Skip to main content
Subscribe
  • Login
  • My Account
  • Logout
  • Register For Free
  • Subscribe
  • News
    • Current News
    • Providers
    • Insurance
    • Government
    • Finance
    • Technology
    • Safety & Quality
    • Digital Health
    • Transformation
    • ESG
    • People
    • Regional News
    • Digital Edition (Web Version)
    • Patients
    • Operations
    • Care Delivery
    • Payment
    • Midwest
    • Northeast
    • South
    • West
  • Blogs
    • AI
    • Deals
    • Layoff Tracker
    • HLTH 2024
    • Sponsored Content: Vital Signs Blog
  • Opinion
    • Letters
    • From the Editor
  • Events & Awards
    • Awards
    • Conferences
    • Galas
    • Virtual Briefings
    • Webinars
    • Nominate/Eligibility
    • 100 Most Influential People
    • 50 Most Influential Clinical Executives
    • 40 Under 40
    • Best Places to Work in Healthcare
    • Healthcare Marketing Impact Awards
    • Innovators Awards
    • Diversity Leaders
    • Leading Women
    • Best in Business Awards
    • The 2030 Playbook Conference
    • Innovations in Patient Experience
    • Leading Women Conference & Awards Luncheon
    • Leadership Summit
    • Workforce Summit
    • Best Places to Work Awards Gala
    • Diversity Leaders Gala
    • - Looking Ahead to 2025
    • - Financial Growth
    • - Hospital of the Future
    • - Value Based Care
    • - Looking Ahead to 2026
  • Multimedia
    • Podcast - Beyond the Byline
    • Sponsored Podcast - Healthcare Insider
    • Sponsored Video Series - One on One
    • Sponsored Video Series - Checking In with Dan Peres
  • Data & Insights
    • Data & Insights Home
    • Hospital Financials
    • Staffing & Compensation
    • Quality & Safety
    • Mergers & Acquisitions
    • Skilled Nursing Facilities
    • Data Archive
    • Resource Guide: By the Numbers
    • Surveys
    • Data Points
  • Newsletters
  • MORE+
    • Contact Us
    • Advertise
    • Media Kit
    • Jobs
    • People on the Move
    • Reprints & Licensing
    • Sponsored Content
MENU
Breadcrumb
  1. Home
  2. Technology
September 20, 2013 12:00 AM

HHS makes last-minute changes to HIPAA privacy rule

Joseph Conn
  • Tweet
  • Share
  • Share
  • Email
  • More
    Reprints Print

    In the run-up to the Sept. 23 enforcement date for a host of revisions to federal health information privacy laws, one group—clinical laboratories—will get something of a respite, and another—pharmaceutical manufacturers—some regulatory relief.

    On Thursday, the Office for Civil Rights at HHS released three guides to the “omnibus” privacy and security rule as it impacts the Health Insurance Portability and Accountability Act of 1996, as well as a notice of an indefinite delay in the enforcement of the new rule's provisions that pertain to certain changes in the Clinical Laboratory Improvement Amendments of 1998, or CLIA. The changes affect the official notices providers must give patients under the law about their privacy practices, NPPs.

    HHS plans to issue an amendment to the CLIA regulations “in coming months,” according to Rachel Seeger, spokeswoman for the OCR, an arm of HHS that is the primary federal enforcement agency for the HIPAA privacy and security rule. Rather than forcing labs to revise the notices to comply with the omnibus rule timeline, and then redo them when the CLIA-specific changes are made, the OCR opted to delay enforcement until the new CLIA-specific rule is released.

    Another newly released document allows pharmaceutical companies more latitude to pay for refill notices mailed to patients that also serve as marketing for their products. A provision of the new privacy rule generally limits the use of patient information for marketing without their consent, but has an exception for refill reminders and other drug or biologics currently being prescribed to patients.

    Under current practices, providers and other HIPAA-covered entities may send such refill reminders to their patients, or hire outside “business associates” to send the reminders on their behalf. For doing so, providers can be paid by third parties, such as pharmaceutical companies or their marketing representatives. By one insider estimate, as many as 100 million of these mailed messages are sent out each year. Typically, drugmakers fund these refill reminder programs, which are operated by pharmacies for their products using patient information kept by the pharmacies.

    How much they could be paid became an issue after passage of the American Recovery and Reinvestment Act of 2009, which included several more stringent privacy provisions for health information, including one that that said third-party payments for these refill reminder programs must be limited to payments that are “reasonable in amount.”

    Congress left it to HHS to define what was reasonable. In the omnibus final rule it issued in January, HHS said the payments must be “reasonably related to the covered entity's (e.g., pharmacy's) cost of making the communication.” The preamble to that rule said if a payment “generates a profit or includes payment of other costs, such as financial remuneration, would run afoul of the act's 'reasonable in amount' language.”

    That language was challenged this summer by the Florham Park, N.J.-based Specialty Pharmacy Association of America, or SPAARx, which claims 3,500 members including specialty pharmacies, pharmacy manufacturers, payers and others organizations. In a letter to Susan McAndrew, deputy director for health information technology at the Office for Civil Rights, it complained HHS “is limiting remuneration to the specific direct cost” of the communication, such as drafting, printing and mailing, and that “does not fairly recognize the additional expenses of clinicians and staff that deliver therapy management traditionally telephonically.”

    SPAARx asked instead that HHS use a standard of “fair-market value” of the service to determine whether it meets the congressional limit of “reasonable in amount.” SPAARx pointed out that fair-market value is used by HHS in anti-kickback enforcement.

    In its guidance, the Office for Civil Rights appears to have attempted to split the baby.

    To HIPAA-covered entities, such as providers, payments by “a pharmaceutical manufacturer or other third party whose product is being described in the communication” may cover “only the reasonable direct and indirect costs related to the refill reminder or medication adherence program, or other excepted communications, including labor, materials and supplies, as well as capital and overhead costs.”

    But when the covered entity uses a business associate, “to assist in carrying out a refill reminder or medication adherence program, or to make other excepted communications,” the guidance says “the business associate may be paid by the third party (either directly or through the covered entity) only up to the fair market value of its services.”

    “We got lots of mail on this issue, including from Congress, so we took another cut at what would be a reasonable amount that would allow these types of communications to continue,” McAndrew said. “Back in the day it was just a refill reminder, but now they've going into these much more elaborate compliance reminder programs. So, in looking at weighting equities, we decided that for these business associates to allow them fair market value. With covered entities, we did go back to a more typical cost-based standard, although we did broaden the types of costs.”

    Other guides were issued by OCR on the privacy of information about student immunizations and on the handling of healthcare information for people who have died.

    Follow Joseph Conn on Twitter: @MHJConn

    Letter
    to the
    Editor

    Send us a letter

    Have an opinion about this story? Click here to submit a Letter to the Editor, and we may publish it in print.

    Recommended for You
    IU Health Methodist
    IU Health patient data compromised in cyberattack
    U.S. Food and Drug Administration (FDA)
    Upcoming FDA draft on pulse oximetry's racial bias draws questions
    Most Popular
    1
    Downside risk, upside payment highlight new CMS innovation agenda
    2
    UnitedHealth Group CEO Andrew Witty steps down
    3
    AI health risk assessments aim to boost Medicare Advantage pay
    4
    Why healthcare staffing companies are buying competitors
    5
    Docs set for Medicare pay hike under House GOP bill
    Sponsored Content
    Digital Health Intelligence Newsletter: Sign up to receive a twice-weekly (T, F) morning newsletter featuring the latest reporting on technologies, trends, players and money fueling the rapid changes in how healthcare is developed, paid for and delivered.
    Get Newsletters

    Sign up for enewsletters and alerts to receive breaking news and in-depth coverage of healthcare events and trends, as they happen, right to your inbox.

    Subscribe Today
    MH Magazine Cover

    MH magazine offers content that sheds light on healthcare leaders’ complex choices and touch points—from strategy, governance, leadership development and finance to operations, clinical care, and marketing.

    Subscribe
    Connect with Us
    • LinkedIn
    • Twitter
    • Facebook
    • RSS

    Our Mission

    Modern Healthcare empowers industry leaders to succeed by providing unbiased reporting of the news, insights, analysis and data.

    Contact Us

    (877) 812-1581

    Email us

     

    Resources
    • Contact Us
    • Help Center
    • Advertise with Us
    • Ad Choices
    • Sitemap
    Editorial Dept
    • Submission Guidelines
    • Code of Ethics
    • Awards
    • About Us
    Legal
    • Terms and Conditions
    • Privacy Policy
    • Privacy Request
    Modern Healthcare
    Copyright © 1996-2025. Crain Communications, Inc. All Rights Reserved.
    • News
      • Current News
      • Providers
      • Insurance
      • Government
      • Finance
      • Technology
      • Safety & Quality
      • Digital Health
      • Transformation
        • Patients
        • Operations
        • Care Delivery
        • Payment
      • ESG
      • People
      • Regional News
        • Midwest
        • Northeast
        • South
        • West
      • Digital Edition (Web Version)
    • Blogs
      • AI
      • Deals
      • Layoff Tracker
      • HLTH 2024
      • Sponsored Content: Vital Signs Blog
    • Opinion
      • Letters
      • From the Editor
    • Events & Awards
      • Awards
        • Nominate/Eligibility
        • 100 Most Influential People
        • 50 Most Influential Clinical Executives
        • 40 Under 40
        • Best Places to Work in Healthcare
        • Healthcare Marketing Impact Awards
        • Innovators Awards
        • Diversity Leaders
        • Leading Women
        • Best in Business Awards
      • Conferences
        • The 2030 Playbook Conference
        • Innovations in Patient Experience
        • Leading Women Conference & Awards Luncheon
        • Leadership Summit
        • Workforce Summit
      • Galas
        • Best Places to Work Awards Gala
        • Diversity Leaders Gala
      • Virtual Briefings
        • - Looking Ahead to 2025
        • - Financial Growth
        • - Hospital of the Future
        • - Value Based Care
        • - Looking Ahead to 2026
      • Webinars
    • Multimedia
      • Podcast - Beyond the Byline
      • Sponsored Podcast - Healthcare Insider
      • Sponsored Video Series - One on One
      • Sponsored Video Series - Checking In with Dan Peres
    • Data & Insights
      • Data & Insights Home
      • Hospital Financials
      • Staffing & Compensation
      • Quality & Safety
      • Mergers & Acquisitions
      • Skilled Nursing Facilities
      • Data Archive
      • Resource Guide: By the Numbers
      • Surveys
      • Data Points
    • Newsletters
    • MORE+
      • Contact Us
      • Advertise
      • Media Kit
      • Jobs
      • People on the Move
      • Reprints & Licensing
      • Sponsored Content