State's "More Stringent" Stark Law Restrictions Upheld By Court

Today I am focusing on the self-referral ban under the federal Stark laws. In particular, a recent case – Fresenius Medical Care Holdings, Inc. v. Tucker (Dkt. No. 4:03-cv-00411-SPM-GRJ (Jan. 10, 2013, 11th Cir.)) – discussed the interplay between those laws and a State’s attempt to impose more stringent requirements. 

The court first focused on two exceptions to the Stark laws’ ban on physician self-referrals. These exemptions concern clinical lab services for end-stage renal disease (ESRD), as well as certain lab services performed by a company with stockholder equity in excess of $75 million. 

A Florida statute subsequently narrowed these exemptions, and that statutory change impacted a Florida business’ ability to make referrals. 

The plaintiff argued that Congress had crafted the Stark laws’ exemptions in order to benefit Medicare and Medicaid recipients and, as such, intended to provided explicit benefits. That argument was rejected. 

The circuit court found that federal law permitted State laws to be more stringent, and that this was such a situation. Moreover, the court was not convinced that the plaintiff’s business was stifled by the State rules and, instead, found that the impact to the business was marginal. 

It remains to be seen whether or not this ruling will encourage States to enact more stringent restrictions and make it even more difficult for businesses to comply with a non-uniform set of rules.

Health and Human Services Releases New HIPAA Regulations

Last week the U.S. Department of Health and Human Services (HHS) released final regulations modifying existing HIPAA enforcement, privacy and security regulations. Although a number of the changes merely serve as clarification of existing regulations, the modifications impose a number of new requirements on covered entities and business associates.

Some of the important issues addressed in the new rules include the following:

  • Clarification of the definition of a privacy breach;
  • Adoption of risk assessment factors to be taken into consideration in conducting a breach analysis;
  • Modifications to the limitations on the use and disclosure of protected health information for marketing and fundraising purposes;
  • Modifications regarding business associates including changes to the definition of a business associates and when business associates may held directly liable for violations;
  • Modifications to the required terms in business associate agreements; and
  • Modifications that covered entities are required to make to their Notices of Privacy Practices.

The new regulations take effect on March 26, 2013 and covered entities and business associates have until September 23, 2013 to comply. The regs were published in the Federal Register on January , 2013 and can be viewed here Federal Register.


Check back for more detail on the required business associates and NPP changes.
 

HHS to Employ "Predictive Modeling" to Identify Fraud and Abuse

Kathleen Sebelius, Secretary of the Department of Human Services, recently announced during a press conference that HHS will as of July 1, 2011 be rolling out a $77 million computer program designed to prospectively identify potentially fraudulent Medicare claims by collecting and analyzing patterns in large numbers of submitted claims. According to a recent article in the Philadelphia Inquirer, the technology to be used by HHS is known as “predictive-modeling” software and is similar to technology used by banking and telecommunications companies in the private sector to identify fraud. The price tag for the new system will be paid through funding under The Patient Protection and Affordable Care Act of 2010. In the same press conference, Attorney General Eric Holder announced that in the last two years alone, the Federal Government has collected nearly $8 billion in judgments, settlements, fines, restitution and forfeitures related to healthcare fraud and improper Medicare payments.

It is apparent that the federal government is in fact putting its money where its mouth is when it comes to fraud and abuse enforcement. Physicians and other healthcare providers who have put their internal compliance efforts on the backburner in the last several years are well advised to redouble their compliance efforts – particularly with regard to periodic coding, documentation and claims review – to identify patterns and deficiencies which may raise red flags for the government and other third party payer programs. Auditing should be targeted, focusing on problem or high risk areas specific to practice specialty or service area. In addition, to be effective, auditing should be conducted at least annually and should be done under the supervision of legal counsel to preserve attorney client privilege of audit results. An experienced health care attorney can also help providers design audits and counsel on how to rectify identified deficiencies. Of course, deficiencies should be corrected (which may include refunding monies to Medicare or the third party payer programs) and providers and billing personnel should be appropriately educated based on audit findings. For more information on designing an effective compliance program, providers can visit the OIG’s website.
 

OIG Publishes Physician Compliance "Roadmap"

Responding to input from medical school deans and residency program directors in a recent survey, the OIG has published a plain-English compliance summary for new physicians entitled Roadmap for New Physicians: Avoiding Medicare and Medicaid Fraud and Abuse.  This 31-page document covers the following topics in a manner designed to educate new physicians in the basics of compliance and to sensitize them to the potential risks they will encounter in practice settings:

The online version of the publication includes links to the various primary resources on the OIG web site, including the safe harbor regulations, advisory bulletins, compliance guidance, advisory opinions, and other useful links.

This document, which is downloadable for free at http://oig.hhs.gov/fraud/PhysicianEducation, can be used as the framework for compliance education for new and veteran physicians, and is a good starting point for the "newbie" to understand the legal landscape in the area of fraud and abuse.

Local Podiatrist Gets Sentenced in Medicare Fraud Case

Major Medicare fraud and false claims settlements against large providers and pharmaceutical and device companies are reported in the news on a regular basis these days.  Unfortunately this trend may lead many physicians to believe that their billing and collection activities are under the radar of federal and state enforcement authorities.  According to an article in the Scranton Times-Tribune, when it comes to Medicare fraud, size doesn't matter. 

According to the article, a Scranton podiatrist was sentenced this week to two years of probation and ordered to pay $23,266 in restitution for submitting false claims to Medicare.  What is significant about this case is that the podiatrist reportedly only received between $10,000 and $30,000 in improper payments from the Medicare program.  So, if you still think your practice is too small to get noticed, think again. 

The prospect of developing a full-blown fraud and abuse compliance plan may seem overwhelming for many physicians but a compliance plan is really the only "insurance" you can put in place to help minimize legal exposure from improper billing.  Consider starting small.  An annual coding and documentation audit with the help of a health care attorney and billing consultant is hands-down one of the best things you can do from a compliance standpoint and it need not be expensive.  Most importantly, however, when if comes to compliance, doing something is far better than doing nothing.  For more information on developing a cost effective compliance plan, see the article "Compliance Planning on a Shoestring Budget"www.physiciansnews.com/law/1107rodriguez.html.