Exhaustion of Administrative Remedies Requirement Reaffirmed

In Vranos v. Skinner, the Massachusetts Appeals Court reaffirmed the doctrine of exhaustion of administrative remedies. The Court affirmed the dismissal of the lawsuit arising out of a summary suspension of a physician’s staff privileges. The bylaws of Franklin Medical Center contained the typical internal grievance procedures. Dr. Vranos alleged that the hospital had not complied with his procedures, but the Court held that the fair hearing process was the proper venue for contesting the hospital’s actions, including an allegation of violation of the bylaws procedures. The Court stated that the hospital’s “failure to follow the provisions of the bylaws was a basis for evoking the bylaws’ appellate review procedures, nor grounds for ignoring them.”

HHS Announces First 2 EHR Certfication Bodies

 

The Certification Commission for Health Information Technology (CCHIT), Chicago, Ill. and the Drummond Group Inc. (DGI), Austin, Texas, were named today by the Office of the National Coordinator for Health Information Technology (ONC) as the first technology review bodies that have been authorized to test and certify electronic health record (EHR) systems for compliance with the standards and certification criteria that were issued by the U.S. Department of Health and Human Services earlier this year.

Understanding the Health Care Reform Bill

The Law Firm Alliance Health Law Group is pleased to announce the launch of a series of ten podcasts highlighting various portions of the Health Care Reform Bill and the new HIPAA HiTech amendments.

The law firm of Tucker Arensberg coordinated healthlaw attorneys from six law firms across the US to create this highly informative program that can be easily accessed through the Law Firm Alliance website.

Topics covered in the podcast series include:

  • HIPAA and the New HiTech Amendments - what is protected and who is covered; overview of the privacy, security and breach notification rules
  • Health care insurance exchanges and health cooperatives, community insurance and medicaid
  • Fraud and abuse
  • Patient Protection and Affordable Care Act
  • Tort reform
  • Health industry specific tax provisions
  • New requirements tax-exempt hospitals face under health care reform
  • Tax provisions in health care reform

Visit the Law Firm Alliance website by clicking here to download the podcasts.

If you would like more information on the Law Firm Alliance Health Law Group, please contact Health Law Group Coordinator Beth Seabright, Director of Marketing at Tucker Arensberg in Pittsburgh, PA at 412.594.5541 or bseabright@tuckerlaw.com.

Online Health Care Reform Course

The University of Iowa is offering an online healthcare reform course for those of you looking for a little formal education on this subject. See the link below.

http://www.uiowa.edu/~ibl/HealthLawColloquium.shtml

Regional Extension Centers Web Site Directory

Thanks to Mike Squires from BluePrint Healthcare IT for creating this REC resource center.

Regional Extension Centers Web Site Directory

http://www.e-healthcaremarketing.com/archives/4353

 

The Official Web Site for the Medicare and Medicaid EHR Incentive Programs

http://www.cms.gov/EHRIncentivePrograms/

Update: Discovery of Peer Review Records

Physician credentialing disputes often involve and may depend upon proof of “unequal treatment.” These situations arise when hospitals allege certain substandard performance or conduct by physicians, but the physician’s defense is that they are no different than anyone of the physicians, that the issues are common and that they are being discriminated against. In order to prove that, you have to prove similar circumstances but unequal treatment, which requires the discovery of the peer review records of other physicians. 

Most states have peer review confidentiality statutes prohibiting the discovery of that information, at least for malpractice cases against physicians and for any circumstances in many statutes. Although there appears to be a growing recognition that the confidentiality statutes do not apply to a physician who seeks access to his own peer review records, obtaining other peer review records is usually difficult, although there are some exceptions. 

One common exception is for discrimination cases based upon federal law. Another example of this exception is Guinn v. Mt. Carmel Hospital, a federal district court case from the Southern District of Ohio. Dr. Guinn alleged violation of Federal Statutes 42 U.S.C. 1981 and 1985, and sought discovery of the peer review records of other physicians. The hospital objected on the basis of the state peer review confidentiality statutes and the common law physician/patient privilege. Dr. Guinn moved to compel discovery.

The court recognized that the law in the Sixth Circuit was well established that the privileges asserted by the hospital do not exist in these federal court discrimination cases. However, the court also concluded that Dr. Guinn had not proved the relevance of most of his discovery requests. 

Note that the discovery and confidentiality issue is not an HCQIA issue. The Health Care Quality Improvement Act not only does not address the confidentiality of physician peer review records, the immunity granted by the statute is not available in the employment discrimination context.

Another recent case was Ryskin v. Banner Health, decided in the District Court for the United States District of Colorado. In that case the court refused to limit the disclosure of peer review records because, although Colorado does have a state peer review confidentiality statute, the statute provides confidentiality in peer review proceedings and defines what constitutes a peer review proceeding.

The court concluded that the hospital had not followed the policies it adopted defining peer review proceedings and therefore could not claim that its investigation constituted a valid peer review proceeding. The court stated compliance with the statutory procedural requirements was a prerequisite to asserting the privileges provided by the statute.

Highmark Revises Concurrent Care Guidelines

In the June 2010 issue of the Highmark PRN, Highmark announces that its Concurrent Care Guidelines have changed. The article does not explain the nature of the change, so it is important for all providers to review the policy as it now exists to determine how it applies to them.

HITECH Breach Notification Final Rule Update

Contributed by Lee Kim

412.594.3915, lkim@tuckerlaw.com

The US Department of Health and Human Services ("HHS") is withdrawing the breach notification final rule under HITECH from OMB review to allow for further consideration, given the Department’s experience to date in administering the regulations.  This is in response to the public comments received in light of the Interim Final Rule for Breach Notification for Unsecured Protected Health Information ("PHI") issued pursuant to the HITECH Act.

HHS has stated in its announcement on the topic that it intends to publish a final rule in the Federal Register in the coming months.

 

Getting in compliance with HIPAA

Contributed by Lee Kim

412.594.3915, lkim@tuckerlaw.com

 

Under HIPAA, both covered entities (e.g., health plan, health care clearinghouse, and health care providers) and business associate (i.e., individuals or entities that use or disclose protected health information ("PHI") on behalf of the covered entity) are required to comply with the Privacy and Security Rules.  The HIPAA Privacy Rule establishes national standards to protect individuals’ medical records and other personal health information.

The HIPAA Security Rule establishes national standards to protect individuals’ electronic personal health information that is created, received, used, or maintained by a covered entity. The Security Rule requires appropriate administrative, physical and technical safeguards to ensure the confidentiality, integrity, and security of electronic protected health information.  Covered entities and business associates must comply with the Security Rule.  Every covered entity and business associate, regardless of size, must conduct a risk analysis and perform risk management with regard to their information technology infrastructure.  It is important not to overlook the security of mobile/external devices such as memory cards, USB/thumb drives, CDs, DVDs, tapes, etc.   (The HIPAA Security Rules have a set of implementation specifications to ensure compliance with the Rules.)  (Violations under the HIPAA Security Rule can range anywhere from $100 to thousands of dollars for each violation under present law.)

Whether one is a business associate or a covered entity, one must have policies and procedures in place in accordance with the HIPAA Privacy and Security Rules.  In addition, the workforce of the covered entity or business associate must be regularly trained with regard to the requirements under these Rules and any changes in these Rules.

If you are in need of assistance in terms of developing policies and procedures which comply with the Rules, have questions about implementing the Rules, and/or are in need of training, please do not hesitate to contact us.