HIPAA Resources
HIPAA 5010 Compliance Date Set for January 1, 2012
The Academy would like to notify members that covered entities must comply with the HIPPA Standards—Version 5010 as of January 1, 2012. The new 5010 includes structural, front matter, technical, and data content improvements; and its adoption will reduce ambiguities. Version 5010 also addresses a variety of currently unmet business needs, including, for example, providing on institutional claims an indicator for conditions that were "present on admission." The new version of the standard for electronic health care transactions (Version 5010 of the X12 standard) is essential to the use of ICD-10 codes because the current X12 standard (Version 4010/4010A1), cannot accommodate the use of the greatly expanded ICD-10 code sets.
Background on the 5010 Electronic Transactions Standards
HIPAA requires the Secretary of HHS to adopt standards that covered entities must use in electronically conducting certain health care administrative transactions, such as claims, remittance, eligibility, claims status requests and responses, and others. Covered entities include health plans, health care clearinghouses, and certain health care providers.
Read an article about ICD-10 Implementation (please make this a link to: ) from members of the Academy's Medical Economics and Management Committee (MEM).
Visit the CMS website for more information.
What is the National Provider Identifier?
In a regulation published in January 2004, the Department of Heath and Human Services explained that it intends to establish a national provider system (NPS) to administer national provider identifiers (NPI). The NPI will be a 10-digit numeric identifier used in place of other identifiers (e.g., Medicare number, UPIN) for all health care transactions.
All providers that conduct electronic transactions must have an NPI by May 23, 2007. A physician who does not conduct electronic transactions may acquire an NPI but is not required to do so.
What Is HIPAA?
In 1996, Congress changed the way medical practices deal with patients' medical records. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) makes it mandatory to comply with the Privacy and Security Rules.
The passage of HIPAA gave the Federal Government the ability to mandate how health care plans, providers, and clearinghouses store and transmit individuals' personal information as it relates to the administration, provision, and payment of health care.
Overview
The Privacy Rule
The Privacy Rule essentially controls the use and disclosure of what is known as protected health information (PHI). Many of its applications are just common sense. Others are more complex, giving patients a great deal of flexibility in the knowledge of what's in their medical record and how that content is used. Patients can now control the disclosure of their protected health information to certain entities. The Privacy Rule deadline was April 14, 2003.
The Security Rule
The Security Rule focuses on the ability of covered entities (including medical practices) to protect and safeguard the confidentiality of medical information. It is similar to The Privacy Rule but more complex in its impact on medical practices in areas specific to the transmission, storage, and receipt of data. Make no mistake, your practice's computer network, who has access to it, and the methods you use to store and handle data will come under close scrutiny. The Security Rule deadline was April 21, 2005.
Electronic Transactions
The Transaction and Code Sets Standards (TCS) deals primarily with electronic transactions. Claims submitted electronically must comply with these regulations. Failure to comply can result in monetary penalties or exclusion from Medicare. The TCS deadline was October 16, 2003.