The U.S. Department of Health and Human Services filed a Notice of Enforcement Decision on Friday, April 26, 2019, announcing a new system of annual penalty limits for HIPAA violations based on an entity’s level of culpability. The agency revised its previous interpretation of the Health Information Technology for Economic and Clinical Health Act (HITECH

The House Energy and Commerce Subcommittee on Health has approved the following seven bipartisan bills addressing the Medicare Part B program:

  • HR 3245, which would significantly increase various Medicare civil and criminal penalties under sections 1128A and 1128B of the Social Security Act, which sponsors note have not been updated in 20 years. Maximum penalties would at least double under the bill. For instance, CMPs that are now $10,000 would be increased to $20,000, while criminal fines that are now a maximum of $25,000 would increase to $100,000. Maximum sentences also would be doubled, from five years to 10 years.
  • HR 1148, the Furthering Access to Stroke Telemedicine Act, to provide for Medicare reimbursement of neurological consults via telemedicine for beneficiaries presenting at hospitals or mobile stroke units.
  • HR 2465, the Steve Gleason Enduring Voices Act, to make permanent the current Medicare coverage of speech generating devices under the “routinely purchased” durable medical equipment payment category.
  • HR 2557, the Prostate Cancer Misdiagnosis Elimination Act, to provide coverage of DNA Specimen Provenance Assay (DPSA) testing for prostate cancer.
  • HR 3120, to amend the Health Information Technology for Economic and Clinical Health (HITECH) Act to remove the mandate that meaningful use standards become more stringent over time.
  • HR 3263, to extend the Medicare Independence at Home Medical Practice Demonstration Program.
  • HR 3271, to revise Medicare competitive bidding rules pertaining to diabetes test strips (DTS), including stronger enforcement of requirement that bidders cover at least 50 percent of the types of diabetes test strips on the market.

Continue Reading House Panels Advance Medicare Policy Bills, including Hike in Civil/Criminal Penalties

In case you missed them, Reed Smith attorneys have recently prepared the following Client Alerts on major regulatory issues:

This post was also written by Elizabeth D. O’Brien.

On January 25, 2013, the HHS Office for Civil Rights published its long-awaited final rule implementing major changes to the HIPAA Privacy, Security, Breach Notification, and Enforcement Rules mandated by the 2009 Health Information Technology for Economic and Clinical Health Act (HITECH Act). Among other

The Office for Civil Rights (“OCR”) of the Department of Health and Human Services released today the long awaited, and much anticipated, omnibus final rule modifying the HIPAA Privacy, Security, Breach and Enforcement Rules. The final rule, which implements the statutory requirements of the Health Information Technology for Economic and Clinical Health Act (“HITECH”) and the Genetic Information Nondiscrimination Act (“GINA”), is comprised of four final rules and addresses the July 2010 HITECH proposed rule, the Breach Notification and Enforcement interim final rules, as well as the October 2009 GINA proposed rule (collectively, the “HITECH Final Rule”). Notably, the HITECH Final Rule does not address the May 2011 proposed accounting and access report rule.
Continue Reading It’s Here: OCR Releases Long Awaited HIPAA/HITECH Final Rule

As the year draws to a close, industry is speculating about the release date of the long-awaited Health Information Technology for Economic and Clinical Health Act (“HITECH”) final rule, which is expected to address modifications to the Privacy, Security, Enforcement, and Breach Notification Rules. While the publication date has not yet been announced, it is

The Office of the National Coordinator for Health Information Technology (ONC) is inviting comments on a governance mechanism for the nationwide health information network under the HITECH Act. ONC seeks input on a range of topics, including: creation of a voluntary program under which entities that facilitate electronic health information exchange could be validated

On July 8, 2010, the HHS released its proposed rule modifying the HIPAA Privacy, Security, and Enforcement Rules to implement the privacy, security, and certain enforcement provisions of the Health Information Technology for Economic and Clinical Health Act, included in the American Recovery and Reinvestment Act of 2009 (ARRA). The proposed modifications to the HIPAA