On April 17, Phoenix Cardiac Surgery, a five-physician practice in Phoenix and Prescott, Ariz., became the first small practice to enter a resolution agreement that included a civil money penalty over charges it violated HIPAA. The practice will pay $100,000 and take corrective actions.
HHS’ investigation found that the practice failed to implement adequate policies and procedures to protect patient information; failed to document that it trained employees on HIPAA Privacy and Security Rules; failed to identify a security official and conduct a risk analysis; and failed to obtain business associate agreements for its email and scheduling services.
This was the first resolution agreement with a small practice since the Privacy and Security Rules were granted greater enforcement powers in 2009.
Related Articles on Coding, Billing and Collections:
Op-Ed: 5010 Deadline Approaches, Physicians in Varying States of Preparedness
Medicare Overpayments/Underpayments Interest Rates Rise
Employers Could Drop Insurance After 2014, Republicans Say
At the Becker’s 32nd Annual Meeting: The Business and Operations of ASCs, taking place October 29-31 in Chicago, ASC leaders, surgeons and healthcare executives will explore strategies to drive growth, enhance operational performance, navigate reimbursement challenges and prepare for the future of ambulatory surgery. Apply for complimentary registration now.
