Providers and Practice Managers
MD, DO, PharmD, DDS, DC, PhD, RN, MSW, etc. etc. You’ve probably been hit on for HIPAA compliance, HIPAA training, HIPAA this and HIPAA that, for over five years. And maybe you've paid hundreds, even thousands of dollars for all that training, official HIPAA forms (no such thing, by the way), and so on.
Funny, but even with all the time and money that has been spent on HIPAA compliance, over 41,000 complaints have been made to Health & Human Services since HIPAA become effective in 2003. And now they’re averaging hundreds more complaints every month.
Oh, and the first fine has been levied -- $100,000. Got an extra hundred-thou sitting around in a money market account waiting to pay your fine – or are you expecting your insurance to cover it?
Why are some patients so unhappy about the way they are treated at private practices, clinics, and hospitals? They’re mad because they believe their privacy has been violated, and in some cases, it has. Patients are not provided with a copy of their health records when they request them; they are asked the reason for their visit in the waiting room by receptionists who don’t seem to mind if everyone hears; or they can’t read, much less understand, the Notice of Privacy Practices they’re given that’s written in 6 point type and is a copy of a copy of a copy.
Look, HIPAA compliance really isn’t that hard, and you don't need to have a "deep understanding" of it. The biggest problem you have to solve in order to prevent complaints from coming your way is to get past the BS, the myths, and all the so-called experts who think that 30 minutes worth of training is all that is needed to make you and your staff knowledgeable about rules that are 84 pages of double-columned 8 point print. It takes more than 30 minutes. It takes real-world examples, with real-world answers, backed up by citations when requested.
You and your staff don’t need training – you need concrete examples of what the rules say, how to apply them, and how to retain them. More than anything, you need to feel comfortable that the information given to your staff is based on what the rules really say, and not what some consultant out to make a buck and has no experience in a healthcare setting says. You need answers from someone who has been working the HIPAA Privacy & Security Rules, and only the HIPAA rules, for more than six years in the real world.
The healthcare system I’ve been working for has 300 beds, 1.5M outpatient visits per year, and 6,000 employees. From October 2007-September 2008 this system had 17 privacy-related complaints. Ten of them had no merit. The overall rate is .002. Not bad.
Maybe your practice hasn’t had any complaints – great! I’m willing to bet you’d like to keep it that way. Who needs the hassle and expense, and, more important, who wants unhappy patients?
I’ve got three plans you can take advantage of:
First, you can put me on retainer. My introductory offer, first 50 practices only, is $150 for a baker’s dozen worth of months – email your questions, and they’ll be answered within 48 hours. And you’ll get an electronic copy of a manual that addresses the most common errors that practices make (the ones that cause patients to complain to HHS), with real complaints and real answers. That’s an unlimited number of questions, and concrete answers your staff can relate to. Thirteen months. Good deal.
Second offer: If you get a complaint, either by letter, or in person, or from HHS, send the information to me and I’ll resolve it for you. Completely confidential -- and yes, I'll ensure that you're compliant with this process by providing you with a Business Associate Agreement. $75 per complaint. It’s that simple. Good deal.
Third offer: Send me your Notice of Privacy Practices, and your standard Business Associate Agreement – you DO have a standard Business Associate Agreement with all your business associates (coding and billing services, the tech guys who work on your computers, the companies who supply your medical or dental equipment), don’t you? – and I’ll work through them, polish them, fix them, and make the Notice easy for your patients to understand, and the Business Associate Agreement a document that your attorney should approve and cause your vendors to take notice. $100. Good deal.
Want all three plans? $300. Thirteen months. Very good deal.
Contact me directly at Lane@hipaadiva.com and get started with REAL compliance and, more important, ensuring the privacy of your patients. Because that’s what you want for your patients.
Attorneys
How many times have your paralegals or secretaries sent out a request for patient records, with a signed authorization, and had it kicked back? At the healthcare system where I’ve gotten my experience as a Privacy Officer since 2002, we regularly kick back requests from legal offices because the authorizations, signed by the client though they may be, aren’t compliant with the HIPAA rules.
Make it easy on yourself and your clients: For $50 I’ll provide you with an authorization that complies with the HIPAA Rules. And I'll give you the relevant citations.
Here’s my guarantee: if you use the authorization I provide you and a healthcare organization tells your staff it’s not HIPAA compliance, contact me and I’ll work with that organization to make sure they understand what a compliant authorization IS. Good deal.
Contact me directly at Lane@hipaadiva.com and get a real authorization document that will save you money and lower the frustration level at your practice. (Want a reference? Contact Cathy White, esq. Cwhite73@satx.rr.com)
Nurses
Coming Soon!