HIPAA 101: The Basics of HIPAA Administrative Simplification
概要
TLDRThe video outlines the basics of HIPAA's administrative simplification provisions, focusing on electronic healthcare transactions and code sets standards. It covers the history of HIPAA, compliance requirements for covered entities, and the importance of standardization in healthcare transactions. The video also discusses enforcement of HIPAA rules, compliance deadlines, and available resources for further information. Key areas include electronic transactions, unique identifiers, privacy, and security standards, emphasizing the need for healthcare providers to comply with these regulations to ensure efficient and secure handling of health information.
収穫
- 📜 HIPAA was enacted in 1996 to protect health information.
- 💻 Covered entities must comply with electronic transaction standards.
- 🔍 Compliance deadlines vary for different provisions of HIPAA.
- 📅 Key compliance dates include April 14, 2003, and October 16, 2003.
- 🔒 HIPAA mandates privacy and security standards for health information.
- 📞 Resources like the CMS HIPAA website provide valuable information.
- 🛠️ Designated standards maintenance organizations help maintain HIPAA standards.
- 📊 Direct data entry (DDE) allows providers to input data directly into health plans.
- 💡 Understanding your status as a covered entity is crucial for compliance.
- ⚖️ Non-compliance can lead to significant penalties.
タイムライン
- 00:00:00 - 00:05:00
The program introduces HIPAA administrative simplification, focusing on electronic healthcare transactions and code sets standards. It aims to clarify HIPAA's history, benefits, compliance requirements, and enforcement mechanisms, while addressing common questions about HIPAA.
- 00:05:00 - 00:10:00
HIPAA, enacted in 1996, aims to protect healthcare benefits and standardize transactions, enhancing efficiency and reducing costs. The second title of HIPAA focuses on administrative simplification, which includes electronic transactions, unique identifiers, privacy, and security standards.
- 00:10:00 - 00:15:00
The administrative simplification standards apply to healthcare clearinghouses, health plans, and certain healthcare providers. A transaction is defined as the electronic exchange of information for healthcare-related activities, with specific standards established for various types of transactions.
- 00:15:00 - 00:20:00
HIPAA's provisions were implemented through regulations with varying compliance deadlines. The final rule for electronic transactions was issued in 2000, with compliance required by 2002, later extended for some entities. HIPAA does not mandate electronic claims submission but requires compliance with standards if electronic transactions are conducted.
- 00:20:00 - 00:25:00
Small healthcare providers are not exempt from HIPAA; they are considered covered entities if they transmit designated transactions electronically. Compliance deadlines for privacy provisions and unique identifiers are outlined, with specific dates for small health plans.
- 00:25:00 - 00:30:00
The final rule for security standards was published in 2003, requiring covered entities to implement security procedures for electronic health information. Compliance dates vary for small health plans, and resources for compliance are available on the CMS website.
- 00:30:00 - 00:35:00
Covered entities must assess their status, identify communication methods, and evaluate business processes for HIPAA compliance. Testing and coordination with trading partners are crucial steps, along with establishing agreements for HIPAA-compliant transactions.
- 00:35:00 - 00:43:06
CMS enforces HIPAA provisions, focusing on compliance and providing technical assistance. Penalties for non-compliance include civil and criminal penalties, with an emphasis on helping entities achieve compliance before imposing penalties.
マインドマップ
ビデオQ&A
What is HIPAA?
HIPAA stands for the Health Insurance Portability and Accountability Act, which was enacted in 1996 to protect healthcare information and standardize electronic healthcare transactions.
Who is considered a covered entity under HIPAA?
Covered entities include healthcare providers who conduct electronic transactions, health plans, and healthcare clearinghouses.
Do I have to submit healthcare claims electronically?
HIPAA does not require electronic submission of claims, but if you conduct certain transactions electronically, you must use HIPAA standards.
What are the compliance deadlines for HIPAA?
Key compliance deadlines include April 14, 2003, for privacy requirements, and October 16, 2003, for electronic transactions and code sets.
What are the penalties for non-compliance with HIPAA?
Penalties can include civil monetary fines and criminal penalties for knowingly violating HIPAA rules.
How can I determine if I am a covered entity?
You can determine if you are a covered entity by assessing if you conduct electronic transactions as defined by HIPAA.
What resources are available for HIPAA compliance?
Resources include the CMS HIPAA website, HIPAA hotlines, and provider readiness checklists.
What is the role of designated standards maintenance organizations (DSMO)?
DSMO are organizations that maintain and develop standards for HIPAA compliance.
What is direct data entry (DDE)?
DDE refers to entering data directly into a health plan's computer system using terminals or browser screens.
What is the purpose of HIPAA's administrative simplification provisions?
The provisions aim to streamline healthcare transactions, reduce costs, and protect patient information.
ビデオをもっと見る
Suicide in the Trenches by Siegfried Sassoon: Read by Stephen Graham | Remembering World War 1 | C4
When Giving Her Space in a Relationship: HOW LONG Before Relationship is Restored?
Fourier transforms in cryo-EM | Convolution, Gaussian filters, Fourier Shell Correlation, FFT
These Jobs Won't Exist In 24 Months | Daniel Priestley, Bret Weinstein, Amjad Masad | Diary Of A CEO
POLITICAL THEORY – Jean-Jacques Rousseau
Hedonism: The Pursuit of Happiness
- 00:00:00[Music]
- 00:00:16hello and welcome to the Centers for
- 00:00:19Medicare and Medicaid Services program
- 00:00:21on the basics of HIPAA administrative
- 00:00:24simplification I'm Valerie Hart and I'm
- 00:00:27joined by John Young and will be your
- 00:00:29guides as we review the information you
- 00:00:32need to know about HIPAA and complying
- 00:00:34with its administrative simplification
- 00:00:36provisions specifically the electronic
- 00:00:39healthcare transaction and code sets
- 00:00:41standards this program is designed to
- 00:00:44help you understand the history of HIPAA
- 00:00:45and its benefits for you unsure whether
- 00:00:48you're a covered entity will show you
- 00:00:50how to find out then we'll cover the
- 00:00:52standards that have been adopted for
- 00:00:54electronic transactions and code sets
- 00:00:56you'll find out why the designated
- 00:00:58standards maintenance organizations may
- 00:01:00be important to you you will also learn
- 00:01:02about some of the steps you need to take
- 00:01:04become compliant with the administrative
- 00:01:05simplification provisions of HIPAA we'll
- 00:01:08also touch on how HIPAA rules and
- 00:01:10deadlines will be enforced we'll also
- 00:01:12share the answers to some of the HIPAA
- 00:01:14questions that we have received and show
- 00:01:16you how to get more information about
- 00:01:18HIPAA
- 00:01:20you
- 00:01:24Congress passed the Health Insurance
- 00:01:26Portability and Accountability Act in
- 00:01:291996 in addition to creating consumer
- 00:01:33protection for healthcare benefits the
- 00:01:35portability part of HIPAA Hippo will
- 00:01:38standardize financial and administrative
- 00:01:40health transactions for the public and
- 00:01:43private sectors increased speed and
- 00:01:45efficiency cut the cost of delivering
- 00:01:48health care services and set minimum
- 00:01:52standards of protection for the storage
- 00:01:54use and transfer of protected health
- 00:01:57information
- 00:01:58in short HIPAA puts the force of law
- 00:02:01behind the adoption of standards the
- 00:02:03HIPAA statute has five titles the second
- 00:02:07title contains the administrative
- 00:02:08simplification provisions and is the one
- 00:02:11we will focus on today there are four
- 00:02:14main areas that comprise administrative
- 00:02:17simplification the first is electronic
- 00:02:20transactions and code sets HIPAA adopts
- 00:02:23and requires the use of uniform national
- 00:02:25standards and requirements for
- 00:02:27conducting electronic health care
- 00:02:29transactions the second area is the
- 00:02:33unique identifier HIPAA requires
- 00:02:36establishing and assigning a standard
- 00:02:38identifier that providers health plans
- 00:02:41and employers will use for every
- 00:02:43electronic healthcare transaction the
- 00:02:46third is privacy under HIPAA covered
- 00:02:49entities must implement standards to
- 00:02:52protect and guard against the misuse of
- 00:02:55individually identifiable health
- 00:02:57information the final area is security
- 00:03:01HIPAA addresses how electronic health
- 00:03:04information is stored transmitted and
- 00:03:06accessed
- 00:03:07[Music]
- 00:03:13the administrative simplification
- 00:03:15standards adopted by the Secretary of
- 00:03:18the Department of Health and Human
- 00:03:19Services under HIPAA applies to all
- 00:03:21health care clearing houses all health
- 00:03:24plans those health care providers that
- 00:03:27conduct certain transactions in
- 00:03:28electronic form or use a billing service
- 00:03:31to conduct transactions on their behalf
- 00:03:33if you meet one or more of these
- 00:03:35criteria you are a covered entity and
- 00:03:38must comply with the administrative
- 00:03:39simplification requirements of HIPAA we
- 00:03:42have mentioned transactions a lot
- 00:03:43exactly what is a transaction a
- 00:03:46transaction is the electronic
- 00:03:48transmission of information between two
- 00:03:50parties to carry out financial or
- 00:03:52administrative activities related to
- 00:03:54health care electronic transaction
- 00:03:57standards have been developed for the
- 00:03:59following exchanges of information
- 00:04:01healthcare claims or equivalent
- 00:04:03encounter information healthcare payment
- 00:04:06and remittance advice healthcare claim
- 00:04:09status eligibility inquiry referral
- 00:04:13certification and authorization
- 00:04:15enrollment and disenrollment in the
- 00:04:18health plan health plan premium payment
- 00:04:21coronation of benefits claims attachment
- 00:04:25standards forthcoming and first report
- 00:04:28of injury standards forthcoming what do
- 00:04:32we mean by electronic the term
- 00:04:34electronic is used to describe moving
- 00:04:37healthcare data via the internet and
- 00:04:39extranet leased lines dial-up lines such
- 00:04:44as direct data entry or dde private
- 00:04:48networks point of service and health
- 00:04:51data that is physically moved from one
- 00:04:53location to another using magnetic tape
- 00:04:56disk or CD media faxes sent using a
- 00:05:00dedicated fax machine as opposed to
- 00:05:02faxing from a computer and voice
- 00:05:03response units on phones are not subject
- 00:05:06to the transaction standards but may
- 00:05:08have to meet privacy and security
- 00:05:10standards now let's catch up with
- 00:05:12another special term and define direct
- 00:05:15data entry or dde in some more detail
- 00:05:18with dde remote user keys data directly
- 00:05:21into a health plans computer using dumb
- 00:05:24terminals or computer browser screens
- 00:05:27health plans can give providers the
- 00:05:28option to use dde but are not obligated
- 00:05:31to do so
- 00:05:39in this segment we get back to more of
- 00:05:41the details of administrative
- 00:05:42simplification
- 00:05:43although HIPAA was enacted in 1996 each
- 00:05:47of the provisions of administrative
- 00:05:49simplification are set in motion through
- 00:05:51the issuing of proposed and final
- 00:05:53regulations thus each part of
- 00:05:55administrative simplification has
- 00:05:57different effective dates and different
- 00:05:59compliance deadlines we'll review them
- 00:06:02in the next section the final rule for
- 00:06:05electronic transactions and code set
- 00:06:07standards was issued in August 2000
- 00:06:10compliance with this rule was required
- 00:06:12by October 16th 2002 the large health
- 00:06:15plans health care providers and health
- 00:06:18care clearing houses however Congress
- 00:06:21realized that many covered entities
- 00:06:23would not be ready to comply with that
- 00:06:25date so in December of 2001 it passed
- 00:06:29legislation that became public law 1:07
- 00:06:32- 1:05 also known as the administrative
- 00:06:36simplification Compliance Act or Aska
- 00:06:38for short which amended HIPAA and
- 00:06:41granted a one-year compliance extension
- 00:06:43to October 16th 2003 under certain
- 00:06:46conditions that extension was available
- 00:06:49to covered entities scheduled to become
- 00:06:52compliant in 2002 provided the covered
- 00:06:55entity submitted a compliance extension
- 00:06:57plan to CMS by October 15 2002 small
- 00:07:02health plans with receipts of less than
- 00:07:045 million dollars have always had until
- 00:07:06October 16 2003 to comply and the
- 00:07:09compliance date was not affected by the
- 00:07:11extension covered entities that filed
- 00:07:15for an extension are required to begin
- 00:07:17their internal testing by April 16 2003
- 00:07:21does HIPAA require that I submit my
- 00:07:23healthcare claims electronically
- 00:07:26HIPAA does not require that you submit
- 00:07:28healthcare claims electronically what it
- 00:07:31does require is that if you conduct
- 00:07:33certain transactions electronically you
- 00:07:35must use the HIPAA standards and there's
- 00:07:38another important element of Aska it
- 00:07:41requires that most Medicare claims
- 00:07:43submitted after October 16 2003 be
- 00:07:47submitted electronically there will be
- 00:07:49exceptions to this requirement for
- 00:07:52example you
- 00:07:53we'll be able to continue to submit
- 00:07:54paper claims if there is no method
- 00:07:56available for submitting them
- 00:07:58electronically also regardless of
- 00:08:01whether an electronic claim format is
- 00:08:03available small providers of services or
- 00:08:06supplies can continue to use paper small
- 00:08:10providers are defined by Aska as a
- 00:08:12physician practitioner facility or
- 00:08:15supplier other than provider of services
- 00:08:17with fewer than 10 full-time equivalent
- 00:08:20employees or a provider of services with
- 00:08:24fewer than 25 full-time equivalent
- 00:08:26employees there may be additional
- 00:08:29exceptions regulations clarifying the
- 00:08:32exceptions to the Medicare electronic
- 00:08:34billing requirements will be issued if
- 00:08:36you are a provider and believe you
- 00:08:39qualify for an exception you should
- 00:08:41continue to build Medicare via paper
- 00:08:44there's currently no mechanism in place
- 00:08:46to request a waiver of these
- 00:08:48requirements so please be patient and
- 00:08:50wait for the regulations to be issued
- 00:08:53it's time to hear one of the HIPAA
- 00:08:55questions that we received I'm a small
- 00:08:58healthcare provider
- 00:08:59I've heard that I'm excluded from HIPAA
- 00:09:00is that true no small providers are not
- 00:09:04excluded from HIPAA the size of the
- 00:09:07healthcare providers office does not
- 00:09:09exempt them from HIPAA if a healthcare
- 00:09:12provider transmits any of the designated
- 00:09:14transactions electronically they are
- 00:09:16considered a covered entity and are
- 00:09:19subject to the administrative
- 00:09:20simplification provisions of HIPAA
- 00:09:23Thanks
- 00:09:24now let's move on to the compliance
- 00:09:27dates for the other key components of
- 00:09:29administrative simplification the final
- 00:09:32rule for HIPAA privacy was published in
- 00:09:34December of 2000 with final
- 00:09:36modifications published August 14th 2002
- 00:09:39they set the compliance date of April
- 00:09:4214th 2003 for all covered entities
- 00:09:44except small health plans remember even
- 00:09:48if you got the one-year extension for
- 00:09:49meeting the electronic transactions and
- 00:09:51code sets requirements you still must
- 00:09:54meet all deadlines for compliance with
- 00:09:56the deadlines for the privacy provisions
- 00:09:58or any of the other HIPAA administrative
- 00:10:01simplification provisions April 14th
- 00:10:042004 is the privacy complying
- 00:10:07stay for small health plans the standard
- 00:10:10unique identifiers mandated by HIPAA
- 00:10:13include the following the national
- 00:10:15employer identifier the national
- 00:10:18provider identifier and the national
- 00:10:21health plan identifier the final
- 00:10:23regulation said specify the national
- 00:10:25employer identifier were published in
- 00:10:28May 2002 the rules adopt the employer
- 00:10:31identification number or ein an existing
- 00:10:35identifier already issued by the
- 00:10:37Internal Revenue Service as the national
- 00:10:40employer identifier for use in
- 00:10:42healthcare transactions the use of this
- 00:10:45identifier will improve the Medicare and
- 00:10:47Medicaid programs and the effectiveness
- 00:10:50and efficiency of the health care
- 00:10:51industry in general by simplifying the
- 00:10:54administration of the system and
- 00:10:56enabling the efficient electronic
- 00:10:59transmission of certain health
- 00:11:00information all covered entities accept
- 00:11:04small health plans must comply with the
- 00:11:07national employer identifier standards
- 00:11:09by July 30th 2004 small health plans
- 00:11:13must comply by August 1st 2005 as of
- 00:11:18December 2002 the final regulations for
- 00:11:21the national provider identifier are
- 00:11:23still pending and the rule for the
- 00:11:25national health plan identifier has not
- 00:11:28been released
- 00:11:29On February 20th 2003 the Department of
- 00:11:33Health and Human Services published the
- 00:11:34final rule for security standards for
- 00:11:36electronic protected health care
- 00:11:38information this rule specifies a series
- 00:11:41of administrative technical and physical
- 00:11:43security procedures for covered entities
- 00:11:46to use to assure the confidentiality of
- 00:11:48electronic protected health information
- 00:11:51the security compliance dates are April
- 00:11:5321st 2005 in April 21st 2006 for small
- 00:11:58health plans please visit the CMS
- 00:12:01website for current information about
- 00:12:02security that site is WW CMS HHS govt /
- 00:12:11HIPAA slash HIPAA - will provide a list
- 00:12:15with this address and other helpful web
- 00:12:17addresses at the end of the program
- 00:12:20or we move on let's review each of the
- 00:12:22three covered entity categories in more
- 00:12:24detail to help you determine if you are
- 00:12:26a covered entity let's start with
- 00:12:29providers how do you know if you or your
- 00:12:32business is a covered healthcare
- 00:12:33provider all healthcare providers that
- 00:12:36conduct any electronic transactions for
- 00:12:39which the Secretary of the Department of
- 00:12:40Health and Human Services has adopted
- 00:12:42standards are covered entities this
- 00:12:45includes providers who use a billing
- 00:12:47service or a clearinghouse this includes
- 00:12:50hospitals clinics nursing homes
- 00:12:52positions suppliers and others that
- 00:12:56furnish bill or receive payments for
- 00:12:58health care services in the normal
- 00:13:00course of business if you use another
- 00:13:03entity such as a clearinghouse to
- 00:13:05conduct covered transactions in
- 00:13:07electronic form on your behalf you are
- 00:13:09considered to be conducting the
- 00:13:11transaction in electronic form and thus
- 00:13:13you are a covered entity now how do you
- 00:13:17determine if your business is a covered
- 00:13:19healthcare clearinghouse if your
- 00:13:22business processes or facilitates the
- 00:13:24processing of health information from
- 00:13:26non-standard formats to standard formats
- 00:13:29and vice versa you are considered a
- 00:13:32clearinghouse and thus a covered entity
- 00:13:34clearinghouse services may be provided
- 00:13:36by many types of organizations including
- 00:13:40billing services repricing companies or
- 00:13:43in some cases banks finally how do you
- 00:13:46determine if your private benefit plan
- 00:13:48or government-funded program is a health
- 00:13:50plan a health plan is broadly defined as
- 00:13:53an individual or group plan that
- 00:13:55provides or pays the cost of medical
- 00:13:57care for private benefit plans in
- 00:14:00general it is considered health plan if
- 00:14:02the plan is health insurance issuer a
- 00:14:05group health plan and insurer of a
- 00:14:08Medicare supplemental policy an HMO or a
- 00:14:12multi-employer welfare benefit plan
- 00:14:15long-term care policies in addition to
- 00:14:17other policies are covered however
- 00:14:20nursing home fixed and M&D policies are
- 00:14:22not there is an important exception to
- 00:14:25that definition if the plan is a group
- 00:14:28health plan that has fewer than 50
- 00:14:30participants
- 00:14:31and is self-administered then it is not
- 00:14:34considered a health plan remember HIPPA
- 00:14:38gave small health plans an additional
- 00:14:40year to comply with the HIPAA
- 00:14:42transaction and code set standards so
- 00:14:45what exactly is a small plan a small
- 00:14:48health plan is defined as having annual
- 00:14:50receipts of five million dollars or less
- 00:14:53annual receipts means total income or
- 00:14:56gross income plus cost of goods sold as
- 00:14:59these terms are defined or report it on
- 00:15:01IRS federal tax return forms health
- 00:15:05plans that do not report receipts to the
- 00:15:07IRS such as ERISA group health plans
- 00:15:09exempt from filing income tax returns to
- 00:15:12use proxy measures to determine their
- 00:15:14annual receipts fully insured health
- 00:15:17plans should use the amount of total
- 00:15:19premiums which they paid for health
- 00:15:21insurance benefits during the plans last
- 00:15:23full fiscal year self-insured plans both
- 00:15:27fund it and unfund it to use the total
- 00:15:30amount paid for healthcare claims by the
- 00:15:31employer plan sponsor or benefit fund as
- 00:15:35applicable to their circumstances on
- 00:15:37behalf of the plan during the plans last
- 00:15:39fiscal year these plans that provide
- 00:15:42health benefits through a mix of
- 00:15:44purchased insurance and self insurance
- 00:15:46combined the proxy measures to determine
- 00:15:49the total annual receipts finally most
- 00:15:53government funded programs are
- 00:15:54considered health plans this includes
- 00:15:57Medicare Medicare plus choice Medicaid
- 00:16:01state children's health insurance
- 00:16:02program TRICARE Indian Health Service
- 00:16:06veteran's health care program and the
- 00:16:09Federal Employees Health Benefit program
- 00:16:11however government-funded programs other
- 00:16:15than those listed above are not health
- 00:16:17plans if their primary purpose is other
- 00:16:20than paying for or providing care or if
- 00:16:23their principal activity is the direct
- 00:16:25provision of health care or making
- 00:16:28grants to fund health care remember if
- 00:16:31you are covered entity you are
- 00:16:34responsible for complying with the rules
- 00:16:36and regulations of administrative
- 00:16:38simplification including meeting all
- 00:16:40compliance deadlines of each of the
- 00:16:43provisions
- 00:16:45if you still have questions about how to
- 00:16:46determine if you are covered entity you
- 00:16:49can visit the CMS website at the address
- 00:16:52on the screen and follow the covered
- 00:16:54entity flow chart decision tool okay so
- 00:16:59let's say you've determined that you are
- 00:17:00covered entity in segment two we briefly
- 00:17:04touched on the HIPAA transactions now
- 00:17:07let us clarify the transactions and code
- 00:17:09set standards that covered entities must
- 00:17:11use let's listen to another HIPAA
- 00:17:16question on the health care provider am
- 00:17:19I allowed to submit claims both
- 00:17:21electronically and by paper under HIPAA
- 00:17:24a provider has the option for any
- 00:17:27transaction to conduct it electronically
- 00:17:29or on paper HIPAA does not require that
- 00:17:33you choose one method however if you
- 00:17:36choose to conduct electronic
- 00:17:37transactions you must use the HIPAA
- 00:17:40transactions and code sets also once a
- 00:17:43provider uses an electronic transaction
- 00:17:45you become a covered entity and subject
- 00:17:48to the privacy rules also keep in mind
- 00:17:50that after October 16th 2003 Medicare
- 00:17:55will only accept paper claims under
- 00:17:57limited circumstances
- 00:18:03PIPA mandates the use of national
- 00:18:06standards for the electronic transfer of
- 00:18:08certain health care data between
- 00:18:10healthcare providers health plans health
- 00:18:12care clearing houses it replaces many
- 00:18:15non-standard formats with a single set
- 00:18:17of electronic standards to be used
- 00:18:19throughout the US healthcare industry
- 00:18:22standards have been developed for eight
- 00:18:24of the ten transactions we'll review
- 00:18:26these in a moment not every covered
- 00:18:29entity will conduct all of these
- 00:18:31transactions for instance health care
- 00:18:34providers would not engage in enrollment
- 00:18:36or disenrollment
- 00:18:37in a health plan for each of the
- 00:18:39transaction standards
- 00:18:41there is also an Associated
- 00:18:43implementation guide implementation
- 00:18:45guides can be thought of as big recipe
- 00:18:48books which provide detailed technical
- 00:18:50specifications that explain how to build
- 00:18:53a standard transaction this includes
- 00:18:56format specifications content
- 00:18:59specifications and certain code sets
- 00:19:02these guides define the data elements
- 00:19:04that are required for electronic
- 00:19:06transactions implementation guides
- 00:19:09provide important information for an
- 00:19:11information technology group or vendor
- 00:19:14that handles electronic claims
- 00:19:15submission while many covered entities
- 00:19:18may never need to look at an
- 00:19:20implementation guide it is important to
- 00:19:22know that they exist software vendors
- 00:19:26may rely on these to update your billing
- 00:19:28software these guides may be downloaded
- 00:19:31for free from the website on your screen
- 00:19:35providers should also contact their
- 00:19:37payers and inquire whether they have
- 00:19:40companion guides available to accompany
- 00:19:42the implementation guides if available
- 00:19:45companion guides can provide additional
- 00:19:47information that is helpful in
- 00:19:49interpreting the implementation guides
- 00:19:52now let's return to the specific
- 00:19:54standards that have been adopted for
- 00:19:56each of the eight transactions
- 00:19:57please note that health care providers
- 00:19:59should mainly concern themselves with
- 00:20:01the first five transactions as the other
- 00:20:04ones may not apply to them the
- 00:20:07regulation adopted what is commonly
- 00:20:09referred to as the ASC x12 and 837
- 00:20:12format for healthcare claims and
- 00:20:15coordination of benefits
- 00:20:17professional institutional and dental
- 00:20:19claims this format and many of the other
- 00:20:22adopted standards have been developed
- 00:20:23and maintained by x12 standards
- 00:20:25development organization who has been
- 00:20:27accredited by the american national
- 00:20:29standards institute as the standards
- 00:20:31organization for many electronic
- 00:20:33transactions for retail pharmacy drug
- 00:20:36claims the regulation adopted the NCPDP
- 00:20:39telecommunication version 5.1 and batch
- 00:20:42standard 1.1 for healthcare payment and
- 00:20:45remittance advice the regulation adopted
- 00:20:48ASC x12 and 835 currently many providers
- 00:20:53spend precious time reconciling
- 00:20:55submitted claims with the paper
- 00:20:57remittance advice under HIPAA providers
- 00:21:01can get electronic remittance advices
- 00:21:03from health plans and their practice
- 00:21:05management systems can auto post them in
- 00:21:08essence you'll be able to conduct claims
- 00:21:11accounting without wasting staff time
- 00:21:14for health claim status the regulation
- 00:21:17adopted ASC x12 in 276 and 277 office
- 00:21:23staff who have been spending time on
- 00:21:24hold calling a health plan to check on
- 00:21:26the status of a claim will now be able
- 00:21:28to electronically request claim status
- 00:21:30information and get the answer without
- 00:21:32using the phone for eligibility for
- 00:21:35health plan Hiep adopted ASC x12 in 270
- 00:21:40and 271 for health care eligibility
- 00:21:43benefit inquiry response under HIPAA
- 00:21:47providers should have fewer worries
- 00:21:48about getting correct eligibility
- 00:21:50information quickly for referral
- 00:21:52certification and authorization the
- 00:21:54transaction standard adopted is ASC x12
- 00:21:57in 278 for healthcare services review or
- 00:22:01request for review and response this
- 00:22:04transaction is to allow providers to
- 00:22:06electronically ask for permission from
- 00:22:07the health plan to refer their patients
- 00:22:09to other providers or to perform
- 00:22:11additional procedures for enrollment and
- 00:22:15disenrollment in a health plan HIPAA
- 00:22:17adopted ASC x12 and 834 for benefit
- 00:22:23enrollment and maintenance for health
- 00:22:25plan premium payments the transaction
- 00:22:27standard is ASC x12 and 824 payment
- 00:22:32order remittance advice now that you
- 00:22:36know what the HIPAA standards are you
- 00:22:38might be wondering where they came from
- 00:22:40HIPAA requires the Secretary of the
- 00:22:42Department of Health and Human Services
- 00:22:43to adopt standards that were developed
- 00:22:45by private sector standard development
- 00:22:47organizations the ASC x12 organization
- 00:22:51maintains the standards and the National
- 00:22:54Council for prescription drug programs
- 00:22:56or NCPDP maintains the telecommunication
- 00:22:59and batch standards and they can be
- 00:23:01found at WWE NCPDP org in addition to
- 00:23:08standard transactions the HIPAA
- 00:23:10regulation also requires the use of
- 00:23:12standard code sets here are the code
- 00:23:14sets adopted in the final rule for
- 00:23:17diagnosis and procedure codes HIPAA
- 00:23:19adopted icd-9-cm that stands for
- 00:23:24international classification of diseases
- 00:23:26ninth revision clinical modification
- 00:23:30versions 1 & 2 are maintained by the
- 00:23:32Centers for Disease Control in DHHS
- 00:23:35while version 3 is maintained by CMS for
- 00:23:40services provided by physicians and
- 00:23:42other professionals CPT 4 was adopted
- 00:23:46CPT stands for current procedure
- 00:23:48terminology and is maintained and
- 00:23:51copyrighted by the American Medical
- 00:23:52Association hit picks stands for
- 00:23:56healthcare common procedure coding
- 00:23:57system and is maintained by CMS these
- 00:24:01codes are for products supplies and
- 00:24:03services not included in the CPT four
- 00:24:05codes the code stands for code on dental
- 00:24:09procedures and nomenclature and is
- 00:24:12maintained and copyrighted by the
- 00:24:14American Dental Association finally NDC
- 00:24:19stands for national drug code which is
- 00:24:22used by retail pharmacies and is
- 00:24:24maintained by the Food and Drug
- 00:24:26Administration in DHHS the transactions
- 00:24:30and code set regulation adopted these
- 00:24:31first sets of HIPAA standards it also
- 00:24:34created a process to allow anyone to
- 00:24:36request a change in the standards six
- 00:24:39organizations known as designated
- 00:24:41standards maintenance organizations or
- 00:24:43des
- 00:24:43those were designated by the Secretary
- 00:24:46of DHHS and have agreed to work together
- 00:24:48to collect requests for changes to HIPAA
- 00:24:50standards evaluate the requests and
- 00:24:53suggestions to the standards for the
- 00:24:55Secretary's consideration the six desmos
- 00:24:58are the accredited standards committee
- 00:25:00x12 health level 7 Inc the National
- 00:25:04Council for prescription drug programs
- 00:25:06the National uniformed billing committee
- 00:25:09the National uniform claim committee and
- 00:25:12the American Dental Association the
- 00:25:15secretary may modify a standard or it's
- 00:25:18implementation guides but no more
- 00:25:19frequently than once every 12 months you
- 00:25:22can find out more by going to the Dismal
- 00:25:24website at WWF oedema org as always any
- 00:25:31time you want to find out more
- 00:25:33information about this or any other
- 00:25:35HIPAA topic you can visit the CMS hippo
- 00:25:38website in the next section we'll review
- 00:25:42some steps you can take to help reach
- 00:25:44HIPAA compliance
- 00:25:46[Music]
- 00:25:51this time for another question let's
- 00:25:54listen I'm overwhelmed by HIPPA where do
- 00:25:57I start watching this program is a great
- 00:26:01start
- 00:26:01visit the CMS website it contains many
- 00:26:05helpful items the HIPAA provider
- 00:26:07readiness checklist can help you get the
- 00:26:10ball rolling also review the frequently
- 00:26:13asked questions on the website we also
- 00:26:15put HIPAA updates on our website so try
- 00:26:18to get in the habit of checking it
- 00:26:20monthly many of you might be wondering
- 00:26:22just where to start with HIPAA in this
- 00:26:25section will outline some key steps and
- 00:26:27questions that covered entities should
- 00:26:29be addressing to help reach compliance
- 00:26:31with the electronic transactions and
- 00:26:33code set standards while not
- 00:26:36all-encompassing knowing where you stand
- 00:26:38in relation to these steps and questions
- 00:26:40should help you to better focus your
- 00:26:42efforts in reaching compliance the first
- 00:26:45step is HIPAA project planning assign
- 00:26:48someone in your office as a HIPAA point
- 00:26:50person if you haven't already done so
- 00:26:52this person should be responsible for
- 00:26:54all aspects of HIPAA and should have
- 00:26:56access to the HIPAA decision-makers such
- 00:26:59as the CEO the CFO and the CIO covered
- 00:27:03entities have many ways to communicate
- 00:27:05transactions and requests for
- 00:27:07information you need to identify which
- 00:27:10modes you use that are covered under
- 00:27:12HIPAA such as diskettes direct data
- 00:27:15entry or dde web-based or any other form
- 00:27:19of EDI or electronic data interchange
- 00:27:22paper telephone and faxing with a
- 00:27:25dedicated fax machine as opposed to
- 00:27:27faxing from a computer are not
- 00:27:29considered electronic transactions under
- 00:27:31HIPAA
- 00:27:32have you identified all modes of
- 00:27:34communication for all HIPAA covered
- 00:27:36transactions have you identified who
- 00:27:38your trading partners are what methods
- 00:27:41do you use conduct HIPAA covered
- 00:27:43transactions electronically your HIPAA
- 00:27:46budget resources and contracts should be
- 00:27:48reviewed the next step is evaluating the
- 00:27:52impact on business processes and systems
- 00:27:55some general points to consider include
- 00:27:57have you assessed the business processes
- 00:28:00for HIPAA impact of the process has been
- 00:28:03prioritized for
- 00:28:04contingency planning adopting the HIPAA
- 00:28:07standard sets means the loss of local
- 00:28:10codes as the impact of the loss of local
- 00:28:13codes and adoption of standard codes on
- 00:28:16your systems been assessed do you have a
- 00:28:19plan for changing policies processes and
- 00:28:21procedures as well as staff training to
- 00:28:24accommodate the switch to standard codes
- 00:28:26a system assessment in the form of a gap
- 00:28:29analysis needs to be completed simply
- 00:28:32put this means identifying where you
- 00:28:34aren't ready or gaps between what you do
- 00:28:37now and what you'll need to do under
- 00:28:39HIPAA for providers the practice
- 00:28:42management software vendor may be
- 00:28:43responsible for all or part of gap
- 00:28:45analysis points to consider as part of a
- 00:28:48gap analysis include as a gap analysis
- 00:28:52been performed on your systems or your
- 00:28:53vendors systems have mandated standard
- 00:28:57transactions been mapped as a system
- 00:29:00assessment been completed in addition to
- 00:29:03performing gap analyses health plans and
- 00:29:05clearing houses need to need to review
- 00:29:07and likely revise many of their internal
- 00:29:10systems ensure that HIPPA codes fields
- 00:29:12and field sizes are fully supported the
- 00:29:15next step is validation and testing all
- 00:29:18covered entities must perform testing
- 00:29:21for providers focusing on key
- 00:29:24transactions such as the claim
- 00:29:26remittance advice and eligibility
- 00:29:28transactions is important also if you
- 00:29:32are testing with one payer you should
- 00:29:34not assume that you are okay you need to
- 00:29:37test with all of your payers remember
- 00:29:40technical glitches can occur so be sure
- 00:29:42to build in enough time the workgroup
- 00:29:45and electronic data interchange and the
- 00:29:47strategic national implementation
- 00:29:48process or wedi snip has a suggested
- 00:29:52seven step testing process that you can
- 00:29:55follow as HIPAA does not specify how
- 00:29:56testing should be conducted you can
- 00:29:59visit wheaties website at the address on
- 00:30:01your screen for more information and
- 00:30:04remember testing must begin no later
- 00:30:06than April 16th 2003 try to test early
- 00:30:10and often as testing may take many
- 00:30:12months the next step is coordinating
- 00:30:15with their trading partners trading
- 00:30:17partners include hell
- 00:30:18plans billing services and clearing
- 00:30:21houses with which you may conduct HIPPA
- 00:30:23transactions here are some points to
- 00:30:25consider have you contacted your trading
- 00:30:28partners to determine their HIPAA
- 00:30:29readiness our contracts in place with
- 00:30:32vendors billing services or clearing
- 00:30:34houses for HIPAA compliant transaction
- 00:30:36services when will your vendor be
- 00:30:39updating and sending you HIPAA compliant
- 00:30:41software do you or your system vendor
- 00:30:44have a schedule for design development
- 00:30:46and implementation do you have a way to
- 00:30:49track system modification status and
- 00:30:52progress have you or your system vendor
- 00:30:55decided on an overall approach to
- 00:30:57achieving compliance is everyone aware
- 00:31:01of the April 16th 2003 testing deadline
- 00:31:04while trading partner agreements or TPAs
- 00:31:08are not required by HIPAA these
- 00:31:10agreements specify the communication
- 00:31:13methods and specific processing and code
- 00:31:15requirements not determined by the HIPAA
- 00:31:18transaction implementation guides while
- 00:31:21the HIPAA standards address data format
- 00:31:23and content they do not address other
- 00:31:25issues such as the method by which
- 00:31:27trading partners can accept and send
- 00:31:30transactions and many data elements are
- 00:31:33considered situational which means they
- 00:31:36are required as a given situation is met
- 00:31:39however these sorts of issues are not
- 00:31:42addressed in the standards and should be
- 00:31:44outlined in a TPA some additional
- 00:31:47questions to be asking include have
- 00:31:50transmission methods been agreed upon
- 00:31:52have situational data elements been
- 00:31:55identified do you have the appropriate
- 00:31:58implementation guides and companion
- 00:31:59guides have you accepted the processing
- 00:32:03and code requirements not determined by
- 00:32:04HIPAA
- 00:32:05[Music]
- 00:32:11CMS has been designated by the Secretary
- 00:32:14of DHHS to enforce all the hip
- 00:32:16administrative simplification provisions
- 00:32:18with the exception of the privacy
- 00:32:20standards this includes transactions and
- 00:32:23code set standards and security and
- 00:32:25identifier standards after they are in
- 00:32:27effect the office for civil rights or
- 00:32:30OCR at DHHS is responsible for
- 00:32:33enforcement of the privacy provisions
- 00:32:35the enforcement process for both will be
- 00:32:38primarily complaint driven thus the
- 00:32:41process leading to any penalties will be
- 00:32:43initiated primarily in response to an
- 00:32:46external complaint filed against the
- 00:32:48covered entity CMS will provide
- 00:32:51opportunities for a covered entity to
- 00:32:53demonstrate compliance or submit a
- 00:32:55corrective action plan with the focus on
- 00:32:57obtaining voluntary compliance through
- 00:32:59technical assistance CMS will notify you
- 00:33:03by letter only if a complaint is filed
- 00:33:05against you at that time you will have
- 00:33:08the opportunity to show compliance or to
- 00:33:10submit a corrective action plan only if
- 00:33:13you do none of these things with
- 00:33:14consideration be given to invoking
- 00:33:15penalties and what are the penalties
- 00:33:18civil monetary penalties of not more
- 00:33:21than $100 per violation capped at
- 00:33:24$25,000 for each requirement or
- 00:33:26prohibition that is violated criminal
- 00:33:30penalties of up to fifty thousand
- 00:33:32dollars in one year imprisonment for
- 00:33:34knowingly obtaining or disclosing
- 00:33:36individually identifiable health
- 00:33:38information and violation of the HIPAA
- 00:33:40rules up to $100,000 in five years
- 00:33:43imprisonment if the violation is
- 00:33:45committed under false pretenses and up
- 00:33:48to two hundred and fifty thousand
- 00:33:50dollars and ten years imprisonment if
- 00:33:52the violation is committed with intent
- 00:33:53to sell transfer or used for commercial
- 00:33:56advantage personal gain or malicious
- 00:33:59harm all criminal penalties are under
- 00:34:02the jurisdiction of the Department of
- 00:34:03Justice
- 00:34:04[Music]
- 00:34:09the enforcement aspect of administrative
- 00:34:12simplification is still in the early
- 00:34:13stages again
- 00:34:16CMS's emphasis is on ensuring everyone
- 00:34:19becomes compliant with the HIPAA
- 00:34:20provisions while it's true that
- 00:34:22penalties can be imposed the first
- 00:34:25course of action will focus on providing
- 00:34:26technical assistance aimed at helping an
- 00:34:29entity reach compliance for the most
- 00:34:32recent information with regard to
- 00:34:34enforcement and other general areas of
- 00:34:36HIPAA administrative simplification
- 00:34:38visit the CMS website at WWF SG / /
- 00:34:48HIPAA - to learn more about HIPAA and
- 00:34:51privacy or privacy enforcement issues
- 00:34:54visit OCR's website at WWE
- 00:35:04now that we have provided you with an
- 00:35:07introduction to HIPAA you may still be
- 00:35:09wondering how the administrative
- 00:35:10simplification provisions of HIPAA will
- 00:35:12benefit you let's meet dr. Barbara Paul
- 00:35:15CMS official practicing physician and
- 00:35:18covered entity dr. Paul is the director
- 00:35:21of quality measurement and health
- 00:35:23assessment group at CMS thanks John
- 00:35:27hello I'm Barbara Paul one of the many
- 00:35:29practicing physicians who work at CMS as
- 00:35:32I listen to this program I realized that
- 00:35:35I had many of the same questions you
- 00:35:36heard today as I navigate my way through
- 00:35:39HIPAA I try to be patient with the
- 00:35:42stresses and strains of transitioning
- 00:35:44from the 400 different formats for
- 00:35:46submitting claims currently in use today
- 00:35:49what keeps me going and I hope will keep
- 00:35:52you going as well is the prospect of
- 00:35:54simpler more streamlined administrative
- 00:35:57environment for physicians and the
- 00:35:58healthcare industry overall John and
- 00:36:02Valerie have already mentioned many of
- 00:36:03the advantages of a HIPAA compliant
- 00:36:05practice speedy determination of your
- 00:36:08patient's eligibility giving you fewer
- 00:36:11worries about what's covered in who to
- 00:36:12bill the promise of prior authorization
- 00:36:16and referral requests for your patients
- 00:36:17in any health plan and much quicker
- 00:36:20turnaround for these requests without
- 00:36:22ever picking up the phone you'll also be
- 00:36:25able to send in bills and batches or
- 00:36:27online and get a speedy response from
- 00:36:29your payer if they cannot be processed
- 00:36:32thus physicians will be paid faster and
- 00:36:35have fewer administrative hassles that
- 00:36:38should translate into more time for
- 00:36:40patient care another benefit is that
- 00:36:43administrative simplification mandates
- 00:36:46that health care entities implement a
- 00:36:48set of standards that will be used by
- 00:36:50all sectors of the healthcare industry
- 00:36:51thus eliminating the use of local codes
- 00:36:55this means that under HIPAA
- 00:36:57your office will use the same set of
- 00:37:00codes for the same procedure with all
- 00:37:02health plans that you bill before HIPAA
- 00:37:05you had to know which local code to bill
- 00:37:07which health plan for the same service
- 00:37:10thanks dr. Paul in general Hiep intends
- 00:37:14to reduce the cost of administrative
- 00:37:16operations to simplify the electronic
- 00:37:18exchange of information and to prevent
- 00:37:21unauthorized access to patient health
- 00:37:23information your patients to see fast
- 00:37:26responses to the concerns such as unpaid
- 00:37:28bills or access to patient records and
- 00:37:31this should serve to improve your
- 00:37:33patient satisfaction with you it is time
- 00:37:37for another HIPAA question my vendor
- 00:37:40says they're handling everything so I
- 00:37:42don't need to worry about HIPAA right
- 00:37:44good question but you do need to worry
- 00:37:47about HIPAA if you are a covered entity
- 00:37:50you are ultimately responsible for
- 00:37:53compliance not your vendor or anyone
- 00:37:55else so it's important that you
- 00:37:57understand the deadlines and details
- 00:37:59about HIPAA and its impact on your
- 00:38:01business and communicate often with your
- 00:38:04payers software vendors billing service
- 00:38:06or clearing houses to find out where
- 00:38:08they are with HIPAA implementation in
- 00:38:11our final segment we'll review important
- 00:38:14facts from our program and tell you
- 00:38:17about additional resources you can
- 00:38:18access to find out more information
- 00:38:20hipper
- 00:38:21[Music]
- 00:38:27by now you should have a better
- 00:38:29understanding of the many aspects of
- 00:38:31complying with HIPAA administrative
- 00:38:33simplification provisions remember that
- 00:38:36the next compliance date is April 14
- 00:38:392003 this is a deadline for meeting the
- 00:38:42privacy requirements with the exception
- 00:38:45of small health plans who have another
- 00:38:47year then just two days later is the
- 00:38:50testing deadline for all covered
- 00:38:52entities who submitted a compliance
- 00:38:54extension form compliance with the
- 00:38:57electronic transactions and code set
- 00:39:00standards for all covered entities
- 00:39:02including small health plans is required
- 00:39:05by October 16 2003 the compliance
- 00:39:10deadline for privacy is April 14th 2004
- 00:39:13for small health plans the compliance
- 00:39:17date for national employer identifier is
- 00:39:19July 30th 2004 for all covered entities
- 00:39:23except small health plans small health
- 00:39:27plans have until August 1st 2005 to
- 00:39:30comply the compliance date for security
- 00:39:33is April 21st 2005 for all covered
- 00:39:37entities except small health plans small
- 00:39:40health plans have until April 21st 2006
- 00:39:44to comply to find out more information
- 00:39:47about HIPAA administrative
- 00:39:49simplification there are a number of
- 00:39:51resources available the HIPAA hotline
- 00:39:54number is available to answer your
- 00:39:55questions
- 00:39:56that number is 186 - 8 - 0 6 5 9 this
- 00:40:04hotline can help you with your questions
- 00:40:06about electronic transactions and code
- 00:40:08sets unique identifier z' and security
- 00:40:11please direct your privacy questions to
- 00:40:14the HIPAA privacy hotline that number is
- 00:40:17186 6 6 to 7 7 7 4 8 the CMS HIPAA
- 00:40:24website is another good resource of
- 00:40:26information it's updated frequently and
- 00:40:29provides access to free tools and
- 00:40:31information such as the covered entity
- 00:40:34decision tool a provider readiness
- 00:40:36checklist information on upcoming
- 00:40:39conference calls and enforcement
- 00:40:41information plus access to frequently
- 00:40:44asked questions about HIPAA the address
- 00:40:47is wwg ms HHS gov / HIPAA / HIPAA - for
- 00:41:01more information on the HIPAA privacy
- 00:41:03provisions visit WWH HS govt / OC r /
- 00:41:11HIPAA this website includes privacy
- 00:41:15guidance documents and sample business
- 00:41:17associate contract provisions here are
- 00:41:20some additional web resources that you
- 00:41:22might find useful
- 00:41:24[Music]
- 00:42:04you
- 00:42:06[Music]
- 00:42:14we hope you have found the information
- 00:42:16in this program helpful in your efforts
- 00:42:18to comply with the administrative
- 00:42:19simplification provisions of pepper
- 00:42:21thank you for watching and remember to
- 00:42:24check our website for the latest HIPPA
- 00:42:26information
- 00:42:30[Music]
- 00:43:00you
- 00:43:02[Music]
- HIPAA
- healthcare
- compliance
- electronic transactions
- privacy
- security
- covered entities
- administrative simplification
- health information
- standards