Photo of Nancy Halstead

Immediately following Sunday’s tragic shooting at a nightclub in Orlando, friends and family frantically gathered at Orlando Regional Medical Center, attempting to get information about their loved ones.  However, hospital officials hesitated to provide specific updates.  Why?  Because the Health Insurance Portability and Accountability Act (HIPAA) and implementing regulations restrict the patient-identifiable health information that “covered entities,” like Orlando Regional Medical Center, are permitted to disclose without proper patient authorization or consent.

Shortly following the massacre, Orlando local news outlets reported that after Orlando Regional’s CEO expressed concern regarding families requesting detailed patient health information at the hospital’s emergency room, Orlando Mayor Buddy Dyer contacted the White House and requested a waiver of the HIPAA regulations.  While the HIPAA Privacy Rule is not automatically suspended during a national or public health emergency, the Secretary of the Department of Health and Human Services (HHS) may waive certain provisions of HIPAA under the Project Bioshield Act of 2004 (PL 108-276) and section 1135(b)(7) of the Social Security Act.  In order to take advantage of the waiver, the President must declare an emergency or disaster and the Secretary of HHS must declare a public health emergency.Continue Reading Reexamining HIPAA’s Applicability During Emergencies After the Tragedy in Orlando

The Centers for Medicare & Medicaid Services (“CMS”) released today the long awaited final rule clarifying the statutory requirement under the Affordable Care Act for providers and suppliers to report and return Medicare overpayments within 60 days (the “Overpayment Final Rule”).  The Rule only applies to Medicare Part A and Part B providers and suppliers and will be effective 30 days after publication, which will occur tomorrow. Noteworthy provisions of the Overpayment Final Rule include:
Continue Reading CMS Eases 60-Day Overpayment Requirement in Final Rule While Raising New Questions

On June 9, 2015, the Office of the Inspector General of the Department of Health and Human Services (OIG) released a fraud alert warning physicians to scrutinize carefully the conditions and terms of any medical director or other compensation arrangement they enter into with potential recipients of Federal health care program business. The risks associated with these arrangements under the anti-kickback statute are not new. However, the fraud alert signals  the OIG’s current focus on physicians, which reportedly has also included hiring additional attorneys to handle investigative and enforcement activity involving physicians. Moreover, the government now has access to unprecedented amounts of data regarding financial arrangements between physicians and drug and device manufacturers.

The fraud alert follows on the heels of a dozen recent settlements between the OIG and individual physicians who allegedly received kickbacks disguised as medical directorships and other office staff arrangements. In those settlements, the OIG determined the physicians played an integral role in the schemes and specifically alleged that the agreements:Continue Reading An Apple a Day Keeps the OIG Away: Practical Guidelines for Structuring Physician Compensation Arrangements to Avoid Kickback Allegations

As part of the final 2015 Medicare physician fee schedule rule, CMS is adopting – with certain refinements – its proposed changes to the regulations implementing the Physician Payment Sunshine Act. By way of background, the Sunshine Act requires pharmaceutical and medical device manufacturers and group purchasing organizations to submit to CMS certain

Today the Centers for Medicare & Medicaid Services (CMS) issued an advance copy of the CY 2015 Medicare Physician Fee Schedule (PFS) proposed rule, which includes certain changes to the regulations implementing the Physician Payment Sunshine Act, also known as the Open Payments program. These proposed changes come just three days after the inaugural

The Centers for Medicare & Medicaid Services (CMS) has published the long-awaited Final Rule to implement the “Sunshine” provisions of the Affordable Care Act of 2010 (ACA).  The Sunshine provisions – intended to provide increased transparency regarding the scope and nature of financial and other relationships among manufacturers, physicians, and teaching hospitals – require that

This post was also written by Elizabeth D. O’Brien.

On January 25, 2013, the HHS Office for Civil Rights published its long-awaited final rule implementing major changes to the HIPAA Privacy, Security, Breach Notification, and Enforcement Rules mandated by the 2009 Health Information Technology for Economic and Clinical Health Act (HITECH Act). Among other

The Centers for Medicare & Medicaid Services (CMS) released late today its final rule implementing the physician payment transparency provisions of the Patient Protection and Affordable Care Act (Section 6002), commonly referred to as the “Physician Payments Sunshine Act.” Among other things, the Act requires drug, device, biological or medical supply manufacturers to report

The Office for Civil Rights (“OCR”) of the Department of Health and Human Services released today the long awaited, and much anticipated, omnibus final rule modifying the HIPAA Privacy, Security, Breach and Enforcement Rules. The final rule, which implements the statutory requirements of the Health Information Technology for Economic and Clinical Health Act (“HITECH”) and the Genetic Information Nondiscrimination Act (“GINA”), is comprised of four final rules and addresses the July 2010 HITECH proposed rule, the Breach Notification and Enforcement interim final rules, as well as the October 2009 GINA proposed rule (collectively, the “HITECH Final Rule”). Notably, the HITECH Final Rule does not address the May 2011 proposed accounting and access report rule.
Continue Reading It’s Here: OCR Releases Long Awaited HIPAA/HITECH Final Rule

This post was also written by Tillman J. Breckenridge. As has been widely reported, today the U.S. Supreme Court ruled that the Affordable Care Act’s (ACA) individual health insurance mandate does not violate the Constitution because it may be viewed as a permissible tax on individuals who do not obtain health insurance.  The only provision of the law that the Court invalidated is a Medicaid provision that threatened states with the loss of existing Medicaid funding if they decline to comply with the ACA’s Medicaid coverage extension. By preserving the vast majority of the landmark health reform law, the Court avoided the policy chaos that would have resulted from striking down the ACA in its entirety. There is now legal certainty for state and federal governments, health care providers and suppliers, drug and device manufacturers, employers and individuals.  As discussed below, the focus in Washington will return to continuing implementation of the law. Nevertheless, although the legal battle is over, the political fight will continue and likely reverberate through the coming Presidential and Congressional election campaigns.
Continue Reading Supreme Court Upholds ACA Insurance Mandate, Limits Withholding of Medicaid Funds to States

The Centers for Medicare & Medicaid Services (CMS), tasked with implementing the Physician Payments Sunshine Act, announced yesterday that it will not require pharmaceutical, device, and other applicable manufacturers and group purchasing organizations (GPOs) to begin collecting reportable data before 2013.
Continue Reading CMS Announces Data Collection for the Physician Payments Sunshine Act Will Not Be Required Before 2013

On December 19, 2011, the Centers for Medicare & Medicaid Services (“CMS”) published a proposed rule (the “Proposed Rule”) related to section 6002 of the Affordable Care Act, commonly referred to as the “Physician Payment Sunshine Act” (so referenced herein, or as the “Act”). The Physician Payment Sunshine Act requires applicable manufacturers of drugs, devices, biologicals, or medical supplies covered under Medicare, Medicaid, or CHIP to report annually to the Secretary of the Department of Health and Human Services (“Secretary”) certain payments or other transfers of value to physicians and teaching hospitals. Additionally, applicable manufacturers and applicable group purchasing organizations (“GPOs”) must report certain information regarding the ownership or investment interests in them that are held by physicians or their immediate family members.
Continue Reading Overview and Analysis of the Proposed Federal Sunshine Regulations

The Centers for Medicare & Medicaid Services’ (“CMS”) Medicare Shared Savings Program final rule offers potential opportunities as well as risks to health care providers and suppliers interested in forming accountable care organizations (“ACOs”). While the core principle of the Medicare Shared Savings Program is simple—reward improvements in quality and cost containment through a share