On April 17, Phoenix Cardiac Surgery, a five-physician practice in Phoenix and Prescott, Ariz., became the first small practice to enter a resolution agreement that included a civil money penalty over charges it violated HIPAA. The practice will pay $100,000 and take corrective actions.
HHS’ investigation found that the practice failed to implement adequate policies and procedures to protect patient information; failed to document that it trained employees on HIPAA Privacy and Security Rules; failed to identify a security official and conduct a risk analysis; and failed to obtain business associate agreements for its email and scheduling services.
This was the first resolution agreement with a small practice since the Privacy and Security Rules were granted greater enforcement powers in 2009.
Related Articles on Coding, Billing and Collections:
Op-Ed: 5010 Deadline Approaches, Physicians in Varying States of Preparedness
Medicare Overpayments/Underpayments Interest Rates Rise
Employers Could Drop Insurance After 2014, Republicans Say
At the Becker's 23rd Annual Spine, Orthopedic and Pain Management-Driven ASC + The Future of Spine Conference, taking place June 11-13 in Chicago, spine surgeons, orthopedic leaders and ASC executives will come together to explore minimally invasive techniques, ASC growth strategies and innovations shaping the future of outpatient spine care. Apply for complimentary registration now.
