HCPro’s HIM Briefings published its first release of information (ROI) benchmarking survey of 2017 last month. The survey, conducted in December 2016, explored health information management (HIM) and ROI professionals’ challenges, triumphs, and insights, covering U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) patient access guidance, hybridization of medical records, ROI staffing, billing and requests, and patient authorizations and logging.
Of special interest was the coverage of patient access. Forty-eight percent of respondents modified patient access fees after the OCR released its guidance. Some survey respondents experienced greater difficulty handling attorney requests as a result of the OCR guidance, specifically citing difficulty with requests from attorneys believing they are entitled to copies of protected health information (PHI) at the new OCR patient rate, or even for free. According to the OCR, further guidance related to patient access and third-party requests will be issued in the coming months.
Another topic of interest was patient authorizations and logging of disclosures in electronic health records (EHRs). When asked if physician offices need to provide patient authorizations when requesting copies of records for continuation of care, 33 percent of respondents said they do not if the requesting physician is on staff and/or is mentioned in the requested copies of records; 32 percent said they required patient authorizations if the requesting physician is not on staff; and 28 percent said that as long as a request is on the requesting physician’s letterhead, they release the copies of records.
Challenges of ROI
According to the survey, the most challenging aspect of ROI is record requests from adult children not noted as contacts or next of kin. Forty-one percent of survey respondents listed this as the most challenging aspect, which is consistent with the results from the 2014 (38 percent) and 2015 (41 percent) surveys.
Other challenges include requests from adult children for a deceased parent’s records (16 percent), requests from quality organizations (35 percent), and requests for a child’s records from divorced parents (28 percent).
These are certainly challenging aspects of ROI, and below are some brief guidelines for handling these difficult requests:
Adult children not noted as contacts or next of kin
Although HIPAA permits physicians to share certain medical information with caregivers, it is crucial that children responsible for care of their elderly parents obtain healthcare powers of attorney so they can make healthcare decisions for their parents if necessary.
Adult children of deceased parents
After a patient dies, his or her PHI cannot be disclosed unless authorized by his or her personal representative; however, there are a few exceptions. The HIPAA Privacy Rule permits healthcare providers to disclose any relevant PHI of a deceased patient to family members or other persons involved in the patient’s healthcare or payment of care prior to the patient’s death, unless doing so is inconsistent with any previously expressed preference of the deceased.
Additionally, the PHI of a deceased patient can be disclosed without the patient’s personal representative’s authorization in certain instances: a) law enforcement, in the event of suspicion that death resulted from criminal conduct; b) coroners, medical examiners, or funeral directors; c) researchers working solely on the PHI of deceased patients; and d) organ procurement organizations for the purpose of facilitating organ donation and transplantation.
Healthcare providers should familiarize themselves with the definition of “personal representative” under applicable state law to ensure that their policies and procedures are compliant.
Quality organizations
The HIPAA Privacy Rule (45 CFR § 164.512(d)(1)) permits covered entities to disclose PHI to health oversight agencies for oversight activities authorized by law, including Quality Improvement Organizations (QIOs), which are nonprofit organizations contracted with the Centers for Medicaid & Medicare Services (CMS) to improve healthcare quality.
Divorced parents of minors
In most states, both parents, regardless of custody arrangement, are permitted to authorize the disclosure of their minor child’s PHI, provided that the requesting parent’s parental rights have not been terminated.
In conclusion, to best handle these and any challenges, healthcare providers should familiarize themselves with applicable state law to ensure that their current policies and procedures align with the law.
As one of the most politically interesting years in recent history draws to a close, the extension of the Patient Protection and Affordable Care Act
Today, I want to revisit a foundational flaw in how federal audit contractors calculate overpayments – a flaw so severe that in any other federal
Please log in to your account to comment on this article.
Accurately determining the principal diagnosis is critical for compliant billing, appropriate reimbursement, and valid quality reporting — yet it remains one of the most subjective and error-prone areas in inpatient coding. In this expert-led session, Cheryl Ericson, RN, MS, CCDS, CDIP, demystifies the complexities of principal diagnosis assignment, bridging the gap between coding rules and clinical reality. Learn how to strengthen your organization’s coding accuracy, reduce denials, and ensure your documentation supports true medical necessity.
Denials continue to delay reimbursement, increase administrative burden, and threaten financial stability across healthcare organizations. This essential webcast tackles the root causes—rising payer scrutiny, fragmented workflows, inconsistent documentation, and underused analytics—and offers proven, data-driven strategies to prevent and overturn denials. Attendees will gain practical tools to strengthen documentation and coding accuracy, engage clinicians effectively, and leverage predictive analytics and AI to identify risks before they impact revenue. Through real-world case examples and actionable guidance, this session empowers coding, CDI, and revenue cycle professionals to shift from reactive appeals to proactive denial prevention and revenue protection.
Sepsis remains one of the most frequently denied and contested diagnoses, creating costly revenue loss and compliance risks. In this webcast, Angela Comfort, DBA, MBA, RHIA, CDIP, CCS, CCS-P, provides practical, real-world strategies to align documentation with coding guidelines, reconcile Sepsis-2 and Sepsis-3 definitions, and apply compliant queries. You’ll learn how to identify and address documentation gaps, strengthen provider engagement, and defend diagnoses against payer scrutiny—equipping you to protect reimbursement, improve SOI/ROM capture, and reduce audit vulnerability in this high-risk area.
Only ICD10monitor delivers what you need: updates on must-know changes associated with the FY26 IPPS, including new ICD-10-CM/PCS codes, CCs/MCCs, and MS-DRGs, plus insights, analysis and answers to your questions from two of the country’s most respected subject matter experts.
Get clear, practical answers to Medicare’s most confusing regulations. Join Dr. Ronald Hirsch as he breaks down real-world compliance challenges and shares guidance your team can apply right away.
Federal auditors are zeroing in on Inpatient Rehabilitation Facility (IRF) and hospital rehab unit services, with OIG and CERT audits leading to millions in penalties—often due to documentation and administrative errors, not quality of care. Join compliance expert Michael Calahan, PA, MBA, to learn the five clinical “pillars” of IRF-PPS admissions, key documentation requirements, and real-life case lessons to help protect your revenue.
During this essential RACmonitor webcast Michael Calahan, PA, MBA Certified Compliance Officer, will clarify the rules, dispel common misconceptions, and equip you with practical strategies to code, document, and bill high-risk split/shared, incident-to & critical care E/M services with confidence. Don’t let audit risks or revenue losses catch your organization off guard — learn exactly what federal auditors are looking for and how to ensure your documentation and reporting stand up to scrutiny.
Learn how to navigate the proposed elimination of the Inpatient-Only list. Gain strategies to assess admission status, avoid denials, protect compliance, and address impacts across Medicare and non-Medicare payors. Essential insights for hospitals.
Happy National Doctor’s Day! Learn how to get a complimentary webcast on ‘Decoding Social Admissions’ as a token of our heartfelt appreciation! Click here to learn more →
CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 1 with code CYBER25
CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24
