Photo of Nicole Aiken-Shaban

In a final rule published on April 26, the U.S. Department of Health and Human Services (“HHS”) amends the HIPAA Privacy Rule to bolster protections for individuals’ reproductive health information. This final rule comes almost exactly a year after HHS published its draft rule on the subject.

The rule is part of the Biden administration’s effort to address the Supreme Court’s 2022 decision in Dobbs v. Jackson Women’s Health Organization. Dobbs’ reversal of Roe v. Wade resulted in a patchwork of state laws governing abortion, some of which require or permit health care providers to release personal information about reproductive health care to state authorities for patients who sought an abortion.

The rule is scheduled to take effect on June 25, 2024 and most provisions will be enforceable as of December 23, 2024. Below, we summarize in more detail some of the notable changes to the HIPAA Privacy Rule. Continue Reading HHS Modifies HIPAA Privacy Rule to Shield Reproductive Health Information from Third Party Access

Making good on its promises to enhance oversight of Medicare Advantage (MA) and Medicare Part D plans, the Centers for Medicare and Medicaid Services (CMS) has submitted for public inspection its Contract Year 2025 Final Rule. The final rule, published in the Federal Register on April 23 and taking effect on June 3, 2024, codifies existing MA and Part D sub-regulatory guidance, adds a number of new policies for Contract Year 2025 and implements provisions of the Bipartisan Budget Act of 2018 (BBA) and the Consolidated Appropriations Act, 2023 (CAA 2023).

The rule contains many substantive changes to current MA and Part D requirements. The most impactful sections of the rule include: (1) changes to the Part D formulary, including substitutions of biosimilar biological products; (2) modification of agent and broker compensation requirements for MA plans; (3) codification of consent requirements within the MA regulations for the sharing of personal beneficiary data between third party marketing organizations (TPMOs); (4) standardization of the MA Risk Adjustment Data Validation Appeals Process; (5) changes to the Part D medication therapy management program eligibility criteria; (6) changes to contracting standards and limitations on dual-eligible special needs plans; and (7) changes to the network adequacy standards within MA to add a new facility-specialty type called “Outpatient Behavioral Health”.

Also notable is what CMS does not address in the rule – CMS declined to establish what qualifies as an identification of an overpayment that needs to be returned to avoid False Claims Act violations. That potential standard has been in the works since the Contract Year 2023 rule, but stakeholders have to keep waiting as CMS notes that it may be the subject of a future rulemaking.Continue Reading Are you listening, Medicare Advantage and Medicare Part D Plans? It’s CMS (Again)

Last week, on April 18, several federal agencies jointly launched a “one-stop shop” to facilitate reporting of allegedly anticompetitive behavior in the health care sector. While there has always been a complaint portal for the antitrust agencies, the Federal Trade Commission (FTC), the U.S. Department of Health and Human Services (HHS), and the Antitrust Division

The Federal Trade Commission (FTC), the Department of Justice’s Antitrust Division, and the U.S. Department of Health and Human Services jointly announced a cross-government inquiry into the impact of private equity investment and other forms of “corporate greed” in the health care sector. As part of the announcement of this effort, the agencies produced a

Building on prior requests for information and an increased focus on Medicare Advantage oversight, the Centers for Medicare and Medicaid Services (CMS) has issued another request for information (RFI) seeking input on data needed for Medicare Part C, also known as the Medicare Advantage (MA) program. The goal of this RFI, which was published in the Federal Register on January 30, 2024, is to provide CMS with feedback on both the format and types of data that will allow CMS to have better insight into MA organizations and their operations and to consider future rulemaking. Responses to the RFI are due by May 29, 2024.

This RFI is an extension of CMS’s General MA RFI published in August 2022, which generated over 4,000 responses from various stakeholders. The 2024 RFI broadly seeks input on “all aspects of data related to the MA program—both data not currently collected as well as data currently collected.” The eventual goal is to make MA data commensurate with data available from Medicare Parts A and B to ensure appropriate transparency into MA organizations and to address perceived shortcomings through additional rulemaking.Continue Reading CMS Issues RFI for Medicare Advantage Data

The Department of Health and Human Services Office of the National Coordinator for Health Information Technology (ONC) has published its first final rule on Health Data, Technology and Interoperability. The rule, known as the HTI-1 rule, takes effect on February 8, and governs updates to the ONC’s Health IT Certification Program, as well as regulations on information blocking.

Among the program criteria that the rule addresses include those related to decision support, electronic case reporting and standards-based application programming interfaces (APIs). To address the question of information blocking, the rule provides refined definitions of statutory terms and identifies practices that cannot constitute information blocking as they are considered by ONC to be “reasonable and necessary.”Continue Reading ONC Finalizes Information Sharing and Algorithm Transparency Rule

The Department of Health and Human Services Office of Inspector General (OIG) kicked off the new year with four new advisory opinions covering retiring physicians, preferred hospital organization discounts for Medigap patients, and gift cards for the referral of potential physician practice customers of a non-clinical consulting company. While OIG published the favorable opinions last week, it issued them on December 28, 2023 to cap off a busy 2023 season.

Two opinions, Opinion 23-13 and Opinion 23-14, are substantially similar to each other and to two other opinions  issued earlier in the year (Opinion 23-09 and Opinion 23-10). All four opinions approve the use of discounts by a preferred hospital organization (PHO) within a “preferred hospital” network as part of Medicare Supplemental Health Insurance (Medigap) policies.

Specifically, the opinions approved of an insurance company contracting with the PHO to provide discounts on the otherwise-applicable Medicare inpatient deductibles for its policyholders and, in turn, the insurer providing a premium credit of $100 off the next renewal premium to those policyholders who used a network hospital for an inpatient stay. This flurry of PHO Medigap discount opinions likely reflects the fact that an OIG advisory opinion is binding only on its requestor, leading different PHOs to seek approval for the same proposal.

The other two opinions include Opinion 23-12, a favorable review of a one-time, voluntary redemption offer to physician partners reaching age 67 to have their partnership units repurchased by a partnership over a 2-year period, contingent upon the physician partners’ agreement to retire from the practice of medicine,  and Opinion 23-15, a favorable review of a consulting company’s gift card offer to physician practices for the referral of potential new customers.Continue Reading OIG Publishes First Advisory Opinions of the Year

As promised back in April in an announcement of its plans to modernize compliance program guidance, the Department of Health and Human Services Office of Inspector General (OIG) issued the first of its new guidance documents for the health care industry on November 6, 2023. The first release is a general compliance program guidance (GCPG) designed to serve as a resource to all segments of the health care industry, regardless of the particular items or services offered.

In its newest release, OIG reiterates its view that the GCPG is by its very nature a voluntary guidebook that can act as a roadmap for a compliance program to follow, but that it is not binding on any individual or entity in the health care industry. This updated GCPG includes the following information for health care compliance programs, which we summarize further below: (1) key Federal authorities for entities engaged in health care business; (2) the seven elements of a compliance program; (3) adaptations for small and large entities; (4) other compliance considerations; and (6) OIG processes and resources.

Additional industry specific compliance guidance documents will be forthcoming, according to OIG, with its first updated guidance setting the stage for those to follow.Continue Reading HHS OIG Issues General Guidance as First Step in Effort to Modernize Compliance Guidance

In an advisory opinion released on October 13, the Department of Health and Human Services (HHS) Office of Inspector General (OIG) approved a plan by a muti-specialty practice to pay its employed physicians bonuses related to outpatient procedures performed by those physicians at ambulatory surgical centers (ASCs) operated by the physician practice entity requesting the opinion (the Requestor).

According to the facts as presented by the Requestor, the practice employs a group of physicians across a range of specialties. The Requestor also operates two ASCs as corporate divisions of the practice’s legal entity and not as subsidiaries or affiliates. The Requestor plans to pay each employed physician who performs a procedure at either of the ASCs a quarterly bonus equal to 30% of the net profits generated by the facility fees that are directly attributed to that physician’s procedures performed at the ASCs during the preceding quarter.

Notably, there is no indication in the request that the bonus payments would be based solely on the professional component of services personally performed by the physicians; the measurement of profit per physician would be expected to include the technical component of the procedures.Continue Reading OIG Permits Multi-Specialty Practice to Pay Doctors Bonuses for Outpatient Procedures

The Department of Health and Human Services’ Office of Inspector General (“OIG”) issued an unfavorable advisory opinion (the “Opinion”) last Friday in which it refused to bless a proposed arrangement involving an intraoperative neuromonitoring (“IONM”) company (the “Requestor”) and various surgeons who perform procedures for which IONM is used, desiring to form a physician-owned entity (“Newco”) that would arrange to provide both the technical and professional components of IONM services (the “Proposed Arrangement”).

The Proposed Arrangement would essentially create a “turn-key” entity owned by the surgeons (the “Surgeon Owners”) that would subcontract to the Requestor and its affiliated physician practice (the “Practice”) “virtually all of the day-to-day requirements of an IONM business.” The Surgeon Owners would be responsible for forming Newco, preparing Newco’s internal governance documents, and determining the methodology for distribution of Newco’s profits amongst themselves. However, the Surgeon Owners would be passive investors, with limited involvement in Newco’s day-to-day operations.Continue Reading OIG Issues Unfavorable Advisory Opinion, Upholding Longstanding Contractual Joint Venture Concerns

The Department of Health and Human Services Office of the Inspector General (OIG) has released an advisory opinion permitting a technology company to charge health care providers “per booking” fees to participate in its online provider directory and to allow the same providers to bid on advertising that appears as specialized search results or banner ads within its digital “marketplace.” This is the second time that the OIG has opined on this particular arrangement, having approved an earlier, although slightly different, version of the arrangement by the same company in Advisory Opinion 19-04, which was issued in 2019.

In the most recent opinion, the OIG determined that, although the arrangement might violate the Federal Anti-Kickback Statute (AKS) and the Beneficiary Inducement Civil Monetary Penalty (CMP) law, the office would not enforce those statutes against the company because the nature of the revised fees and search functionality presents a sufficiently low risk of fraud and abuse. Important to the OIG’s decision was the requestor’s certification that the fees do not exceed fair market value of the requesting company’s services to providers related to its marketplace nor do they take into account the user’s insurance status or the volume or value of referrals to the providers.

The OIG’s opinion letter protects only the current arrangement described to it by the requestor, and the agency declined to opine on any continuing contracts under an older version of the program.Continue Reading OIG again approves online health directory’s use of appointment and advertising fees

Almost two years after issuing its Interim Final Rule requiring COVID-19 vaccination for certain health care works, the Centers for Medicare and Medicaid Services (“CMS”) has issued a final rule addressing several regulations regarding COVID-19 vaccination, testing, and education requirements in health care facilities.

In short, the rule eliminates the COVID-19 vaccine requirement for staff at certain categories of Medicare-participating health care providers and ends COVID-19 vaccination testing requirements for staff at long-term care (“LTC”) facilities. Additionally, the rule finalizes previously interim provisions regarding COVID-19 vaccination “educate and offer” requirements for residents, staff, and clients at LTC facilities and Intermediate Care Facilities for Individuals with Intellectual Disabilities (“ICFs-IID”).

The rule states that rolling back COVID-19 vaccination and testing requirements enacted during the pandemic aligns with the end of Public Health Emergency (“PHE”) on May 11, 2023 and the concomitant reduction in infection rates, decline in deaths, and significant vaccination uptake by the public.Continue Reading CMS Withdraws Health Care Staff Vaccination Requirements

On May 3, New York Governor Kathy Hochul signed into law provisions that will require health care entities to submit a notification to the state Department of Health (DOH) providing information about any material transaction involving that health care entity.

The law, passed as part of the state’s budget, was originally crafted to give the DOH authority to review and approve those transactions. Ultimately, following several iterations during the legislative process, that approval power was stripped out by the state general assembly and replaced with the current notice requirement.

The law will take effect on August 1, 2023 and states on its face that it will apply to all “material transactions” involving health care entities that close on or after that date. That said, the requirements for transactions that close between August 1 and August 31 are a somewhat open question, given the 30-day notice requirement in the law. The DOH is tasked by the law with creating regulations that may address this situation.Continue Reading New York Passes Health Care Transaction Notice Requirements

The Centers for Medicare and Medicaid Services (CMS) released a pair of proposed rules on April 27, 2023 that make substantial changes to the structure of Medicaid and the Children’s Health Insurance Program (CHIP), both in the traditional fee-for-service setting and for services provided through managed care organizations (MCOs), and incorporate feedback from stakeholders in

On March 27, 2023, two United States Senators, Bill Cassidy, MD (R-LA) and Jeff Merkley (D-OR) introduced the bipartisan No Unreasonable Payments, Coding, or Diagnoses for the Elderly (“No UPCODE”) Act to address perceived financial incentives inherent in the Medicare Advantage patient risk scoring reimbursement methodology. Senator Merkley alleges that the current reimbursement

The three agencies that oversee the independent dispute resolution (IDR) process established by the No Surprises Act have notified certified IDR entities that they should not issue any new payment determinations while the agencies evaulate and update IDR guidance to comply with a recent court decision vacating provisions of the IDR rule.

The notice comes

For the second time in 12 months, a federal district court has set aside provisions of the No Surprises Act’s Independent Dispute Resolution Final Rule on the grounds that the portions of the rule that provide guidance to arbitrators on how to weight price submissions violate the statute’s requirements.

This decision from Judge Jeremy D. Kernodle for the U.S. District Court for the Eastern District of Texas in a group of challenges to the rule, consolidated under Texas Medical Association v. U.S. Department of Health & Human Services (No. 6:22-cv-372), follows closely on the Requirements Related to Surprise Billing Final Rule issued in August 2022 (August Rule), which sought to address earlier criticisms of the independent dispute resolution process, and marks the second time that the rule has been vacated in part and sent back to the three agencies for another chance.

The previous remand was covered in an earlier post on this blog. In both that instance and in this one, the court took issue with the prominence of the “qualifying payment amount” or QPA. The QPA is a statutorily defined payment rate that represents the median contracted rates recognized by an insurer for the same or similar items or services in the same geographic area.Continue Reading Portions of No Surprises Act IDR rule procedures set aside by federal court again

In its latest effort to increase transparency and improve patient access to information about their health care providers the U.S. Department Health and Human Services Centers for Medicare & Medicaid Services (CMS) published a Request for Information (RFI) on October 7, 2022, seeking input on creation of a national provider directory for use by patients, regulators, and insurers.  

According to the announcement, the RFI was prompted by inefficiencies arising from “the fragmentation of current provider directories” maintained by providers, insurers and/or third-party sources that CMS believes could be remedied by a federal provider directory containing “digital contact information containing the most accurate, up-to-date, and validated . . . data in a publicly accessible index.”

The stated goal of the RFI is to examine the feasibility and requirements for a proposed National Directory of Healthcare Providers and Service (NDH). Responses to the RFI are due by December 6, 2022, and stakeholder comments already are being submitted.Continue Reading CMS Considers National Directory of Healthcare Providers and Services

Following closely after the clarifying independent dispute resolution process Final Rule, the four executive branch entities tasked with implementing the provisions of the No Surprises Act, the Office of Personnel Management, the Centers for Medicare & Medicaid Services (CMS), Employee Benefits Security Administration and the Internal Revenue Service have issued a request for information to help the agencies craft the next stage of regulations for the surprise billing law.

The request is the latest effort by agencies to seek stakeholder input on the contours of the regulations implementing the No Surprises Act, this time with a focus on the requirements in the law for providers to issue a good faith estimate (GFE) to plans for services that their covered patients will submit for reimbursement and for insurers to issue an advanced explanation of benefits (AEOB) to their plan participants based on estimated charges relayed to them by providers.

Specifically, the entities are looking for information and recommendations on the process of transferring data from providers and facilities to plans, issuers and carriers to facilitate the GFE and AEOB processes, as well as the economic impacts of implementing these requirements. The notice was added to the Federal Register on Friday, Sept. 16 and comments are due to the agencies by November 15.Continue Reading Agencies Look for Input on No Surprises Act Good Faith Estimate Rules

After a long line of opinions scrutinizing the use of rewards programs offered by providers, the Department of Health and Human Services’ Office of Inspector General (“OIG”) issued Advisory Opinion 22-16 on August 19, 2022– a favorable opinion for the provision of gift cards to Medicare Advantage (“MA’) plan enrollees who complete educational modules as part of an online surgical treatment learning tool.

The opinion adds flexibility to existing opinions on gift cards and patient engagement programs and, while binding only on the requestor, provides insight into the OIG’s evolving view of these programs.Continue Reading OIG Approves Rewards Program for Medicare Advantage Organizations