Skip to main content
Subscribe
  • Sign Up Free
  • Login
  • Subscribe
  • News
    • Current News
    • Providers
    • Insurance
    • Government
    • Finance
    • Technology
    • Safety & Quality
    • Digital Health
    • Transformation
    • ESG
    • People
    • Regional News
    • Digital Edition (Web Version)
    • Patients
    • Operations
    • Care Delivery
    • Payment
    • Midwest
    • Northeast
    • South
    • West
  • Opinion
    • Bold Moves
    • Breaking Bias
    • Commentaries
    • Letters
    • Vital Signs Blog
    • From the Editor
  • Events & Awards
    • Awards
    • Conferences
    • Galas
    • Virtual Briefings
    • Webinars
    • Nominate/Eligibility
    • 100 Most Influential People
    • 50 Most Influential Clinical Executives
    • Best Places to Work in Healthcare
    • Excellence in Governance
    • Health Care Hall of Fame
    • Healthcare Marketing Impact Awards
    • Top 25 Emerging Leaders
    • Top Innovators
    • Diversity in Healthcare
      • - Luminaries
      • - Top 25 Diversity Leaders
      • - Leaders to Watch
    • Women in Healthcare
      • - Luminaries
      • - Top 25 Women Leaders
      • - Women to Watch
    • Digital Health Transformation Summit
    • ESG: The Implementation Imperative Summit
    • Leadership Symposium
    • Social Determinants of Health Symposium
    • Women Leaders in Healthcare Conference
    • Best Places to Work Awards Gala
    • Health Care Hall of Fame Gala
    • Top 25 Diversity Leaders Gala
    • Top 25 Women Leaders Gala
    • - Hospital of the Future
    • - Value Based Care
    • - Hospital at Home
    • - Workplace of the Future
    • - Digital Health
    • - Future of Staffing
    • - Hospital of the Future (Fall)
  • Multimedia
    • Podcast - Beyond the Byline
    • Sponsored Podcast - Healthcare Insider
    • Video Series - The Check Up
    • Sponsored Video Series - One on One
  • Data Center
    • Data Center Home
    • Hospital Financials
    • Staffing & Compensation
    • Quality & Safety
    • Mergers & Acquisitions
    • Data Archive
    • Resource Guide: By the Numbers
    • Surveys
    • Data Points
  • Newsletters
  • MORE+
    • Contact Us
    • Advertise
    • Media Kit
    • Jobs
    • People on the Move
    • Reprints & Licensing
MENU
Breadcrumb
  1. Home
  2. Law & Regulation
January 29, 2020 04:16 PM

Federal court voids 2016 HIPAA guidance on third-party fees

Jessica Kim Cohen
  • Tweet
  • Share
  • Share
  • Email
  • More
    Reprints Print
    cyber share hospitals
    Modern Healthcare Illustration / Getty Images

    HHS on Tuesday lifted a limit on fees that providers and companies are allowed to charge when a patient requests to send their health data to a third party after a federal judge nixed the policy.

    The judge ruled that some portions of a 2016 HHS guidance are impermissible under the Administrative Procedure Act, which governs how federal agencies develop regulations and conduct notice-and-comment rulemaking.

    The limit on fees that organizations are allowed to charge third parties—such as law firms or life insurers—no longer applies. But Roger Severino, director of the HHS' Office for Civil Rights, said that fees are still capped when a patient requests access to their own records.

    "Individuals still have the right to timely access to their own health records at a reasonable cost and OCR will continue to vigorously enforce that right consistent with the court's order," he said.

    In 2016, HHS issued a guidance limiting the fees that third parties can be charged when requesting health data on a patient's behalf. The agency placed a cap on all fees, and said third parties could be charged the same amount as patients who request their own data.

    HIPAA-covered entities and business associates were directed to charge fees based on calculating the labor cost it takes to fulfill a record request or by charging a flat fee capped at $6.50 per request.

    The restrictions on what companies may charge patients—often referred to as the "patient rate"—are meant to ensure patients have affordable access to their own health data.

    But extending that rate to third parties should have gone through a notice and comment rulemaking, according to U.S. District Judge Amit Mehta in Washington in his 55-page opinion.

    HHS had asked Judge Mehta to dismiss a lawsuit between the agency and Ciox Health, a health information management company that handles record-retrieval requests for providers, patients and third parties.

    Ciox sued HHS in 2018, arguing that components of the department's 2013 HIPAA omnibus rule and 2016 guidance violated the APA's procedural requirements. Ultimately, the fee caps led Ciox to lose millions of dollars, according to the ruling.

    Ciox on Wednesday emphasized that the ruling did not change the patient rate, but disallowed it for "non-patients," such as insurance companies and lawyers.

    "Ciox always has and continues to strongly support patients' secure and unrestricted access to their medical records, including making the process easier," the company said in a statement. "This ruling enables Ciox to continue helping providers achieve these objectives."

    Judge Mehta also vacated a HHS rule from 2013 that broadened a directive established in the Health Information Technology for Economic and Clinical Health Act of 2009. HITECH said that patients can request for organizations to send a copy of their electronic health record to a third party, and the rule said that should include any protected health information even if it's not stored in an EHR.

    The judge said OCR couldn't add that regulation, since it goes beyond statutory requirements set by Congress.

    OCR has been ramping up its work to give patients easier access to their medical information. Last year, the agency announced the first two settlements—both costing providers $85,000—under its right of access initiative, which ensures patients have access to their medical records as mandated under HIPAA.

    The ruling raises questions about whether the OCR has the authority to revamp HIPAA, as some lawmakers and healthcare stakeholders have called for in recent years, said Lucia Savage, chief privacy and regulatory officer at digital therapeutics company Omada Health and former chief privacy officer at HHS' Office of the National Coordinator for Health Information Technology.

    Savage worked with the OCR to help write the 2016 guidance while at the ONC.

    "The court really constrained OCR's authority to write new regulations and interpret new federal laws that come down the pike," she said. "If OCR lacks the authority to refresh and modernize HIPAA as technology evolves, then HIPAA privacy rule is really kind of frozen in time."

    Letter
    to the
    Editor

    Send us a letter

    Have an opinion about this story? Click here to submit a Letter to the Editor, and we may publish it in print.

    Recommended for You
    FTC healthcare
    FTC's noncompete ban could apply to nonprofits, former staffers say
    Medicaid website 2
    CMS’ Jonathan Blum - Redeterminations will make Medicaid stronger
    Most Popular
    1
    More healthcare organizations at risk of credit default, Moody's says
    2
    Centene fills out senior executive team with new president, COO
    3
    SCAN, CareOregon plan to merge into the HealthRight Group
    4
    Blue Cross Blue Shield of Michigan unveils big push that lets physicians take on risk, reap rewards
    5
    Bright Health weighs reverse stock split as delisting looms
    Sponsored Content
    Daily Dose Newsletter: Sign up to receive a late afternoon weekday roundup of that day’s breaking news and developments in healthcare.
    Get Newsletters

    Sign up for enewsletters and alerts to receive breaking news and in-depth coverage of healthcare events and trends, as they happen, right to your inbox.

    Subscribe Today
    MH Magazine Cover

    MH magazine offers content that sheds light on healthcare leaders’ complex choices and touch points—from strategy, governance, leadership development and finance to operations, clinical care, and marketing.

    Subscribe
    Connect with Us
    • LinkedIn
    • Twitter
    • Facebook
    • RSS

    Our Mission

    Modern Healthcare empowers industry leaders to succeed by providing unbiased reporting of the news, insights, analysis and data.

    Contact Us

    (877) 812-1581

    Email us

     

    Resources
    • Contact Us
    • Advertise with Us
    • Ad Choices Ad Choices
    • Sitemap
    Editorial Dept
    • Submission Guidelines
    • Code of Ethics
    • Awards
    • About Us
    Legal
    • Terms and Conditions
    • Privacy Policy
    • Privacy Request
    Modern Healthcare
    Copyright © 1996-2023. Crain Communications, Inc. All Rights Reserved.
    • News
      • Current News
      • Providers
      • Insurance
      • Government
      • Finance
      • Technology
      • Safety & Quality
      • Digital Health
      • Transformation
        • Patients
        • Operations
        • Care Delivery
        • Payment
      • ESG
      • People
      • Regional News
        • Midwest
        • Northeast
        • South
        • West
      • Digital Edition (Web Version)
    • Opinion
      • Bold Moves
      • Breaking Bias
      • Commentaries
      • Letters
      • Vital Signs Blog
      • From the Editor
    • Events & Awards
      • Awards
        • Nominate/Eligibility
        • 100 Most Influential People
        • 50 Most Influential Clinical Executives
        • Best Places to Work in Healthcare
        • Excellence in Governance
        • Health Care Hall of Fame
        • Healthcare Marketing Impact Awards
        • Top 25 Emerging Leaders
        • Top Innovators
        • Diversity in Healthcare
          • - Luminaries
          • - Top 25 Diversity Leaders
          • - Leaders to Watch
        • Women in Healthcare
          • - Luminaries
          • - Top 25 Women Leaders
          • - Women to Watch
      • Conferences
        • Digital Health Transformation Summit
        • ESG: The Implementation Imperative Summit
        • Leadership Symposium
        • Social Determinants of Health Symposium
        • Women Leaders in Healthcare Conference
      • Galas
        • Best Places to Work Awards Gala
        • Health Care Hall of Fame Gala
        • Top 25 Diversity Leaders Gala
        • Top 25 Women Leaders Gala
      • Virtual Briefings
        • - Hospital of the Future
        • - Value Based Care
        • - Hospital at Home
        • - Workplace of the Future
        • - Digital Health
        • - Future of Staffing
        • - Hospital of the Future (Fall)
      • Webinars
    • Multimedia
      • Podcast - Beyond the Byline
      • Sponsored Podcast - Healthcare Insider
      • Video Series - The Check Up
      • Sponsored Video Series - One on One
    • Data Center
      • Data Center Home
      • Hospital Financials
      • Staffing & Compensation
      • Quality & Safety
      • Mergers & Acquisitions
      • Data Archive
      • Resource Guide: By the Numbers
      • Surveys
      • Data Points
    • Newsletters
    • MORE+
      • Contact Us
      • Advertise
      • Media Kit
      • Jobs
      • People on the Move
      • Reprints & Licensing