Recent reports indicate that House and Senate Committee leaders have apparently mutually agreed on a bipartisan arrangement for correcting or preventing surprise medical bills, although legislation has not yet been passed.

Attached is an outline of the “No Surprise Act”, which essentially deals with insured patients receiving unexpected bills for medical services.

Note

EHR Safe Harbor Permanent

The existing electronic health records items and services Safe Harbor in 42 CFR Section 1001.952(y) was amended by deleting the sunset provision, thereby making the protection permanent.

Cybersecurity Technology and Services

A new Safe Harbor for cybersecurity and technology services is added in 42 CFR Section 1001.952(jj) to facilitate improved cybersecurity. 

On December 2, 2020, the Department of Health and Human Services (HHS), the Office of Inspector General (OIG) and the Center for Medicare and Medicaid Services (CMS) will jointly publish the final regulations first proposed on October 17, 2019:

1.     AKS Safe Harbors: https://public-inspection.federalregister.gov/2020-26072.pdf
2.     Stark Exceptions:  https://public-inspection.federalregister.gov/2020-26140.pdf

The regulations will become effective January 19,

The Taskforce on Telehealth Policy (TTP) conveyed by NCQA, the Alliance for Connected Care, and the American Telemedicine Association (ATA) issued a report urging the retention of the new policies on telehealth issued by CMS during the COVID-19 Public Health Emergency (PHE).  Use this link to view the report.

On September 24, 2020, President Trump issued an Executive Order encouraging Congress to restrict surprise billing and prevent third party payors from denying care to patients with pre-existing conditions.  President Trump wants Congress to act prior to the end of the year, but obviously there is not much chance of that happening.

Most medical practices view HIPAA compliance as maintaining appropriate documentation regarding patient notices and consents, and controlling access to the PHI within the office; that’s PRIVACY.  Practices tend to forget the technology/security side of HIPAA, which requires maintaining, or reasonably attempting to maintain, secure EHR/IT systems; that’s SECURITY.

Athens Orthopedic Clinic PA agreed to pay