Medicare Compliance & Reimbursement

HIPAA:

KNOW WHEN NOT TO SECURE A BUSINESS ASSOCIATE AGREEMENT

Health care providers and plans may not have as many Health Insurance Portability and Accountability Act business associate agreements to pull together as they thought. In a May 23 program memorandum (AB-03-078; http://cms.hhs.gov/manuals/pm_trans/AB03078.pdf), the Centers for Medicare & Medicaid Services lays out the ground rules for fiscal intermediaries and carriers as far as dealing with the business associate provisions of the HIPAA privacy standards. In a nutshell, FIs and carriers are business associates of Medicare fee-for-service itself - not of individual health care providers and health plans. "Medicare contractors that perform health care activities involving the use of protected health information on behalf of the Medicare FFS health plan are not business associates of providers, physicians, suppliers or other health plans," CMS says. "Likewise, providers, physicians, suppliers, or other health plans are not business associates of the Medicare contractor, unless the provider, physician, supplier or other health plan is doing work on behalf of the Medicare contractor." CMS orders FIs and carriers not to sign business associate agreements with providers unless the latter criterion is met. Lesson Learned: Health care providers may not need HIPAA business associate agreements with their Medicare contractors.
You’ve reached your limit of free articles. Already a subscriber? Log in.
Not a subscriber? Subscribe today to continue reading this article. Plus, you’ll get:
  • Simple explanations of current healthcare regulations and payer programs
  • Real-world reporting scenarios solved by our expert coders
  • Industry news, such as MAC and RAC activities, the OIG Work Plan, and CERT reports
  • Instant access to every article ever published in Revenue Cycle Insider
  • 6 annual AAPC-approved CEUs
  • The latest updates for CPT®, ICD-10-CM, HCPCS Level II, NCCI edits, modifiers, compliance, technology, practice management, and more

Other Articles in this issue of

Medicare Compliance & Reimbursement

View All