How HIPAA Violations Can Surprise You

How HIPAA Violations Can Surprise You

EDITOR’S NOTE: This is a fictional story that could become much too real.

In the bustling corridors of General Hospital USA, the heart of the administrative operations pulsed with urgency. The hospital’s CFO, Jennifer Morgan, was wrapping up a conference call when a soft knock on her door interrupted her train of thought.

“Come in,” Jennifer called out, her voice steady and authoritative.

The door opened to reveal the hospital’s Compliance Officer, Mark Davis. His usually calm demeanor was clouded with concern, a sight that made Jennifer’s own sense of unease grow.

“Mark, good to see you. What’s on your mind?” she asked, gesturing for him to take a seat.

“Jennifer, we have a serious issue that needs immediate attention,” Mark began, his tone grave. “It’s about our accounting system. I’ve discovered some invoices attached to it that contain patient information. This is a clear HIPAA violation.”

Jennifer’s face paled slightly as she absorbed the news. “How did this happen?” she asked, leaning forward, her eyes locked onto Mark’s.

Mark sighed, running a hand through his graying hair. “It seems that some of the invoices were uploaded by mistake. These invoices include patient names, treatment details, and other protected health information. Our accounting system isn’t HIPAA compliant, which means we’re in breach of the regulations.”

Jennifer took a deep breath, trying to process the implications. “How many invoices are we talking about?”

“From what I’ve seen so far, it’s about a hundred,” Mark replied. “But we need to conduct a thorough audit to identify the full scope of the issue.”

Jennifer nodded, her mind racing. “We need to act fast. The first step is to remove those invoices from the system immediately. Can you coordinate with IT to get that done?”

“Already on it,” Mark said, a hint of relief in his voice. “But we also need to inform the affected patients and report this breach to the Department of Health and Human Services. It’s crucial that we handle this by the book to mitigate any potential penalties.”

“Agreed,” Jennifer said, her tone resolute. “Let’s also ensure we have a team to review our current procedures and prevent this from happening again. We’ll need to provide additional training to our staff on handling patient information.”

Mark nodded. “I’ll get started on the breach notification and coordinate with our legal team to draft the communications for the affected patients. We need to be transparent about this mistake and reassure them that we’re taking all necessary steps to protect their information.”

While this is just a work of fiction, I want to demonstrate how easily hospitals and other healthcare providers can get caught in HIPAA violations when you assume that all of the systems in the organizations are HIPAA compliant.  Now is always a good time to talk to your compliance officer about which hospital systems are HIPAA compliant.  Even if certain software is compliant, you also need to make sure your organization has a “Business Associates” agreement with the vendor. 

Facebook
Twitter
LinkedIn

Timothy Powell, CPA, CHCP

Timothy Powell is a nationally recognized expert on regulatory matters, including the False Claims Act, Zone Program Integrity Contractor (ZPIC) audits, and U.S. Department of Health and Human Services (HHS) Office of Inspector General (OIG) compliance. He is a member of the RACmonitor editorial board and a national correspondent for Monitor Mondays.

Related Stories

Important Information Concerning Aetna

Important Information Concerning Aetna

Aetna’s recent policy update, which became effective July 1, marks a significant change in how the insurer will manage hospital readmissions. Previously, Aetna’s Diagnosis-Related Group

Read More

Leave a Reply

Please log in to your account to comment on this article.

Featured Webcasts

Comprehensive Inpatient Clinical Documentation Integrity: From Foundations to Advanced Strategies

Comprehensive Outpatient Clinical Documentation Integrity: From Foundations to Advanced Strategies

Optimize your outpatient clinical documentation and gain comprehensive knowledge from foundational practices to advanced technologies, ensuring improved patient care and organizational and financial success. This webcast bundle provides a holistic approach to outpatient CDI, empowering you to implement best practices from the ground up and leverage advanced strategies for superior results. You will gain actionable insights to improve documentation quality, patient care, compliance, and financial outcomes.

September 5, 2024
Advanced Outpatient Clinical Documentation Integrity: Mastering Complex Narratives and Compliance

Advanced Outpatient Clinical Documentation Integrity: Mastering Complex Narratives and Compliance

Enhancing outpatient clinical documentation is crucial for maintaining accuracy, compliance, and proper reimbursement in today’s complex healthcare environment. This webcast, presented by industry expert Angela Comfort, DBA, RHIA, CDIP, CCS, CCS-P, will provide you with actionable strategies to tackle complex challenges in outpatient documentation. You’ll learn how to craft detailed clinical narratives, utilize advanced EHR features, and implement accurate risk adjustment and HCC coding. The session also covers essential regulatory updates to keep your documentation practices compliant. Join us to gain the tools you need to improve documentation quality, support better patient care, and ensure financial integrity.

September 12, 2024

Foundations of Outpatient Clinical Documentation Integrity: Best Practices for Accurate Coding and Compliance

This webcast, presented by Angela Comfort, DBA, RHIA, CDIP, CCS, CCS-P, a recognized expert with over 30 years of experience, offers essential strategies to improve outpatient clinical documentation integrity. You will learn how to enhance the accuracy and completeness of patient records by adopting best practices in coding and incorporating Social Determinants of Health (SDOH). The session also highlights the role of technology, such as EHRs and CDI software, in improving documentation quality. By attending, you will gain practical insights into ensuring precise and compliant documentation, supporting patient care, and optimizing reimbursement. This webcast is crucial for those looking to address documentation gaps and elevate their coding practices.

September 5, 2024
Preventing Sepsis Denials: From Recognition to Clinical Validation

Preventing Sepsis Denials: From Recognition to Clinical Validation

ICD10monitor has teamed up with renowned CDI expert Dr. Erica Remer to bring you an exclusive webcast on how to recognize sepsis, how to get providers to give documentation that will support sepsis, and how to educate to avert sepsis denials. Register now and become a crucial piece of the solution to standardizing sepsis clinical practice, documentation, and coding at your facility.

August 22, 2024

Trending News

Featured Webcasts

Post Operative Pain Blocks: Guidelines, Documentation, and Billing to Protect Your Facility

Post Operative Pain Blocks: Guidelines, Documentation, and Billing to Protect Your Facility

Protect your facility from unwanted audits! Join Becky Jacobsen, BSN, RN, MBS, CCS-P, CPC, CPEDC, CBCS, CEMC, and take a deep dive into both the CMS and AMA guidelines for reporting post operative pain blocks. You’ll learn how to determine if the nerve block is separately codable with real life examples for better understanding. Becky will also cover how to evaluate whether documentation supports medical necessity, offer recommendations for stronger documentation practices, and provide guidance on educating providers about documentation requirements. She’ll include a discussion of appropriate modifier and diagnosis coding assignment so that you can be confident that your billing of post operative pain blocks is fully supported and compliant.

October 24, 2024
The OIG Update: Targets and Tools to Stay in Compliance

The OIG Update: Targets and Tools to Stay in Compliance

During this RACmonitor webcast Dr. Ronald Hirsch spotlights the areas of the OIG’s Work Plan and the findings of their most recent audits that impact utilization review, case management, and audit staff. He also provides his common-sense interpretation of the prevailing regulations related to those target issues. You’ll walk away better equipped with strategies to put in place immediately to reduce your risk of paybacks, increased scrutiny, and criminal penalties.

September 19, 2024
Pediatric SDoH: An Essential Guide to Accurate Coding and Reporting

Pediatric SDoH: An Essential Guide to Accurate Coding and Reporting

This webcast, presented by Tiffany Ferguson, LMSW, CMAC, ACM, addresses the critical gap in Social Determinants of Health (SDoH) reporting for pediatric populations. While SDoH efforts often focus on adults, this session emphasizes the unique needs of children. Attendees will gain insights into the current state of SDoH, new pediatric Z-codes, and the importance of interdisciplinary collaboration. By understanding and applying pediatric-specific SDoH factors, healthcare professionals can improve data capture, compliance, and care outcomes. This webcast is essential for those looking to enhance their approach to pediatric SDoH reporting and coding.

August 8, 2024
Oncology and E/M Services: Compliance, Medical Necessity, and Reimbursement

Oncology and E/M Services: Compliance, Medical Necessity, and Reimbursement

Join Becky Jacobsen, BSN, RN, MBS, CCS-P, CPC, CPEDC, CBCS, CEMC, VP of CDM, for a webcast addressing oncology service coding challenges. Learn to navigate coding for infusions and injections alongside Evaluation and Management (E/M) services, ensuring compliance and accurate reimbursement. Gain insights into documenting E/M services for oncology patients and determining medical necessity. This webcast is essential to optimize coding practices, maintain compliance, and maximize revenue in oncology care.

July 30, 2024

Trending News

Happy National Doctor’s Day! Learn how to get a complimentary webcast on ‘Decoding Social Admissions’ as a token of our heartfelt appreciation! Click here to learn more →