• More of our health information is becoming digital every day, as new technology companies enter the health care and wellness markets.
  • Many companies that hold a wealth of consumer health information are not covered by HIPAA.
  • Many consumers may not realize that their health information only is protected and they only have certain rights with respect to that information when it is held by certain entities, but not when it is held by others.
  • The private sector should work with regulators to develop a common sense, appropriate framework for use of health information by non-HIPAA covered entities.

As we await proposed HHS regulations on interoperability and patient access to data, and as more companies than ever before are collecting and using data to power advanced data analytics, artificial intelligence, and machine learning to improve health care quality and delivery, it is important to understand the scope and limitation of protections and the applicability of the HIPAA Privacy Rule.

Patients, providers and caregivers now have access to a wide array of devices and applications to manage and track patient health, improve treatment adherence, and better coordinate care. Large technology companies, athletic gear manufacturers, and others are entering a rapidly growing consumer health technology market. They are developing new technologies including tracking apps, wearables, and social networks that are increasingly integrated into patients’ daily lives. With an estimated 86.7 million U.S. consumers owning wearable devices by 2019, patients are generating billions of data points that provide insight into their health. Yet many of these companies are not subject to existing privacy protections under HIPAA, creating a significant gap in consumer protections.

At the same time, HHS is pushing for greater interoperability and patient access to data to address a challenge that remains widespread even after the investment of billions of federal dollars into the adoption of electronic health records. Agencies are encouraging and mandating easier availability of electronic health data, through current and anticipated CMS and ONC regulations and through a variety of government initiatives such as: 1) Blue Button and MyHealtheData; 2) incentivizing the adoption of open APIs; 3) developing new fee-for-service payment policies regarding remote monitoring and virtual care reimbursement; and 4) launching Sync for Science, a technical standard for facilitating patient-mediated data exchange for research. Consumers and companies alike seek guidance on the implications of collecting, storing, maintaining, and commercializing personal health data. Continue Reading Closing the Health Information Privacy Divide

The New York State Attorney General (the ”AG”) recently issued new standards of review for the sale of all or substantially all assets of not-for-profit nursing homes which should be of keen interest to both not-for-profit providers and prospective for-profit purchasers.  See http://www.charitiesnys.com/pdfs/NursingHomeSales.pdf (the “Guidance”). After noting the significant increase in efforts to sell nonprofit nursing homes to for-profit entities since 2014 in New York, the Guidance expresses “significant concern”  regarding the “effort and success” by not-for-profit Boards of Directors and their advisors in evaluating whether the terms of the sale or transfer, and the intended use of the proceeds of the sale, will “promote the mission and purposes “ of the charity.  The Guidance recommends “best practices” for nursing home Boards and their advisors in considering a sale to assist them in the exercise of their fiduciary duties to charitable beneficiaries, including nursing home residents.

It also sets forth specific new factual representations that the AG will require to be made by the seller seeking approval of the sale of all or substantially all nursing home assets. Not-for-profit providers in New York State and any entity interested in a transfer of the assets of such providers are well advised to seek legal, financial and other professional assistance to prepare for the due diligence now required by the Guidance.

The Centers for Medicare & Medicaid Services (CMS) recently proposed a rule to allow Medicare Advantage plans to expand telehealth benefit coverage. (See alert for more detail) This proposed rule implements the statutory provisions in section 50323 the Bipartisan Budget Act of 2018. What you might not know, however, is that the Bipartisan Budget Act of 2018 is only one of many legislative vehicles by which advocates for telehealth expansion have been able to move the needle definitively in their favor during this session of Congress.

Over the past two years, Congress has shown its support for the utilization of telehealth by introducing forty-one bills that, if passed, would require Medicare to reimburse providers for their use of telehealth to treat numerous health conditions such as stroke diagnosis, mental health, chronic care management and opioid addiction treatment. Of note, the Creating High-Quality Results and Outcomes Necessary to Improve Chronic (CHRONIC) Care Act of 2017 was the predecessor bill that passed out of the Senate in September of 2017 and became law on February 9, 2018 as a part of the Bipartisan Budget Act of 2018. Continue Reading Government Affairs – The Progress of Telehealth Bills in Congress

In its recent notice of proposed rulemaking setting policy for Medicare Advantage (MA) and the Prescription Drug Program (PDP) for calendar year 2020, CMS announced that it would establish extrapolation as a method to be used in risk adjustment validation (RADV) audits, and further, that it would not make any adjustments to account for errors in Medicare fee for service data in determining recovery amounts.

CMS uses a risk adjustment process to modify MA plan payments to better reflect the relative risk of each plan’s enrollees. Payments to each MA plan are adjusted based on risk scores that reflect enrollees’ health status (categorized into Hierarchical Condition Categories (HCCs)) and demographic characteristics derived from member claims data. To counteract incentives that a plan might have to over-report enrollee diagnoses, CMS emphasizes that all diagnoses submitted to enhance risk must be documented in a medical record, and uses RADV audits to ensure that medical record documentation exists, and thus, that payments to MAOs accurately reflect the level of risk assumed. Continue Reading CMS Announces and Solicits Comments on Expanded RADV Audit Methodology

This blog post has been prepared in collaboration with Nemours. Ms. Boyer is a Manager of Nemours Children’s HospitalMaya Upplauru is an associate in Crowell & Moring’s Health Care Group in Washington, D.C.

This Bulletin is brought to you by AHLA’s Children’s Health Affinity Group, which is part of the Academic Medical Centers and Teaching Hospitals and In-House Counsel Practice Groups.

One of the most fear-inducing experiences for new and first-time parents is the middle of the night illness of a young child. Many may head directly to the emergency department (ED) because they lack any means to communicate with their health care provider after-hours. Parents of children with chronic conditions or rare diseases are often forced to travel long distances to see specialists at regional centers of excellence and may struggle to check in or get questions answered once they are back at home. Teenagers managing chronic conditions may prematurely discontinue their treatment plan when they transition to college in a different state or when they enter the working world after college. Continue Reading Delivering Virtual Pediatric Care Across State Lines: Regulatory Barriers and Opportunities

In the most recent technical changes made to Part C and Part D plans for 2019, CMS codified the star ratings methodology in regulations. Now, CMS is proposing changes to these regulations, such as new definitions to clarify the meaning of terminology used in describing the star ratings methodology. In addition, CMS is proposing several changes to improve program quality and accessibility of the Medicare Advantage (MA) and Part D Prescription Drug Program (PDP) Plan Quality Rating for measures other than Consumer Assessment of Healthcare Providers and Systems (CAHPS).

Continue Reading MA/PDP Star Ratings: Proposed Technical Changes for 2020

On November 1, 2018, the Centers for Medicare & Medicaid Services (“CMS”) filed the pre-publication version of the CY 2019 Physician Fee Schedule Final Rule (“2019 PFS Final Rule”). Within this massive publication, CMS finalized two regulatory changes affecting the exceptions at 42 CFR § 411.357 to the Physician Self-Referral Law (also known as the “Stark Law”) for compensation arrangements. The 2019 PFS Final Rule reconciles the regulations with the statutory changes made to the Stark Law enacted by the Bipartisan Budget Act of 2018 (“2018 BBA”) with respect to (1) how arrangements may fulfill the “writing” requirement under the compensation exception and (2) how arrangements that initially proceed without a signed agreement may still meet the signature requirement of an applicable exception. Parties to financial arrangements in effect on or after February 9, 2018 that implicate the Stark Law may rely upon these new modifications.

The Stark Law generally prohibits a physician from making a referral of designated health services (“DHS”) to an entity with which he or she (or an immediate family member) has a financial relationship. Section 411.357 details several excepted compensation arrangements carved out from the “financial relationship” definition for the purposes of the Stark Law. These exceptions include arrangements for the rental of office space and equipment, bona fide employment relationships, group practice arrangements with hospitals, certain fair-market-value compensation arrangements, among others. Continue Reading 2019 Physician Fee Schedule Rule Modifies Stark Regulations to Reflect Statutory Changes

CMS has finalized the adoption of multiple CPT codes in the CY 2019 PFS that create more opportunities for providers and digital health companies to collaborate on chronic care management business models in the fee-for-service market.

Virtual Check-Ins

CMS finalized the creation of a new code to reimburse providers for brief “check-in” services conducted using communications technology by creating HCPCS code G2012, defined as “[b]rief communication technology-based service, e.g. virtual check-in.” Continue Reading Digital Health Updates in the 2019 Physician Fee Schedule (PFS) Rule

Yesterday, the FDA released draft guidance on the management of cybersecurity in medical devices submitted to the agency for premarket review. Noting that cybersecurity threats to the healthcare sector have increased in number and severity, the FDA offered new recommendations for device design, labeling, and documentation that medical device manufacturers will need to consider during premarket submission processes.

The guidance comes shortly after the FDA’s launch of its Medical Device Cybersecurity Playbook, which provides a framework for healthcare delivery organizations to use in preparing for and responding to cybersecurity threats against patient medical devices.

Given rapid changes in technology and increasing innovation in the digital health market, the guidance intends to decrease the risk of cyberattacks that could render medical devices inoperable and potentially harm patients. Comments on the draft guidance are due on March 18, 2019. Continue Reading FDA Issues New Guidance for the Management of Cybersecurity in Medical Devices

On October 15, 2018, the Centers for Medicare & Medicare Services (“CMS”) in the Department for Health and Human Services proposed a rule to require prescription drug manufacturers to post the Wholesale Acquisition Cost (“WAC”) for drugs and biological products covered by Medicare or Medicaid in direct-to-consumer television advertisements. The WAC reflects the manufacturer’s list price for a drug to direct purchasers, not inclusive of any discounts or rebates. CMS is proposing this rule in the context of broadcast advertisements, an area in which the Supreme Court has recognized that the government may take special steps to help ensure that viewers receive appropriate information.[1]

CMS stated that 47 percent of Americans have high-deductible health plans and that many patients may pay the list price of the drug until they meet their deductible. The proposed rule aims to provide greater transparency into the prices charged by prescription drug manufacturers. The theory is that markets operate more efficiently with greater transparency, and that increased exposure of the list price will also provide a moderating force to discourage price increases. While wholesale prices do not equate to the patient’s out-of-pocket obligation, CMS asserts that benefit designs are impacted by WACs, and patients in high-deductible plans may pay the full list price until meeting their deductible – thus, the WAC may still be relevant to many patient and impact their decisions and market dynamics. The price required to be posted would be for a typical course of treatment for an acute medication like an antibiotic, or a thirty day supply of medication for a chronic condition that is taken every month. The posting would take the form of a legible textual statement at the end of the ad and would not apply where the list price for a thirty day supply or typical course of treatment of a prescription drug was less than $35. Continue Reading CMS PROPOSES RULE TO REQUIRE PRESCRIPTION DRUG MANUFACTURERS TO DISCLOSE DRUG PRICES IN TV ADS