1. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. 1-1 Chapter 1 Legal and Ethical Issues

2. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Learning Objectives 1.1 Identify your responsibilities under HIPAA’s Privacy Rule to protect a patient’s information. 1.2 Elaborate on the purpose of the Health Care Fraud and Abuse Control Program. 1.3 Analyze the use of the National Correct Coding Initiative. 1-2

3. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Learning Objectives (cont.) 1.4 Apply the rules of ethical and legal coding. 1.5 Identify the points within industry codes of ethics that will direct your conduct as a professional coder. 1.6 Outline the purpose of a compliance program. 1-3

4. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Key Terms Code for coverage Covered entities Disclosure Ethical behaviors Fraud HIPAA’s Privacy Rule 1-4

5. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Key Terms (cont.) Mutually exclusive codes Protected health information (PHI) Supporting documentation Unbundling Upcoding Use Willful ignorance 1-5

6. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Health Insurance Portability and Accountability Act (HIPAA) The Privacy Rule –protects an individual’s privacy, specifically a patient’s personal information. –allows patients’ information to be easily accessible to authorized parties (physicians, coders, billers, etc.). –secures patients’ personal information from unauthorized parties (potential employers, co-workers, etc.). 1-6

7. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Who Is Responsible for Obeying This Law? Covered entities are divided into three categories –Healthcare providers Physicians, hospitals, laboratories, pharmacies, etc. –Health plans Medicaid, Medicare, Blue Cross Blue Shield, Tricare, etc. –Healthcare clearinghouses National Clearinghouse, NDC Electronic Claims

8. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Who Is Responsible for Obeying This Law? (cont.) Covered entities include every member of the workforce regardless of job title: –Full time employees –Part-time employees –Interns/externs –Volunteers –Physicians –Nurses –Assistants 1-8

9. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. What This Law Covers Extension of doctor-patient confidentiality. Access to personal and confidential information (essential to accurately reporting data). Protected health information (PHI). Any individually identifiable health information regardless of form. 1-9

10. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. The Use and Disclosure of PHI USE –Information is shared between people who work together in the same office and need to exchange PHI in order to better serve the patient. DISCLOSURE –PHI is revealed to someone outside the healthcare office or facility in order to better serve the patient. 1-10

11. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Getting Written Approval Documentation must be written in plain language (not legalese) so that the average person can understand what he or she is signing. Documentation must specify exactly what information will be disclosed or used. 1-11

12. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Getting Written Approval (cont.) Documentation must specifically identify the person or organization that will be disclosing the information. Documentation must specifically identify the person(s) who will be receiving the information. 1-12

13. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Getting Written Approval (cont.) Documentation must have a definite expiration date. Documentation must clearly explain that the person signing the release may retract the authorization in writing at any time. 1-13

14. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Permitted Uses and Disclosures Circumstances under which healthcare professionals are permitted to use their best professional judgment to use and/or disclose a patient’s PHI (with or without written patient permission) … 1-14

15. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Permitted Uses and Disclosures (cont.) 1.To the individual 2.For treatment, payment, and/or operations (TPO) 3.Opportunity to agree or object 4.Incidental use and disclosure 5.Public interest 6.Limited data sets 1-15

16. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Privacy Notices Notices of Privacy written in compliance with HIPAA’s Privacy Rule must contain: –A full description of how the covered entity may use and/or disclose a patient’s PHI. –A statement about the covered entity’s responsibility to protect a patient’s privacy. 1-16

17. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Privacy Notices (cont.) …as well as… –Complete information about the patient’s rights. –The name of a specific employee of the covered entity must be named as privacy officer. 1-17

18. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Violating HIPAA’s Privacy Rule Civil Penalties –$100 for each single violation. –Maximum of $25,000 for multiple violations. 1-18

19. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Violating HIPAA’s Privacy Rule (cont.) Criminal Penalties –Up to $50,000 and up to 1 year in jail for the unauthorized or inappropriate disclosure of individually identifiable health information. –Up to $100,000 and up to 5 years in prison for the unauthorized or inappropriate disclosure of individually identifiable health information through deception. 1-19

20. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Violating HIPAA’s Privacy Rule (cont.) Criminal Penalties –Up to $250,000 and up to 10 years in prison for the unauthorized or inappropriate disclosure of individually identifiable health information through deception with intent to sell or use for business-related benefit, personal gain, or hateful detriment. 1-20

21. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Health Care Fraud Health Care Fraud and Abuse Control Program –Created by HIPAA. –Investigates attempts of fraud and abuse in the healthcare system (including Medicaid and Medicare). –Acts in association with the Office of the Inspector General (OIG) and coordinates with federal, state, and local law enforcement agencies. 1-21

22. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. National Correct Coding Initiative/ Federal False Claims Act National Correct Coding Initiative (NCCI) was created by Centers for Medicare and Medicaid Services (CMS). Updated annually by CMS. Documentation is crucial. 1-22

23. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. National Correct Coding Initiative/ Federal False Claims Act (cont.) Federal False Claims Act forbids the submission of healthcare claims with the intention of gaining financial consideration by stating details that are not true and accurate. 1-23

24. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Rules for Ethical & Legal Coding Codes on the health claim form must represent the services actually performed and are supported by notes and other documentation in the patient’s health record. –Don’t use a code on a claim form without having supporting documentation in the file. 1-24

25. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Rules for Ethical & Legal Coding (cont.) Coding for coverage (coding services based on what insurance companies will pay for, or “cover,” not for true services rendered) is not permitted. All codes must reflect services and procedures rendered. 1-25

26. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Rules for Ethical & Legal Coding (cont.) Upcoding, an illegal process, is considered falsifying records. Resubmitting a claim that has been lost must be identified as a “tracer” or “second submission”. Unbundling is not permitted. All services provided during one encounter must be placed on one claim form. 1-26

27. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Codes of Ethics Two premier trade organizations for professional coding specialists have codes of ethics: –American Health Information Management Association Code of Ethics (AHIMA). –American Academy of Professional Coders (AAPC). 1-27

28. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Codes of Ethics (cont.) AHIMA Code of Ethics –Ensure confidentiality –Honor patients, peers, and selves –Protect PHI –Avoid unethical practices –Promote knowledge –Perform honorably 1-28

29. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Codes of Ethics (cont.) AHIMA Standards of Ethical Coding –Support accurate coding practices –Follow official guidelines –Code only what is documented –Query physicians for clarification –Advocate proper credentialing –Continue education 1-29

30. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Codes of Ethics (cont.) AAPC Code of Ethical Standards –Maintain highest standard of conduct –Use only legal and ethical means –Pursue excellence through continuing education –Do not exploit relationships for personal gain 1-30

31. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Compliance Programs Compliance programs –Create policies and procedures –Establish the structure to adhere to those policies –Set up a monitoring system to ensure compliance –Correct conduct that does not comply 1-31

32. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Compliance Programs (cont.) The Seven Steps to Due Diligence 1.Establish compliance standards and procedures. 2.Assign overall responsibility to specific high-level individuals. 3.Attempt to avoid delegation of authority to individuals that may result in illegal actions. 1-32

33. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Compliance Programs (cont.) The Seven Steps to Due Diligence 4.Effectively communicate standards and procedures to all staff. 5.Utilize monitoring and auditing system for compliance. 6.Enforce adequate disciplinary sanctions when appropriate. 7.Respond to episodes of non-compliance by modifying program. 1-33

34. Copyright © 2016 McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill Education. Chapter Summary Know your legal and ethical responsibilities. Confidentiality, honesty, and accuracy are three watchwords that all health information management professionals should live by. 1-34