Viewing ‘Practice Management’ Category

How the use of Medicare Data to generate Performance Measurements affects Physicians?

Centers for Medicare & Medicaid Services (CMS), HHS recently issued final rules pursuant to the Patient Protection and Affordable Care Act, (Pub. L. 111-148), enacted on March 23, 2010, and the Health Care and Education Reconciliation Act of 2010, (Pub. L. 111-152), enacted on March 30, 2010 (collectively the “Affordable Care Act.”) Effective January 1, 2012, the Affordable Care Act would amend the Social Security Act (the “Act”) to require standardized extracts of Medicare claims data under parts A, B, and D to be made available to “qualified entities” for the evaluation of the performance of providers and suppliers. Qualified entities may use the information obtained the Act for the purpose of evaluating the performance of providers and suppliers, and to generate public reports regarding such performance (the “Performance Reports”). Qualified entities may receive data for one or more specified geographic areas. Congress also required that qualified entities combine claims data from sources other than Medicare with the Medicare data when evaluating the performance of providers and suppliers.

A.     What will be published in the Performance Reports?

Performance Reports generated by the qualified entities may only include information on individual providers and suppliers in aggregate form, that is, at the provider or supplier level, and may not be released to the public until the providers and suppliers have had an opportunity to review them and, if necessary, ask for corrections.

B.     How can the qualified entity use of the Medicare Claims Data?

The statute bars the re-use of the Medicare claims data provided to qualified entities under the Act. The qualified entity “shall only use such data, and information derived from such evaluation” for Performance Reports on providers and suppliers. Additionally, the Data Use Agreement between the qualified entity and CMS (the “DUA”), bars re-use of the data for other purposes. The Act does not address the use of the published Performance Report. Subject to any limitations imposed by other applicable laws, the Performance Reports could be used by any party, including the qualified entity, for activities such as internal analyses, pay-for-performance initiatives, or provider tiering.

C.     What can Physicians do to correct issues with Performance Reports?

The Act requires the Performance Reports to be made available to the public after they are made available to providers and suppliers for review and requests for corrections. Each provider or supplier will confidentially receive any Performance Report where they are identified. It is the responsibility of the qualified entity to ensure that the data is delivered using a secure method to the appropriate provider or supplier.

D.     How long do physicians have to review and provide comments before the Performance Report is published?

CMS requires that qualified entities publicly report measure results on the date specified to the provider or supplier when the report is sent for review (at least 60 days after the date on which the confidential reports are sent to a provider or supplier), regardless of the status of a request for error correction.

E.     How many Performance Reports will Physicians have to deal with?

CMS does not intend to limit the number of qualified entities accepted for participation into the program, and therefore, it is possible that there will be more than one qualified entity working in the same geographic area and publish Performance Reports for that geographic area.

F.     How much will it cost a Physician to review a Performance Report and provide comments?

Physicians who receive the Performance Reports have no obligation to review them. CMS assumes that those who do review the Performance Reports would devote and average of five hours to reviewing them at an average cost of $214.00 for physician offices. For those who appeal CMS assumes that preparing the appeal would involve an average of ten hours of effort on the part of a physician at an average cost of $429 for physician offices. The latter amount includes CMS’ assumption that 50 percent of the providers and suppliers who decide to appeal would hire consultants to assist with the appeals process.

G.     Will the Performance Reports be published in standard formats?

 CMS does not intend to standardize the Performance Reports, so each qualified entity will be able to publish Performance Reports in different formats.

 H.     Must the Performance Reports be published? How frequently will the reports be published?

Qualified entities are not allowed to produce Performance Reports for confidential use only, thus the reports must be published. There is no requirement in the Act on the frequency of public reporting, so CMS adopted a rule of once per year. Reporting once per year is the minimum requirement. A qualified entity may choose to report more frequently than once per year, as long as it is still able to meet the requirement of allowing providers and suppliers the opportunity to review and request error correction in the Performance Reports.

I.     How fresh will be the Medicare claims data that CMS provides?

CMS will provide qualified entities with the most recent available historical data, which, for qualified entities approved at the beginning of the program, CMS expects to include data for CY2009, CY2010, and the first two quarters of 2011. Then, CMS would provide quarterly data updates on a rolling basis.

J.     Will the qualified entity have all of the claims for a physician?

CMS will release claims based on the location of the beneficiary residence, not the location of the provider or supplier rendering the services. This will mean the qualified entity might not receive all of the Medicare claims for a given provider or supplier.

This is the the link to the release of the final rule by CMS:  http://www.ofr.gov/OFRUpload/OFRData/2011-31232_PI.pdf

Penalties Under The HITECH Act

Initially it was unclear whether the criminal penalties for breaches of HIPAA were applicable to persons other than covered entities and business associates. In fact, the Department of Justice adopted the position that only covered entities and directors, officers and employees are subject to prosecution. Under the HITECH Act, Congress dealt with this ambiguity by stating that criminal penalties are applicable to persons other than covered entities.

The HITECH Act added that civil money penalties could be imposed for willful neglect along with knowing violations of HIPAA. The HITECH Act also implemented tiered civil penalties the severity of which depended on the nature of the violation. Violations due to willful neglect are now subject to civil money penalties and the Secretary of the Department of Health and Human Resources will be required to investigate such violations based on a complaint starting in 2011. There are four tiers of violations under the HITECH Act amendments.

 

 Tier Nature of Violation Range of Penalties
A Breach of HIPAA that is not known by the covered entity or could not have been known by exercising reasonable diligence Each violation = $100

Total amount of $25,000 for all violations of an identical requirement or prohibition in a calendar year

 

B Breach of HIPAA due to reasonable cause and not due to willful neglect Each violation= $1,000

Total amount of $100,000 for all violations of an identical requirement or prohibition in a calendar year

 

C Breach of HIPAA due to willful neglect which is corrected during the 30-day period beginning on the first date the person liable for the penalty or damages knew Each violation= $10,000

Total amount of $250,000 for all violations of an identical requirement or prohibition in a calendar year

 

D Breach of HIPAA due to willful neglect which is not corrected during the 30-day period beginning on the first date the person liable for the penalty or damages knew Each violation= $50,000

Total amount of $1,500,000 for all violations of an identical requirement or prohibition in a calendar year

 

All of the penalties imposed on any violator for any tier shall be limited to $1,500,000.

Written Notification Under The HITECH Act

In the event that a breach requiring notification under the HITECH Act occurs the covered entity or business associate must provide notification to the individuals affected by the breach. The outline below sets forth the requirements on such notices.
A. Timing of Notification:
i. Notification must be provided without unreasonable delay
ii. No later than 60 days after discovery of the breach
iii. A breach is discovered when it is first known to the covered entity or business associate
iv. “Known” means to the knowledge of an employee, officer or agent, other than the person committing the breach
v. Since the business associate must inform the covered entity of its breach, the clock does not start for the covered entity until it is informed by the business associate
vi. Notice may be delayed if a law enforcement official determines that it will adversely affect a criminal investigation or national security
B. Method of Notification
i. Notice must be provided in writing
ii. Notice must be sent by first class mail to the last known address or the next of kin
1) Electronic mail may be used if the individual expressed a preference
iii. If the contact information is out of date then a substitute method is required
1) If 10 or more individuals require this alternative method then the notice must conspicuous and for a length of time set by the Secretary of HHS
I. Alternative methods can be
a. On the home page of the website of the covered entity or business associate, or
b. In prominent media outlets (print or broadcast), including media outlets where affected individuals reside
c. These alternative methods must include a toll free number
iv. In addition to the above methods, a telephone call to affected individuals is permitted if there is high risk of “possible imminent misuse of unsecured” PHI
v. If a breach involves 500 or more residents of a defined geographic area, in addition to the above methods
1) Prominent media outlets shall be used to provide notification
2) HHS must also be notified immediately if unsecured PHI of 500 or more individuals is acquired or disclosed
I. Otherwise only a log has to be maintained which is submitted to HHS annually
II. HHS will publicly identify each reporting covered entity on its website and report them to Congress annually
C. Content of Notification
i. Regardless of the form all notifications must set forth:
1) Description of the breach and timing
2) Nature of the unsecured PHI subject to the breach
3) What affected individuals can do to protect themselves
4) Description of the efforts to investigate the breach, mitigate the harm and limit future breaches
5) How affected individuals may contact the covered entity or business associate to get assistance and access more information

Ready To Stop Leasing And Start Owning Your Practice Location?

Tampa Waterfront

EVALUATING LEASING VS. OWNING

In today’s commercial real estate market one of the most important financial decisions that a medical practice (whether a solo or group) can make is whether to enter into a lease or build an owned facility. The focus of this article is to provide practices with the tools to evaluate whether entering into or continuing a lease is preferable to owning their own facilities.

SEVEN IMPORTANT LEASE TERMS THAT HAVE MATERIAL LEGAL AND FINANCIAL CONSEQUENCES TO THE OPERATION OF A PRACTICE (HOW MUCH IS YOUR LEASE REALLY COSTING YOU?)

There are more than seven issues that a practice could consider, however, in general the ones listed below are the most important ones:

1. Lease Term And Extension Rights: The initial term of the lease should cover the depreciation period and investment return time line of any leasehold improvements. The renewal periods should provide a sufficient length of time to protect the practice from any major adjustments in the basic lease payments and costs. The practice’s rights to extend the lease must, among other things, provide it with time to review alternatives and the ability to understand how the lease payments will be calculated for the next lease term.

2. Operating Costs: The lease terms should be clear on what the practice is paying for other than the lease payment and how those expenses will be calculated.

3. Assignment And Subletting: The practice’s right to sublet or assign can be important when considering a move to another location. In connection with an assignment, the financial responsibility under the lease should be transferred after some period of time.

4. Non-competition Restrictions: The last thing a practice needs is another practice providing the same services at the same building or commercial development.

5. Guaranty: A personal guaranty should be avoided and, if not, then the terms should be reasonable so that the landlord does not avoid its responsibility to mitigate its damages.

6. Relocation Rights: The right to relocate within the building or commercial development in connection with a disaster or eminent domain should ensure that the replacement facilities are at least equal to the abandoned facilities and require that appropriate adjustments are made to the lease payments and operating costs.

7. Indemnity: The indemnification terms should be mutual between the landlord and practice and set forth the required insurance each party secures. The grounds for indemnification should be reasonable, i.e. the practice should not be responsible for anything out of its control.

FIVE LEGAL ISSUES TO FACTOR INTO YOUR EVALUATION OF A LEASE VS. OWNERSHIP OF YOUR OWN FACILITY (HOW TO DETERMINE IF OWNING A PRACTICE LOCATION IS RIGHT FOR YOU?)

1. Property Acquisition Agreement: The agreement should clearly and correctly state what the practice is buying and the quality of the title. Both are fundamental issues that can affect the success of securing bank financing of the property acquisition.

2. Loan Documentation: The practice should determine whether the loan may be an acquisition loan and/or a construction loan. The timing of when the practice starts repaying the loan should be considered in conjunction with when the practice starts occupying its facilities. The terms of personal guaranties of the equity owners should contemplate whether the practice will expand or decrease the number of equity owners.

3. Construction/Development Agreement: The agreement should explicitly set forth time lines for project deliveries by the contractor and penalties for failures to deliver. The practice should know the financial stability of its contractor and its past history in completing similar projects.

4. Zoning and Permitting: Even before proceeding with the acquisition of the property, the practice should understand whether the proposed location is zoned for its business and what types of permits are required for its operations. The practice should also know how difficult it will be to get a zoning or permitting waiver or a change (i.e., cost and time).

5. Premises Liability: The practice now has more responsibility as the owner, but it also has more control over the facility to ensure that the risks are being handled appropriately.

The foregoing article provides only a brief overview of the material issues and every issue may not necessarily apply to each practice and its circumstances. Hopefully, this will serve a starting point of the analysis of the issues facing a practice as it determines whether to lease or build its own facility.