Medicaid

Published on: December 7, 2023

HHS OCR Announces First Ransomware Resolution Agreement and Corrective Action Plan

The Department of Health and Human Services (HHS) Office of Civil Rights (OCR) recently entered into a first of its kind resolution agreement and corrective action plan to settle potential HIPAA violations arising out of a ransomware attack. The agreement to settle alleged HIPAA violations was entered into with Doctors’ Management Services (DMS), a practice management company acting as a business associate to several covered entities.

By way of background, in April 2019, OCR opened an investigation based on a breach report from DMS. The report stated that approximately 206,695 individuals were affected when the DMS network server was infected with ransomware. The initial unauthorized access to the network occurred several years prior. However, DMS did not detect the intrusion until late 2018 after ransomware was used to encrypt their files. Based on its investigation, OCR alleged that:

DMS failed to conduct an accurate and thorough risk analysis that assessed technical, physical, and environmental risks and vulnerabilities associated with handling electronic patient health information (ePHI);

Published on: November 20, 2023

OIG Issues New General Compliance Program Guidance

by Wachler & Associates, P.C.

In November 2023, the Department of Health and Human Services (HHS) Office of Inspector General (OIG) released its General Compliance Program Guidance (GCPG). This guidance was released as part of OIG’s Modernization Initiative, which seeks to make compliance program guidance more user friendly and accessible. The document does not include new information but instead summarizes existing guidance regarding fraud and abuse risk, serving as an up-to-date comprehensive reference guide for the general healthcare community and industry stakeholders. OIG also noted that in 2024 it will begin publishing industry segment-specific CPGs (ICPGs) which will address compliance measures for industry subsectors.

The GCPG is not legally binding on any individual or entity, but contains valuable information regarding compliance with federal fraud and abuse statutes and regulations. The OIG guidance includes information regarding key fraud and abuse laws, the primary elements of an effective compliance program, program adaptations for small and large entities, other compliance considerations, and OIG resources and processes.

The GCPG begins with an overview of the principal federal fraud and abuse laws including the Anti-Kickback Statute (AKS), the Physician Self-Referral Law (PSL; also known as the “Stark law”), the False Claims Act (FCA), and the Civil Monetary Penalty law (CMP). Their stated goal in summarizing these laws is to “create awareness and provide tools and resources to aid compliance efforts in both preventing violations and identifying potential red flags early with respect to these laws and regulations.”

Published on: November 8, 2023

WHO Publishes AI Considerations in Healthcare

by Wachler & Associates, P.C.

In light of the rapid technological advancements and increasing utilizations of artificial intelligence (AI), the World Health Organization (WHO) issued a publication outlining key regulatory considerations on AI for healthcare. The publication highlights emerging best practices for the development and use of AI in healthcare and aims to lay out an overview of regulatory considerations on AI for healthcare covering six general topic areas discussed below.

As the publication explains in greater detail, the WHO recommends that stakeholders take into account the following considerations as they continue to develop frameworks and best practices for the use of AI in healthcare:

Documentation and transparency: Pre-specifying and documenting the intended medical purpose and development process should be considered in a manner that allows for the tracing of the development steps as appropriate. A risk-based approach should also be considered for the level of documentation and record-keeping utilized for the development and validation of AI systems.

Published on: October 30, 2023

CMS Expansion of Revocation Authority Requires Increased Diligence in Audit Response

by Wachler & Associates, P.C.

In November 2021, the Centers for Medicare & Medicaid Services (CMS) published a final rule expanding their ability to revoke Medicare billing privileges of providers and suppliers. This rule went into effect January 1, 2022, and has significantly increased the importance of a diligent and careful response when faced with a CMS audit.

Prior regulations required CMS to consider the following three factors when determining whether a provider or supplier was engaged in the type of billing practices which could support a revocation: (1) the reason for any claim denials, (2) the length of time over which any pattern or practice of submitting claims that fail to meet Medicare requirements occurred, and (3) how long the provider or supplier had been enrolled in Medicare.

CMS asserted that these three considerations inhibited their ability to “target brief periods involving a significant percentage of denied claims” and therefore proposed revisions to this framework which it believed would strengthen CMS’ overall program integrity efforts. The new framework now considers the following four factors:

Published on: October 23, 2023

OIG Updates Work Plan for October 2023

by Wachler & Associates, P.C.

The Department of Health and Human Services (HHS) Office of Inspector General (OIG) announced several new changes in its Work Plan update for October 2023. The OIG Work Plan forecasts the projects that OIG plans to implement over the foreseeable future. These projects usually include OIG audits and evaluations. Below are the highlights from the Work Plan update of which providers and suppliers should take notice.

First, OIG will perform an audit of the Morehouse School of Medicine’s National Infrastructure for Mitigating the Impact of COVID-19 (NIMIC) initiative. The NIMIC initiative is a 3-year, $40 million cooperative agreement between HHS’s Office of Minority Health and the Morehouse School of Medicine to fight COVID-19 in racial and ethnic minority, rural, and socially vulnerable communities. The Morehouse School of Medicine is leading the initiative to coordinate a strategic network to deliver COVID-19 related information to communicates hit hardest by the pandemic.

Second, OIG will audit the accuracy of the Child Care and Development Fund (CCDF) attendance records at Minnesota child care centers. The CCDF is the primary federal funding source devoted to subsidizing the child care expenditures of low-income families. OIG has stated that it identified issues with the completeness and accuracy of child care attendance records and with related billings for child care services. Minnesota, as well as possibly additional states, have been selected by OIG for a review to determine whether the state(s) complied with federal and state requirements related to attendance records and whether payments for services at child care centers were allowable.

Published on: October 19, 2023

Employee Safe Harbor Protections Affirmed in Recent OIG Advisory Opinion

by Wachler & Associates, P.C.

On October 10, 2023, the Department of Health and Human Services (HHS) Office of Inspector General (OIG) issued an advisory opinion reinforcing the broad protection of physician employees under the safe harbor provision of the Anti-Kickback Statute (AKS). The AKS is a federal criminal law which prohibits payment for the inducement or reward of patient referrals or generation of business where any item or service payable by a federal healthcare program is involved. Remuneration under the law has been interpreted to mean “the transfer of anything of value, directly or indirectly, overtly or covertly, in cash or in kind.” Violation of the AKS can result in severe penalties, including imprisonment of up to 10 years, a maximum fine of $100,000, and exclusions from Medicare and Medicaid reimbursement.

There are several statutory and regulatory exceptions to the AKS, which allow for specific remuneration arrangements when certain criteria are met. One statutory exception protects payments made by employers to employees who are in bona fide employment relationships for providing covered items and services under the employment agreement. Similarly, safe harbor regulations have been promulgated by HHS which clarify that “remuneration” under the AKS does not include payments under the bona fide employer-employee relationship described above.

In the recent advisory opinion, the OIG considered whether employer payment of bonuses based on net profits to employed physicians in a multi-specialty ambulatory surgery center (ASC) would constitute a violation of the AKS. The employer practice operated two separate ASCs – noted to be divisions and not subsidiaries – and planned to compensate physician employees via a bonus structure where employed physicians who performed procedures at the ASCs would receive 30% of the practice’s net profits in addition to base employment compensation. The OIG concluded that this type of arrangement would not violate the terms set forth in the AKS.

Published on: October 2, 2023

OIG Announces Plan to Investigate Managed Care Contracts

by Wachler & Associates, P.C.

In August 2023, the Department of Health and Human Services (HHS) Office of Inspector General (OIG) announced its strategic plan to investigate the life cycle of Medicare and Medicaid managed care contracts. OIG’s plan will scrutinize these contracts from inception through enrollment, reimbursement, services, and renewal. In order to address fraud, waste, and abuse risks, the goal of OIG’s plan is to hold accountable Medicare Advantage organizations (MAOs) and Medicaid managed care organizations (MCOs).

Currently, more than half of Medicare enrollees and more than 80% of Medicaid enrollees are covered by managed care programs. In order to oversee the approximate $700 billion that the federal government spent on managed care programs in 2022, OIG has set out four phases of managed care that it intends to investigate: (1) plan establishment and contracting, (2) enrollment, (3) payment, and (4) provision of services.

In the first phase, OIG intends to review activities that occur when the Centers for Medicare & Medicaid Services (CMS) or states initially establish or renew managed care contracts. In this contract review phase, OIG will evaluate whether MAOs and MCOs are providing the government with accurate information, including in their bids, and abiding by the contract terms for their plan design, service offerings, and coverage area. In the second phase, OIG will review enrollment processes. Specifically, OIG will focus on potentially aggressive marketing campaigns and inaccurate information collection.

Published on: September 1, 2023

CMS Announces New Voluntary Primary Care Model in Eight States

by Wachler & Associates, P.C.

The Centers for Medicare & Medicaid Services (CMS) recently announced the Making Care Primary (MCP) Model, a new voluntary primary care model that will be tested in eight states. The new model aims to improve care management and care coordination, equip primary care clinicians with tools to form partnerships with healthcare specialists, and leverage community-based connections to address patients’ health needs as well as their health-related social needs, such as housing and nutrition. CMS plans to work with eight state Medicaid agencies to engage in full care transformation across payers, with plans to engage private payers in the future. The MCP Model is slated to launch July 1, 2024 in eight participating states – Colorado, North Carolina, New Jersey, New Mexico, New York, Minnesota, Massachusetts, and Washington.

The MCP Model is a 10.5-year multi-payer model with three participation tracks that build upon previous primary care models. MCP’s overarching goal is to improve care for beneficiaries by supporting the delivery of advanced primary care services, which are foundation for a high-performing health system. To achieve this goal, the Model will provide a pathway for primary care clinicians with varying levels of experience in value-based care to gradually adopt prospective, population-based payments while building infrastructure to improve behavioral health and specialty integration and drive equitable access to care. The Model also attempts to strengthen coordination between patients’ primary clinicians, specialists, social service providers, and behavioral health clinicians, ultimately leading to chronic disease prevention, fewer emergency room visits, and better health outcomes.

Three domains define the MCP Model’s care delivery approach:

Published on: August 14, 2023

CMS Announces GUIDE: A Medicare Dementia Care Model

by Wachler & Associates, P.C.

On July 21, 2023, the Centers for Medicare & Medicaid Services (CMS) announced a new payment model for providers furnishing dementia care, called Guiding an Improved Dementia Experience (GUIDE). A wide range of Medicare Part-B providers and suppliers are eligible to participate, with the exception of durable medical equipment and laboratory suppliers. The model is a comprehensive package of person-centered assessments, care plans, and care coordination. Additionally, this new payment model aims to further enhance the quality of life for people living with dementia by improving dementia care, reducing strain on unpaid caregivers, and helping people with dementia remain in their homes and communities.

GUIDE’s approach to dementia care takes into account staffing considerations, quality standards, and services for beneficiaries and unpaid caregivers. Under the GUIDE model, beneficiaries are required to be screened for psychological and health-related social needs. As a GUIDE participant, providers are required to establish and maintain an interdisciplinary team consisting of a care navigator and a clinician, with the option of including additional members. The care navigator must have training in care planning and dementia assessment while the clinician is required to have dementia proficiency through experience caring for patients 65 years or older and for adults with cognitive impairment. GUIDE participants are required to provide support services alongside caregiver training.

There are two options for providers considering implementing GUIDE:

Published on: August 7, 2023

CMS Proposes Extension of Virtual Direct Supervision

by Wachler & Associates, P.C.

On July 13, 2023, the Centers for Medicare & Medicaid Service (CMS) released the Calendar Year 2024 Physician Fee Schedule Proposed Rule, proposing to extend remote supervision. The proposed rule continues to define “direct supervision” by allowing supervising physicians and practitioners the ability to continue “direct supervision” through real-time audio and visual interactive telecommunications through December 21, 2024.

Typically, to be payable under Medicare Part B, specific types of services must be provided under certain levels of “direct supervision” by a practitioner or physician. These services often include many diagnostic tests and other services furnished by auxiliary personnel incident to the services of the billing physician. “Direct supervision” usually requires the “immediate availability” of a supervising professional — both in-person and physical availability. However, during the COVID-19 Public Health Emergency (PHE), CMS allowed flexibility in what constituted “direct supervision” by allowing “immediate availability” to include virtual presence using two-way, real-time audio or video technology, instead of requiring physical presence. This policy allowing remote direct supervision was originally set to expire at the end of 2023.

However, due to the increased reliance on virtual direct supervision by physicians and beneficiaries alike, CMS expressed several concerns regarding the expiration of the policy. In its proposed rule, CMS noted that, despite the new patterns of virtual direct supervision that were established and often maintained during the PHE, evidence showing that patient safety is compromised by virtual direct representation is entirely absent. Moreover, telehealth services have overall allowed individuals in rural and undeserved areas to have improved access to care. Expiration of this policy could create substantial barriers to access of many healthcare services, including those furnished incident-to a physician’s service.