Skip to main content
Subscribe
  • Sign Up Free
  • Login
  • Subscribe
  • News
    • Current News
    • Providers
    • Insurance
    • Government
    • Finance
    • Technology
    • Safety & Quality
    • Digital Health
    • Transformation
    • ESG
    • People
    • Regional News
    • Digital Edition (Web Version)
    • Patients
    • Operations
    • Care Delivery
    • Payment
    • Midwest
    • Northeast
    • South
    • West
  • Opinion
    • Bold Moves
    • Breaking Bias
    • Commentaries
    • Letters
    • Vital Signs Blog
    • From the Editor
  • Events & Awards
    • Awards
    • Conferences
    • Galas
    • Virtual Briefings
    • Webinars
    • Nominate/Eligibility
    • 100 Most Influential People
    • 50 Most Influential Clinical Executives
    • Best Places to Work in Healthcare
    • Excellence in Governance
    • Health Care Hall of Fame
    • Healthcare Marketing Impact Awards
    • Top 25 Emerging Leaders
    • Top Innovators
    • Diversity in Healthcare
      • - Luminaries
      • - Top 25 Diversity Leaders
      • - Leaders to Watch
    • Women in Healthcare
      • - Luminaries
      • - Top 25 Women Leaders
      • - Women to Watch
    • Digital Health Transformation Summit
    • ESG: The Implementation Imperative Summit
    • Leadership Symposium
    • Social Determinants of Health Symposium
    • Women Leaders in Healthcare Conference
    • Best Places to Work Awards Gala
    • Health Care Hall of Fame Gala
    • Top 25 Diversity Leaders Gala
    • Top 25 Women Leaders Gala
    • - Hospital of the Future
    • - Value Based Care
    • - Hospital at Home
    • - Workplace of the Future
    • - Digital Health
    • - Future of Staffing
    • - Hospital of the Future (Fall)
  • Multimedia
    • Podcast - Beyond the Byline
    • Sponsored Podcast - Healthcare Insider
    • Video Series - The Check Up
    • Sponsored Video Series - One on One
  • Data Center
    • Data Center Home
    • Hospital Financials
    • Staffing & Compensation
    • Quality & Safety
    • Mergers & Acquisitions
    • Data Archive
    • Resource Guide: By the Numbers
    • Surveys
    • Data Points
  • Newsletters
  • MORE+
    • Contact Us
    • Advertise
    • Media Kit
    • Jobs
    • People on the Move
    • Reprints & Licensing
MENU
Breadcrumb
  1. Home
  2. Technology
September 20, 2013 01:00 AM

HHS makes last-minute changes to HIPAA privacy rule

Joseph Conn
  • Tweet
  • Share
  • Share
  • Email
  • More
    Reprints Print

    In the run-up to the Sept. 23 enforcement date for a host of revisions to federal health information privacy laws, one group—clinical laboratories—will get something of a respite, and another—pharmaceutical manufacturers—some regulatory relief.

    On Thursday, the Office for Civil Rights at HHS released three guides to the “omnibus” privacy and security rule as it impacts the Health Insurance Portability and Accountability Act of 1996, as well as a notice of an indefinite delay in the enforcement of the new rule's provisions that pertain to certain changes in the Clinical Laboratory Improvement Amendments of 1998, or CLIA. The changes affect the official notices providers must give patients under the law about their privacy practices, NPPs.

    HHS plans to issue an amendment to the CLIA regulations “in coming months,” according to Rachel Seeger, spokeswoman for the OCR, an arm of HHS that is the primary federal enforcement agency for the HIPAA privacy and security rule. Rather than forcing labs to revise the notices to comply with the omnibus rule timeline, and then redo them when the CLIA-specific changes are made, the OCR opted to delay enforcement until the new CLIA-specific rule is released.

    Another newly released document allows pharmaceutical companies more latitude to pay for refill notices mailed to patients that also serve as marketing for their products. A provision of the new privacy rule generally limits the use of patient information for marketing without their consent, but has an exception for refill reminders and other drug or biologics currently being prescribed to patients.

    Under current practices, providers and other HIPAA-covered entities may send such refill reminders to their patients, or hire outside “business associates” to send the reminders on their behalf. For doing so, providers can be paid by third parties, such as pharmaceutical companies or their marketing representatives. By one insider estimate, as many as 100 million of these mailed messages are sent out each year. Typically, drugmakers fund these refill reminder programs, which are operated by pharmacies for their products using patient information kept by the pharmacies.

    How much they could be paid became an issue after passage of the American Recovery and Reinvestment Act of 2009, which included several more stringent privacy provisions for health information, including one that that said third-party payments for these refill reminder programs must be limited to payments that are “reasonable in amount.”

    Congress left it to HHS to define what was reasonable. In the omnibus final rule it issued in January, HHS said the payments must be “reasonably related to the covered entity's (e.g., pharmacy's) cost of making the communication.” The preamble to that rule said if a payment “generates a profit or includes payment of other costs, such as financial remuneration, would run afoul of the act's 'reasonable in amount' language.”

    That language was challenged this summer by the Florham Park, N.J.-based Specialty Pharmacy Association of America, or SPAARx, which claims 3,500 members including specialty pharmacies, pharmacy manufacturers, payers and others organizations. In a letter to Susan McAndrew, deputy director for health information technology at the Office for Civil Rights, it complained HHS “is limiting remuneration to the specific direct cost” of the communication, such as drafting, printing and mailing, and that “does not fairly recognize the additional expenses of clinicians and staff that deliver therapy management traditionally telephonically.”

    SPAARx asked instead that HHS use a standard of “fair-market value” of the service to determine whether it meets the congressional limit of “reasonable in amount.” SPAARx pointed out that fair-market value is used by HHS in anti-kickback enforcement.

    In its guidance, the Office for Civil Rights appears to have attempted to split the baby.

    To HIPAA-covered entities, such as providers, payments by “a pharmaceutical manufacturer or other third party whose product is being described in the communication” may cover “only the reasonable direct and indirect costs related to the refill reminder or medication adherence program, or other excepted communications, including labor, materials and supplies, as well as capital and overhead costs.”

    But when the covered entity uses a business associate, “to assist in carrying out a refill reminder or medication adherence program, or to make other excepted communications,” the guidance says “the business associate may be paid by the third party (either directly or through the covered entity) only up to the fair market value of its services.”

    “We got lots of mail on this issue, including from Congress, so we took another cut at what would be a reasonable amount that would allow these types of communications to continue,” McAndrew said. “Back in the day it was just a refill reminder, but now they've going into these much more elaborate compliance reminder programs. So, in looking at weighting equities, we decided that for these business associates to allow them fair market value. With covered entities, we did go back to a more typical cost-based standard, although we did broaden the types of costs.”

    Other guides were issued by OCR on the privacy of information about student immunizations and on the handling of healthcare information for people who have died.

    Follow Joseph Conn on Twitter: @MHJConn

    Letter
    to the
    Editor

    Send us a letter

    Have an opinion about this story? Click here to submit a Letter to the Editor, and we may publish it in print.

    Recommended for You
    Chat-GPT-healthcare-2.png
    Why Boston Children's wants to hire a ChatGPT expert
    Screen Shot 2018-12-19 at 1.36.49 PM.png
    GE HealthCare stock drops despite revenue growth
    Most Popular
    1
    More healthcare organizations at risk of credit default, Moody's says
    2
    Centene fills out senior executive team with new president, COO
    3
    SCAN, CareOregon plan to merge into the HealthRight Group
    4
    Blue Cross Blue Shield of Michigan unveils big push that lets physicians take on risk, reap rewards
    5
    Bright Health weighs reverse stock split as delisting looms
    Sponsored Content
    Health IT Strategist (HITS) Newsletter: Sign up for the latest IT and medical technology news delivered 3 days a week (M, W, F).
     
    Get Newsletters

    Sign up for enewsletters and alerts to receive breaking news and in-depth coverage of healthcare events and trends, as they happen, right to your inbox.

    Subscribe Today
    MH Magazine Cover

    MH magazine offers content that sheds light on healthcare leaders’ complex choices and touch points—from strategy, governance, leadership development and finance to operations, clinical care, and marketing.

    Subscribe
    Connect with Us
    • LinkedIn
    • Twitter
    • Facebook
    • RSS

    Our Mission

    Modern Healthcare empowers industry leaders to succeed by providing unbiased reporting of the news, insights, analysis and data.

    Contact Us

    (877) 812-1581

    Email us

     

    Resources
    • Contact Us
    • Advertise with Us
    • Ad Choices Ad Choices
    • Sitemap
    Editorial Dept
    • Submission Guidelines
    • Code of Ethics
    • Awards
    • About Us
    Legal
    • Terms and Conditions
    • Privacy Policy
    • Privacy Request
    Modern Healthcare
    Copyright © 1996-2023. Crain Communications, Inc. All Rights Reserved.
    • News
      • Current News
      • Providers
      • Insurance
      • Government
      • Finance
      • Technology
      • Safety & Quality
      • Digital Health
      • Transformation
        • Patients
        • Operations
        • Care Delivery
        • Payment
      • ESG
      • People
      • Regional News
        • Midwest
        • Northeast
        • South
        • West
      • Digital Edition (Web Version)
    • Opinion
      • Bold Moves
      • Breaking Bias
      • Commentaries
      • Letters
      • Vital Signs Blog
      • From the Editor
    • Events & Awards
      • Awards
        • Nominate/Eligibility
        • 100 Most Influential People
        • 50 Most Influential Clinical Executives
        • Best Places to Work in Healthcare
        • Excellence in Governance
        • Health Care Hall of Fame
        • Healthcare Marketing Impact Awards
        • Top 25 Emerging Leaders
        • Top Innovators
        • Diversity in Healthcare
          • - Luminaries
          • - Top 25 Diversity Leaders
          • - Leaders to Watch
        • Women in Healthcare
          • - Luminaries
          • - Top 25 Women Leaders
          • - Women to Watch
      • Conferences
        • Digital Health Transformation Summit
        • ESG: The Implementation Imperative Summit
        • Leadership Symposium
        • Social Determinants of Health Symposium
        • Women Leaders in Healthcare Conference
      • Galas
        • Best Places to Work Awards Gala
        • Health Care Hall of Fame Gala
        • Top 25 Diversity Leaders Gala
        • Top 25 Women Leaders Gala
      • Virtual Briefings
        • - Hospital of the Future
        • - Value Based Care
        • - Hospital at Home
        • - Workplace of the Future
        • - Digital Health
        • - Future of Staffing
        • - Hospital of the Future (Fall)
      • Webinars
    • Multimedia
      • Podcast - Beyond the Byline
      • Sponsored Podcast - Healthcare Insider
      • Video Series - The Check Up
      • Sponsored Video Series - One on One
    • Data Center
      • Data Center Home
      • Hospital Financials
      • Staffing & Compensation
      • Quality & Safety
      • Mergers & Acquisitions
      • Data Archive
      • Resource Guide: By the Numbers
      • Surveys
      • Data Points
    • Newsletters
    • MORE+
      • Contact Us
      • Advertise
      • Media Kit
      • Jobs
      • People on the Move
      • Reprints & Licensing