timely access to her daughter’s medical records.

According

The U.S. Department of Health and Human Services’s (HHS) Office for Civil Rights (OCR) issued an Important Notice Regarding Individuals’ Right of Access to Health Records through its email list serve on January 29, 2020.  In the Notice, OCR addressed the recent memorandum Opinion issued in Ciox Health v. Azar, et al, No. 18-cv-00040 (D.D.C. January 23, 2020).

In that case, Ciox Health, LLC, a specialized medical records provider, had challenged certain provisions of the 2013 Omnibus Rule, including provisions pertaining to what can be charged for delivering records containing protected health information (PHI). One cited issue was whether the limitations on fees for these services applied only to requests for PHI that are made by the patient, for use by the patient (the Patient Rate), or whether the limitations also applied to PHI to be delivered to third parties.
Continue Reading OCR Comments on Recent Ciox Case Vacating Certain Omnibus Rule Regulations and Guidance Relating to Fees for Providing Patient Records

Connecticut Governor Ned Lamont recently signed into law Public Act No. 19-98 “An Act Concerning The Scope Of Practice Of Advanced Practice Registered Nurses” (PA 19-98), which generally expands the scope of practice for Connecticut-licensed advanced practice registered nurses (APRNs). Among other things, PA 19-98 addresses matters related to medical records, emergency treatment, insurance coverage, and workers’ compensation, as further described below. PA 19-98 becomes effective October 1, 2019.
Continue Reading Connecticut Expands Scope of Practice for Advanced Practice Registered Nurses

On August 17, 2018, the Centers for Medicare & Medicaid Services (CMS) published its Hospital Inpatient Prospective Payment Systems final rule for Fiscal Year 2019 (Final Rule). The Final Rule contains a number of important updates to Medicare Part A that take effect October 1, 2018.

Among other provisions  in the Final Rule, CMS finalized its proposed update of the regulations that govern hospital admissions under Medicare Part A (42 C.F.R. § 412.3). Specifically, the Final Rule revises language in 42 C.F.R. § 412.3(a) to remove the current requirement that an inpatient admission order “must be present in the medical record and be supported by the physician admission and progress notes, in order for the hospital to be paid for hospital inpatient services under Medicare Part A.” As a result, starting October 1, 2018, CMS will “no longer require a written inpatient admission order to be present in the medical record as a specific condition of Medicare Part A payment.”
Continue Reading CMS Revises Hospital Inpatient Admission Order Documentation Requirements

On February 13, 2018, the HHS Office for Civil Rights (OCR) announced a $100,000 settlement with a court-appointed receiver representing Filefax, Inc. (Filefax) arising from the 2015 discovery of medical records that contained protected health information (PHI) of over two thousand individuals in a dumpster. Filefax, a now-defunct medical records moving and storage company located in Illinois, acted as a business associate under HIPAA.

OCR initiated an investigation in February, 2015, after receiving an anonymous complaint concerning medical records that had been discovered and delivered to a facility for shredding and recycling. OCR’s investigation indicated that Filefax impermissibly disclosed PHI of 2,150 individuals over a two week span in early 2015 by leaving PHI in an unlocked truck in Filefax’s parking lot, or by leaving PHI within medical records sitting outside of Filefax’s business for a third party to collect.
Continue Reading Dumpster Diving Leads to $100,000 Fine for Defunct Business Associate Due to Improper Disposal of Medical Records

On February 2, 2018, the Centers for Medicare & Medicaid Services (CMS) released Transmittal 3971 (Change Request 10412), which revises a section of the Medicare Claims Processing Manual (Manual), that provides guidance regarding billing for Evaluation and Management (E/M) services involving students.  According to CMS, the Change Request is part of a broader goal to reduce the administrative burden on practitioners.
Continue Reading CMS Announces Change to Student Documentation Requirement Intended to Reduce Burden on Teaching Physicians