Law firm Bass, Berry & Sims (BBS) summarize recent trends in U.S. healthcare regulation with a focus on potential changes to HIPAA. Specifically, the U.S. Department of Health and Human Services (HHS) and the Office for Civil Rights (OCR) issued an RFI to elicit comments on proposed modification to the HIPAA rules—with a focus on improving care coordination and aligning with the agency’s emphasis on value-based care or what is known as HHS’ “Regulatory Sprint to Coordinated Care.”
- The law firm of BBS note OCR seeks input primarily on four aspects of HIPAA Rules:
Promoting information sharing for treatment and care coordination. OCR seeks input on whether healthcare providers should be required to disclose protected health information (PHI) to another provider when requested for care coordination purposes (currently, the HIPAA Rules require a covered entity to disclose PHI only (i) to an individual pursuant to an access request and (ii) to OCR for compliance with the HIPAA Rules), whether (and under which circumstances) covered entities should expressly be permitted to share PHI with social service agencies and other non-provider third parties for care coordination purposes, and whether changes should be made to the minimum necessary rule to allow for fewer restrictions on disclosures for case management and care coordination. More broadly, OCR seeks additional input on ways to modify the HIPAA Rules to reduce administrative burdens and eliminate obstacles to information sharing in an effort to promote value-based care.
- Encouraging providers to share PHI with family members, caregivers and others to assist in the care of those with substance use disorders and mental health illness. OCR requests comment on (i) changes to the HIPAA Rules to help address the opioid epidemic while balancing the need to ensure the privacy of those seeking treatment, and (ii) changes to ensure that parents have access to the treatment information of their minor children relating to substance use disorders and mental health illness.
- Accounting of disclosures for treatment, payment and healthcare operations (TPO). OCR withdraws its prior notice of proposed rulemaking to implement the HITECH4 mandate that the accounting obligation be extended to disclosures for TPO made through an electronic health record (EHR). OCR instead requests feedback from covered entities to gauge the burden that accounting for TPO disclosures (including through their EHRs) would pose. OCR desires to implement this HITECH requirement without creating dis-incentives or obstacles to the continued adoption of EHRs by providers.
- Reducing the burden of compliance with Notice of Privacy Practices documentation requirements. OCR seeks input on the administrative and economic impact of the Notice of Privacy Practices requirements, specifically those requiring healthcare providers that have a “direct treatment relationship” with individuals to make a good faith effort to obtain written acknowledgment from the individual of receipt of the Notice. OCR considers removing the written acknowledgment requirements to reduce the burden on providers, but seeks to preserve individuals’ rights to information about covered entities’ privacy practices.
The U.S. public payer players are moving to value-based care and there is a continuous march to modify regulations to support this effort. Value-based care and care coordination are relevant topics for clinical researchers. Clinical research as care options continue will continue to be a hot topic. Patient-centricity movement drives the clinical research sponsor closer to the nexus of care. The research industry should have a keen interest in understanding the unfolding regulatory dynamics where care is provided.Source: JDSupra