Neurology & Pain Management Coding Alert
Go International With HIPAA Observance
Question: Our practice uses a small cloud services provider (CSP) based in Canada to store information. Does the Health Insurance Portability and Accountability Act (HIPAA) still apply to our business arrangement since the vendor is outside the U.S.? Codify Subscriber Answer: Yes, HIPAA regulations still apply to this relationship. All of the rules about electronic protected health information (ePHI), including the need for business associate agreements (BAAs), are still in effect even when the partnering vendor is not based in the U.S. Expert opinion: “Be aware that HHS Office for Civil Rights [OCR] warns of increased risk to ePHI processed or stored outside of the U.S., especially if the server is in a country where cybersecurity risk is high,” says Grant Elliott, CEO of Ostendio and co-founder and president of the Healthcare Cloud Coalition (HC3). “More cloud service providers are touching ePHI every day,” Elliot continues. “While the OCR provides sample Business Associate Contract provisions as they relate to the HIPAA Privacy, Security, Breach Notification and Enforcement Rules, it doesn’t state specifically how the contracted parties can be sure that the provisions are followed.” Review OCR guidance on writing up BAAs at www.hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions/index.html.
Related Articles
Neurology & Pain Management Coding Alert
- FAQ:
Find Embolism Site for Sharp ICD-10 Coding
Do you know the symptoms for each type of cerebral embolism? Coders that have had [...] - Procedure Coding:
Get a Leg Up With Extremity Count on EMGs
Here’s why you should think of EMG for a variety of diagnoses, not just CTS. [...] - ICD-10 Coding:
Note Documentation So Your Limb Pain Dx Isn't Left Hanging
Incomplete Dx could mean denials. Whenever a patient has pain in any limb — arm [...] - You Be the Coder:
Trigeminal Neuralgia Treatment
Question: An established patient with trigeminal neuralgia reports to the physician complaining of facial pain. [...] - Reader Question:
Use This Code for Pain in the Neck … Usually
Question: When a patient reports to the physician complaining of neck pain, what is the [...] - Reader Question:
Interpreter Won't Always Mean More MDM Points
Question: We recently took on a new patient who is deaf. The patient came with [...] - Reader Question:
Don't Get Caught Off-Guard With Spontaneous Rupture Dx
Question: Notes indicate that the provider performed an evaluation and management (E/M) service for a [...] - Reader Question:
Use Add-on Smarts to Ease ESI Coding
Question: I have some questions about billing for epidural steroid injections (ESIs). Patient #1 that [...] - Reader Question:
Go International With HIPAA Observance
Question: Our practice uses a small cloud services provider (CSP) based in Canada to store [...]
