Breaking Compliance News Blog

MPA brings you a lot of compliance and HIPAA news in our blog.

But did you know there's even more in our monthly newsletter subscription?

MPA scours OIG, DOJ, FBI, and OCR enforcement updates and news headlines so you don't have to.

The pandemic has led covered entities and business associates to rethink training.

For starters, in-services are not always practical right now. With more remote employees, and concerns about trying to contain spread of the virus, in-person, classroom-style training is not working for everyone.

Plus, many providers are dealing with an evolving workforce: more agency/temp staff, more healthcare professionals newly hired due to loosened education or certification requirements during COVID-19. All of these people need training - and providers have less time to train.

Compliance and HIPAA training does not have to be in the form of a live in-service to be effective. 

MPA's Compliance and HIPAA Training Handbooks can help.

MPA scours OIG, DOJ, FBI, and OCR enforcement updates and news headlines so you don't have to.

We summarize enforcement trends and deliver the latest compliance and HIPAA developments to your inbox with our Monthly Compliance News Report.

Coming to this month's issue: 

• Professor sentenced for stealing cancer research money
• Nurse stole oxycodone from hospice patient
• Counselor bills more than 24 hours per day
• $1,000,000 HIPAA settlement
• Disgruntled fired employee stole patient records
• Photo of healthcare provider performing surgery in a helmet posted to social media
• Watch out for VoiP breaches
• Medical device company pays for social events at neurosurgeon’s restaurant
• ...and more!

The pandemic has led covered entities and business associates to rethink training.

For starters, in-services are not always practical right now. With more remote employees, and concerns about trying to contain spread of the virus, in-person, classroom-style training is not working for everyone.

Plus, many providers are dealing with an evolving workforce: more agency/temp staff, more healthcare professionals newly hired due to loosened education or certification requirements during COVID-19. All of these people need training - and providers have less time to train.

Compliance and HIPAA training does not have to be in the form of a live in-service to be effective. 

MPA's Compliance and HIPAA Training Handbooks can help.

MPA scours OIG, DOJ, FBI, and OCR enforcement updates and news headlines so you don't have to.

We summarize enforcement trends and deliver the latest compliance and HIPAA developments to your inbox with our Monthly Compliance News Report.

Coming to this month's issue: 

• OIG announces largest healthcare enforcement of all time 

• Nurse practitioner bills for medically unnecessary nursing home visits

• Fake nurse worked for eight providers before being caught

• 2nd largest HIPAA settlement announced

• Anthem settles again

• Intruder uses medical student's swipe card to access surgical suite

• German cyberattack leads to homicide investigation

• Paying ransomware can lead to federal penalties

• ...and more!

• You can read a sample report here. 

MPA scours OIG, DOJ, FBI, and OCR enforcement updates and news headlines so you don't have to.

We summarize enforcement trends and deliver the latest compliance and HIPAA developments to your inbox with our Monthly Compliance News Report.

Coming to this month's issue: 

• Nonprofit hospice pays $375,000 false claims settlement
• States are going after companies for price gouging PPE sales
• Nursing home surveys are back!
• Vishing scams: are your employees prepared?
• Hackers targeting entities involved with COVID-19 research, and ventilator manufacturers
• Nurse uses stolen nursing home resident PHI to pay off debts
• You can read a sample report here. 

MPA scours OIG, DOJ, FBI, and OCR enforcement updates and news headlines so you don't have to.

We summarize enforcement trends and deliver the latest compliance and HIPAA developments to your inbox with our Monthly Compliance News Report.

Coming to this month's issue: 

• SNF chain billed for unnecessary therapy
• PPP loan fraud leads to criminal charges
• Physician assistant took kickbacks from pharmaceutical company
• Providers enter 5-figure settlements for employing excluded providers
• The OCR resolves two complaints with providers whose COVID-19 polices involved religious discrimination
• Nursing homes hit with ransomware
• sou can read a sample report here. 

The pandemic has led covered entities and business associates to rethink training.

For starters, in-services are not always practical right now. With more remote employees, and concerns about trying to contain spread of the virus, in-person, classroom-style training is not working for everyone.

Plus, many providers are dealing with an evolving workforce: more agency/temp staff, more healthcare professionals newly hired due to loosened education or certification requirements during COVID-19. All of these people need training - and providers have less time to train.

Compliance and HIPAA training does not have to be in the form of a live in-service to be effective. 

MPA's Compliance and HIPAA Training Handbooks can help.

MPA scours OIG, DOJ, FBI, and OCR enforcement updates and news headlines so you don't have to.

Every month, we summarize enforcement trends and deliver the latest compliance and HIPAA developments to your inbox with our Monthly Compliance News Report.

Coming to this month's issue: 

• Man charged for promoting unproven COVID-19 tests
• Home health company breached Corporate Integrity Agreement when it failed to return overpayments
• OCR enters Early Case Resolutions (ECR) with a state whose COVID-19 hospital visitation policy allegedly amounted to disability discrimination
• OCR enters Early Case Resolution (ECR) with an organization that allegedly failed to provider interpreting services
• Employee downloaded patient records and gave them to an attorney
• 971-person breach due to employees using passwords for multiple accounts
• Nursing home sued for response to COVID-19
• Telehealth app breach allows patients to view videos of other patient telehealth visits

Not yet a subscriber? click here to sign up.  

You can read a sample report here. 

Here in Missouri, much of the state reopened on June 15: pools, restaurants, and gyms included. But life looks a lot different. Visitors are still restricted at nursing homes, people are wearing masks, hand sanitizer lurks around every corner, and many people are still choosing to stay home and use curbside services. It’s a different world.

Throughout the pandemic, I have asked healthcare providers: How has COVID-19 affected your compliance and HIPAA programs?

• Some people say: “It’s business as usual.”
• Others say: “I’m still working on compliance but at a much slower pace.” This is understandable, given the number of COVID-related tasks and guidance added to compliance officers’ plates.
• A few people have told me they actually have MORE time to work on compliance now, because other projects have been put on hold.
• And a handful have told me that compliance has been put on hold completely during the pandemic. I understand why this happens and I empathize with it. These are unprecedented times and healthcare providers are in the middle of a centennial challenge.

If you have had to curtail or limit your compliance efforts due to COVID-19: Document your decisions. Document what activities have been delayed, and why (e.g., resources were redirected to infection control).

As we enter month four of the national public health emergency, my hope for compliance officers who have slowed (or stopped) compliance efforts that they find a way to keep their compliance programs going and, to the extent possible, get back to business as usual.

Where should we start?

How you resume compliance will depend on your risks and resources. Here are some ideas to consider:

• Schedule a quarterly compliance committee meeting (especially if you are overdue). Use this time to recap your organization’s risks – COVID and non-COVID – and prioritize.
• Create an action plan to address these risks in order of priority. Decide how you will tackle each risk. Map out your plan over 12 months – and follow up monthly or quarterly to check on progress.
• Update your board. It’s possible that board meetings have been filled with urgent COVID-19 issues. If compliance has been bumped from the agenda, it’s time to get back on. Compliance, after all, has a key role in addressing and mitigating COVID-19 risks, like HIPAA, infection control, and EMTALA.
• Find out how you can support your staff. Healthcare employees are likely exhausted, overwhelmed, and stressed out. Compliance can help. An unprecedented amount of guidance has been published since February. What information could your employees be struggling with? Do they need help understanding new HIPAA guidance during the pandemic? When is the last time your employees were reminded of how to report compliance issues? When is the last time the Compliance Officer walked the floors to talk with staff, encouraging them to raise questions?
• Nursing homes should work on Phase 3 Compliance and Ethics programs. This means making sure updated policies are in place, policies are disseminated, and an annual review is conducted. It can take several months to conduct an annual review – start now and move the process forward. When surveys resume, you will be better off if you aren’t scrambling to implement compliance.

Yes, the pandemic continues. But compliance should also continue. When COVID-19 passes, or at least subsides to a better “new normal,” your organization will need compliance. Compliance provides education that helps people do their jobs; risk management and strategy to make your organization better; and process improvement to provide the best care possible. By taking little steps now to keep compliance going, you can avoid starting over after the pandemic.