HIPAA Violation Penalties Revised

May 6th, 2019 - Wyn Staheli, Director of Research
Categories:   HIPAA|PHI  
0 Votes - Sign in to vote or comment.

On April 30, 2019 The Department of Health and Human Services (HHS) announced that “HHS will apply a different cumulative annual CMP limit for each of the four penalties tiers in the HITECH Act.” Unlike other notices which require a proposed rule with a comment period, this notice will take effect immediately because the law allows HHS to revise penalty amounts as they see fit.

To give the context to these changes, in 2013, there was a ruling which imposed a maximum annual Civil Monetary Penalty (CMP) or $1.5 million for each ‘tier’ of culpability. The following table outlines the previous and new penalties:

Type of Violation

Fine per Violation

Old Annual Limit per Violation

New Annual Limit per Violation

No Knowledge

$100 - $50,000

$1.5 Million

$25,000

Reasonable Cause

$1,000 - $50,000

$1.5 Million

$100,000

Willful Neglect - Corrected

$10,000 - $50,000

$1.5 Million

$250,000

Willful Neglect - Not Corrected

At Least $50,000

$1.5 Million

$1.5 Million

Keep in mind that this is a new annual limit. So if an investigation finds that this violation occurred over the course of two years, your maximum penalty could be as much as $3 million. The good news is that, if your organization did not know (and even with reasonable diligence would not have known) of the violation, your maximum penalty drops significantly.

Interestingly, HHS also stated that “HHS expects to engage in future rulemaking to revise the penalty tiers in the current regulation to better reflect the text of the HITECH Act.” There is no timeline of when to expect these proposed changes.

For those with a copy of the HIPAA Compliance 4th Edition, please update the penalty tables on pages 13 and 76 to reflect these changes.

###

Questions, comments?

If you have questions or comments about this article please contact us.  Comments that provide additional related information may be added here by our Editors.


Latest articles:  (any category)

Denial Management is Key to Profitability
July 15th, 2019 - Wyn Staheli, Director of Research
A recent article by Modern Medicine cited a report by Becker’s Hospital Review which stated that it costs approximately $118 per claim to resolve a claim denial. Granted, these were hospital claims, but the process is essentially the same for outpatient services. In fact, you could say it is...
Q/A: Do I Use 7th Character A for all Sprain/Strain Care Until MMI?
July 15th, 2019 - Wyn Staheli, Director of Research
Question: It is in regards to the Initial and Subsequent 7th digit (A and D) for sprains and strains. Recently, I have been told that I should continue with the A digit until the patient has reached Maximum Medical Improvement (MMI) and then switch over to the D place holder. Is ...
The Importance of Medical Necessity
July 9th, 2019 - Marge McQuade, CMSCS, CHCI, CPOM
ICD-10-CM codes represent the first line of defense when it comes to medical necessity. Correctly chosen diagnosis codes support the reason for the visit as well as the level of the E/M services provided. The issue of medical necessity is one of definitions and communication. What is obvious to the ...
When Can You Bill Orthosis Components Separately?
July 9th, 2019 - Wyn Staheli, Director of Research
Othoses often have extra components. When can you bill those components separately? For example, can you bill for a suspension sleeve (L2397) with a knee orthosis (e.g., L1810)?
Q/A: Can I Put the DC’s NPI in Item Number 24J for Massage Services?
July 8th, 2019 - Wyn Staheli, Director of Research
Question: Are there scenarios in which it is acceptable to put the DC's NPI in box 24j for massage services? Answer: While the answer to this is yes, it is essential to understand that there are very limited scenarios. In most cases, Item Number 24J is only for the NPI of the individual ...
Will the New Low Level Laser Therapy Code Solve Your Billing Issues?
July 8th, 2019 - Wyn Staheli, Director of Research
Low level laser therapy (LLLT), also known as cold laser therapy, is a form of phototherapy which uses a device that produces laser beam wavelengths, typically between 600 and 1000 nm and watts from 5–500 milliwatts (mW). It is often used to treat the following: Inflammatory conditions (e.g., Rheumatoid Arthritis, Carpal ...
Helping Others Understand How to Apply Incident to Guidelines
July 5th, 2019 - Namas
Over the past few months, I have worked with different organizations that have been misinterpreting the "incident to" guidelines and, in return, have been billing for services rendered by staff that are not qualified to perform the services per AMA and CPT. What I found within the variances is that ...



About Codapedia & Find-A-Code Contact Us Terms of Use Privacy Policy Advertise with Us

Codapedia™/Find-A-Code™ - 62 E 300 North, Spanish Fork, UT 84660 - Phone 801-770-4203 (9-5 Mountain) - Fax (801) 770-4428

Copyright © 2009-2019 Find A Code, LLC - CPT® copyright American Medical Association