When ‘Confidential’ isn’t Necessarily Confidential

When ‘Confidential’ isn’t Necessarily Confidential

A client received a letter requesting a wide range of billing and coding information, and copies of variety of medical records before it concluded “please note that data regarding active investigations is classified as confidential and I request that you treat all communication on this matter accordingly.” 

A request from an investigator to keep their contact confidential is quite common, whether it happens in a letter or in an oral communication from a government agent.  The agent has every right to make the request.  From their perspective, the request is smart.  The agents are better off when they can surprise people. 

But it is essential that everyone in your organization understand that it is a request and not a requirement

Why is this distinction so important? 

It has been quite common in my career that as I assist a client responding to an investigation, we discover that someone, be it a current or former employee, learned about the investigation weeks or even months before it was brought to my attention.  Typically, the person who first learned of the investigation took the request for confidentiality to heart, and felt it was improper to tell a compliance officer, legal counsel, or their supervisor about the communication. 

I get it. 

People in the healthcare industry are trained at length about HIPAA and the need to keep a variety of information close to the vest.  We are told that we cannot share information with our spouse, colleagues, or close friends.  In the healthcare world, when someone says keep something confidential, we are trained to listen.  But an investigation is not like medical information.  There is no federal or state law that requires someone who knows about a government investigation to keep the information to themselves.  While I would not recommend it, it is perfectly legal to rent the Goodyear Blimp to fly above a stadium people and declare Glaser Hospital is under investigation.  And while I would not put the message on a dirigible, I do think it should go to the right director.  Whether it is compliance or legal, someone needs to hear about an investigation as soon as it starts. 

Obviously training people about this after the investigation commences is useless.  You need to make sure that your entire organization knows that if they are contacted by a government agent, they should be on the horn to legal or compliance in a matter of minutes.   A well-run healthcare organization has at least annual compliance training. 

I strongly encourage devoting a portion of that training to how to respond when a government agent shows up.  While most healthcare employees will never deal with a government agent, over the course of a decade, most healthcare organizations will have someone in the organization who is interacting with a government agent.  

Whether it’s a police officer looking for a patient or an employee, or a fraud investigator seeking information to pursue a patient or the entity itself, someone in the organization will be dealing with government investigators. 

And since you can’t know who will draw that short straw, you need to train everyone.  Taking five or ten minutes to prepare employees for that eventuality greatly reduces the risk that it will go off the rails. 

Contact from the government is important, and should be taken seriously, but all employees should know that it needn’t be, and shouldn’t be, kept confidential from the compliance and legal team.   

Facebook
Twitter
LinkedIn

David M. Glaser, Esq.

David M. Glaser is a shareholder in Fredrikson & Byron's Health Law Group. David assists clinics, hospitals, and other health care entities negotiate the maze of healthcare regulations, providing advice about risk management, reimbursement, and business planning issues. He has considerable experience in healthcare regulation and litigation, including compliance, criminal and civil fraud investigations, and reimbursement disputes. David's goal is to explain the government's enforcement position, and to analyze whether this position is supported by the law or represents government overreaching. David is a member of the RACmonitor editorial board and is a popular guest on Monitor Mondays.

Related Stories

Leave a Reply

Please log in to your account to comment on this article.

Featured Webcasts

Sepsis Sequencing in Focus: From Documentation to Defensible Coding

Sepsis sequencing continues to challenge even experienced coding and CDI professionals, with evolving guidelines, documentation gaps, and payer scrutiny driving denials and data inconsistencies. In this webcast, Payal Sinha, MBA, RHIA, CCDS, CDIP, CCS, CCS-P, CCDS-O, CRC, CRCR, provides clear guideline-based strategies to accurately code sepsis, severe sepsis, and septic shock, assign POA indicators, clarify the relationship between infection and organ dysfunction, and align documentation across teams. Attendees will gain practical tools to strengthen audit defensibility, improve first-pass accuracy, support appeal success, reduce denials, and ensure accurate quality reporting, empowering organizations to achieve consistent, compliant sepsis coding outcomes.

March 26, 2026
I022426_SQUARE

Fracture Care Coding: Reduce Denials Through Accurate Coding, Sequencing, and Modifier Use

Expert presenters Kathy Pride, RHIT, CPC, CCS-P, CPMA, and Brandi Russell, RHIA, CCS, COC, CPMA, break down complex fracture care coding rules, walk through correct modifier application (-25, -57, 54, 55), and clarify sequencing for initial and subsequent encounters. Attendees will gain the practical knowledge needed to submit clean claims, ensure compliance, and stay one step ahead of payer audits in 2026.

February 24, 2026
Mastering Principal Diagnosis: Coding Precision, Medical Necessity, and Quality Impact

Mastering Principal Diagnosis: Coding Precision, Medical Necessity, and Quality Impact

Accurately determining the principal diagnosis is critical for compliant billing, appropriate reimbursement, and valid quality reporting — yet it remains one of the most subjective and error-prone areas in inpatient coding. In this expert-led session, Cheryl Ericson, RN, MS, CCDS, CDIP, demystifies the complexities of principal diagnosis assignment, bridging the gap between coding rules and clinical reality. Learn how to strengthen your organization’s coding accuracy, reduce denials, and ensure your documentation supports true medical necessity.

December 3, 2025

Proactive Denial Management: Data-Driven Strategies to Prevent Revenue Loss

Denials continue to delay reimbursement, increase administrative burden, and threaten financial stability across healthcare organizations. This essential webcast tackles the root causes—rising payer scrutiny, fragmented workflows, inconsistent documentation, and underused analytics—and offers proven, data-driven strategies to prevent and overturn denials. Attendees will gain practical tools to strengthen documentation and coding accuracy, engage clinicians effectively, and leverage predictive analytics and AI to identify risks before they impact revenue. Through real-world case examples and actionable guidance, this session empowers coding, CDI, and revenue cycle professionals to shift from reactive appeals to proactive denial prevention and revenue protection.

November 25, 2025

Trending News

Featured Webcasts

Compliance for the Inpatient Psychiatric Facility (IPF-PPS): Minimizing Federal Audit Findings by Strengthening Best Practices

Federal auditors are intensifying their focus on inpatient psychiatric facilities, using advanced data analytics to spotlight outliers and pursue high‑dollar repayments. In this high‑impact webcast, Michael Calahan, PA, MBA, Compliance Officer and V.P., Hospital & Physician Compliance, breaks down what regulators are really targeting in IPF-PPS admissions, documentation, treatment and discharge planning. Attendees will learn practical steps to tighten processes, avoid common audit triggers and protect reimbursement and reduce the risk of multimillion-dollar repayment demands.

April 9, 2026

Mastering MDM for Accurate Professional Fee Coding

In this timely session, Stacey Shillito, CDIP, CPMA, CCS, CCS-P, CPEDC, COPC, breaks down the complexities of Medical Decision Making (MDM) documentation so providers can confidently capture the true complexity of their care. Attendees will learn practical, efficient strategies to ensure documentation aligns with current E/M guidelines, supports accurate coding, and reduces audit risk, all without adding to charting time.

March 31, 2026

The PEPPER Returns – Risk and Opportunity at Your Fingertips

Join Ronald Hirsch, MD, FACP, CHCQM for The PEPPER Returns – Risk and Opportunity at Your Fingertips, a practical webcast that demystifies the PEPPER and shows you how to turn complex claims data into actionable insights. Dr. Hirsch will explain how to interpret key measures, identify compliance risks, uncover missed revenue opportunities, and understand new updates in the PEPPER, all to help your organization stay ahead of audits and use this powerful data proactively.

March 19, 2026

Top 10 Audit Targets for 2026-2027 for Hospitals & Physicians: Protect Your Revenue

Stay ahead of the 2026-2027 audit surge with “Top 10 Audit Targets for 2026-2027 for Hospitals & Physicians: Protect Your Revenue,” a high-impact webcast led by Michael Calahan, PA, MBA. This concise session gives hospitals and physicians clear insight into the most likely federal audit targets, such as E/M services, split/shared and critical care, observation and admissions, device credits, and Two-Midnight Rule changes, and shows how to tighten documentation, coding, and internal processes to reduce denials, recoupments, and penalties. Attendees walk away with practical best practices to protect revenue, strengthen compliance, and better prepare their teams for inevitable audits.

January 29, 2026

Trending News

Happy National Doctor’s Day! Learn how to get a complimentary webcast on ‘Decoding Social Admissions’ as a token of our heartfelt appreciation! Click here to learn more →

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 1 with code CYBER25

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24