1. 03-23-05 October 2006 HIPAA Updates Presentation 2006 IHCP Provider Seminar

2. HIPAA Updates Presentation October 2006 page 2 Agenda Web interChange – Strong Passwords Web Administrative Audit Reports Group Owner E-mail New Health Care Claim Forms Update on Electronic Attachments Update on ICD-10-CM

3. HIPAA Updates Presentation October 2006 page 3 Web interChange - Strong Passwords Effective June 28, 2006, the password guidelines for Web interChange were upgraded. All Web interChange passwords must comply with the following new guidelines: –Passwords must be a minimum of eight characters and a maximum of 14 characters in length. –New passwords may not be the same as any of the user’s previous 13 passwords. –Passwords are case sensitive. –Passwords cannot contain the user ID, user name, company name, replicated sequence of characters, or any complete dictionary words.

4. HIPAA Updates Presentation October 2006 page 4 Web interChange - Strong Passwords Invalid password attempts are restricted to three. Users accessing Web interChange using a provider number must call the EDS Electronic Data Interchange (EDI) Solutions Help Desk at (317) 488-5160, option 2 in the Indianapolis area, or toll free at 1-877-877-5182 to have their passwords reset. Web interChange users are required to change passwords every 90 days and must comply to the new guidelines the first time they are prompted to change passwords after June 28, 2006.

5. HIPAA Updates Presentation October 2006 page 5 Web interChange - Strong Passwords Reminder for Web interChange users: Do not share your Web interChange user ID or password. All providers using Web interChange must assign an administrator for their organization.

6. HIPAA Updates Presentation October 2006 page 6 Web interChange – Strong Passwords Instructions for assigning a Web interChange administrator can be found by following the instructions on the How To Obtain An ID link on the Web interChange site at https://interchange.indianamedicaid.com

7. HIPAA Updates Presentation October 2006 page 7 Web Administrator Audit Reports The Health Insurance Portability Accountability Act (HIPAA) security requires that the Indiana Health Coverage Program (IHCP) audit the user activity and privileges on the Web interChange site. Effective June 28, 2006, the IHCP added functionality to Web interChange to help identify the activity that has taken place on the site so it can determine if the activity is appropriate.

8. HIPAA Updates Presentation October 2006 page 8 Web Administrator Audit Reports The Administrative Group Report is a tool provided to all interChange group administrators to allow them to monitor all users with access to their organization ’ s data, the type of access given to each user, and the functions they perform. Effective June 28, 2006, administrators are prompted to view their group report and click a button to verify that they have reviewed the report.

9. HIPAA Updates Presentation October 2006 page 9 Web interChange – Group Owner E-mail Effective June 28, 2006, the registered owner e-mail address of each organization accessing Web interChange will receive an e-mail, every 90 days, containing a list of active administrators associated with the owner ’ s organization. The e-mail notification allows the owner to verify that the list of administrators is complete and that the appropriate person is the administrator for Web interChange.

10. HIPAA Updates Presentation October 2006 page 10 New Health Insurance Claim Forms – UB-04 Institutional claim form – UB-04 Replaces the UB-92 claim form Accommodates National Provider Identifier (NPI) Incorporates a number of other important changes and improvements Will be required by all health plans Industry information can be found at http://www.nubc.org Uniform Billing

11. HIPAA Updates Presentation October 2006 page 11 New Health Insurance Claim Forms – CMS 1500 Professional claim form – CMS 1500 (08/05) Replaces the current CMS 1500 (12/90) version Accommodates NPI Incorporates a number of other important changes and improvements Industry information can be found at http://www.nucc.org Centers for Medicare & Medicaid Services

12. HIPAA Updates Presentation October 2006 page 12 New Health Insurance Claim Forms – Other Claim Forms Dental Claim will be modified to accept NPI Pharmacy Claim Forms will be modified to accept NPI Centers for Medicare & Medicaid Services

13. HIPAA Updates Presentation October 2006 page 13 Electronic Attachments 275 Transaction Status on Transaction

14. HIPAA Updates Presentation October 2006 page 14 ICD-10-CM HR4157 – Overview of Changes The bill would also require that the new ICD-10 codes be used for transactions occurring on or after October 1, 2010 International Classification of Diseases, 10th Revision, Clinical Modification.

15. HIPAA Updates Presentation October 2006 page 15 Questions