Health organizations tackle regulatory change at Mass. conference

The Massachusetts Health and Hospital Association recently convened its Healthcare Legal Compliance Forum to update members on key areas of regulatory change, compliance and enforcement in this late COVID era. 

Current and former law enforcement officials, healthcare compliance practitioners, attorneys and consultants gave a broad view of the priorities, challenges and opportunities facing the Compliance profession.  

Federal and State Enforcement Update 

Featured speakers: Toby R. Unger, Chief of Medicaid Fraud Division, Office of the Massachusetts Attorney General; and Patrick Callahan, Healthcare Fraud Unit, US Attorney’s Office. Moderated by David Schumacher, Partner, Hooper, Lundy & Bookman. 

Unger and Callahan noted that the pandemic shifted the makeup of their case load. It reduced the rate of whistleblower and other fraud complaints, and for Unger at least, abuse cases increased.  

They talked about how health organizations can effectively partner with law enforcement. They generally see the best outcomes when Compliance and Legal teams bring issues to them or work quickly with them to find data and resolve issues. 

And they shared their take on effective Compliance functions. A good Compliance department doesn’t need to be huge with a lot of people and formal processes,” Callahan said. “A good department is one that has a real effect when they ask leadership to make a change. They have a voice that gets leadership’s attention, and they can have questionable practices stopped during an investigation. When they ask to press pause, they are listened to.”  

Read More: State and Federal enforcement agencies anticipating more complex investigations as COVID-era practices emerge

Compliance Officer Roundtable  

Featured speakers:  Craig Bennett, Vice President and Chief Compliance Officer, Boston Medical Center; Rachel Lerner, Esq., General Counsel & Chief Compliance Officer, Director, Center for the Prevention of Elder Abuse and Neglect, Hebrew SeniorLife; Maria Palumbo, Chief Compliance & Privacy Officer, Lawrence General Hospital. Moderated by Larry Vernaglia. 

Bennett, Lerner, and Palumbo shared their experience over nearly two years of pandemic-influenced healthcare compliance. They talked about how they collaborated to manage regulatory change and reinforce their culture of compliance. They also talked about the regulatory changes they are planning for in 2022.  

Lerner said she spends a lot of time looking at regulatory changes to understand their implications to her organization. “It can take us a long time to decide ‘does this apply to us?’ And then figure out what to do with it. Then we have to figure out what to do with that information in bits and pieces. It is certainly a complex, ever-changing universe on that front.” She spoke of Compliance’s key role in knitting together all that information to help the organization act correctly and then integrate it into daily processes. 

Read More: Compliance officers reflect on COVID pivots and preparing for the end of the public health emergency

Telehealth in the Pandemic and Beyond  

Featured speakers: Marcus Hughes, Associate General Counsel, UMass Memorial Health; Meg Cosgrove, Associate General Counsel, Beth Israel Lahey Health. And moderated by Jeremy Sherer, Healthcare Attorney, Hooper, Lundy, & Bookman. 

Hughes and Cosgrove discussed interstate telehealth compliance issues. They talked about the hard adjustments providers have to make as demand for telehealth surges and scrutiny of out-of-state practice increases. They shared ways they are preparing for the regulatory changes that will come with the end of the public health emergency.  

As waivers expire, Compliance officers have to increase their efforts at making sure providers understand licensing requirements and the risk of non-compliance. 

Hughes noted that there is a common belief that there is a national framework for remote care, but actually there isn’t. “Now that we’re in the late stage of the pandemic, we have to educate our staff to dispel some of the myths that are out there. And we have to make sure they know that the COIVD waivers are coming to an end.”  

Read More: Healthcare GCs look at telehealth compliance in the Pandemic and beyond

COVID-19 Hot Compliance Topics  

Featured speaker: Martie Ross, Office Managing Principal, PYA  

Ross covered federal vaccine mandates. unwinding regulatory flexibilities, and provider relief fund audits and enforcement. Her detailed slides are available from PYA here. They provide great insight for Compliance practitioners. 

Ross recommends that you review and track changes to internal policies and practices and establish a process to completely unwind. “As a compliance officer, it’s time to back through your compliance documentation over the past two years and think about how you’re going to unwind from these changes,” she said. 

Read More: Compliance expert Martie Ross explains critical regulatory change management issues facing healthcare in 2022

YouCompli sponsored MHA’s 2021 Healthcare Legal Compliance Forum. We provide a complete solution to help healthcare compliance organizations manage regulatory change. Find out more about YouCompli.  

Subscribe to get the latest articles about healthcare regulatory changes.

Man typing on laptop
Request a demo of the YouCompli solution.

Six key steps to reduce the impact of telehealth audits

Telehealth is almost as old as the telephone itself. In 1879 – just three years after Bell patented the telephone – an article in Lancet described the concept and advocated its adoption. 

A law that’s even older can trigger many telehealth audits today. The 1863 False Claims Act (FCA) was enacted to keep profiteering contractors from defrauding the Union army. It can trigger serious problems for hospitals that don’t take proactive steps to make sure their telehealth practices are audit-proof.  

That’s because the 2010 Affordable Care Act updated the FCA to make healthcare providers liable for “retention of any overpayments” from Medicare and Medicaid. This even includes overpayments resulting from accident or error. Indexing penalties for inflation each year, a requirement added in 2015, increased hospital liabilities. This puts liabilities at three times the amount of the overpayment(s) plus $11,803 to $23,607 for each instance. (Some 29 states and the District of Columbia have additional False Claim laws.) 

These laws’ implications and requirements touch every part of the hospital. Keeping the whole organization in compliance means that all departments have to work together. 

New laws, new regs, new worries for telehealth 

Even before COVID, the government audited claims from what was then a smaller, rural telehealth system. Regulators found a trend of incorrect payments to doctors outside rural areas, who were therefore ineligible to receive them. 

Telehealth is on the latest Office of the Inspector General (OIG) work plan, too. The OIG will be addressing remote patient monitoring by telehealth as an area of concern. 

The public health emergency, with its series of 90-day waivers, made it possible for telehealth to grow so fast. Now, as the COVID emergency ebbs, Congress is considering making its current, expanded status permanent. (Two bills were introduced in May. One would enable audio-only telehealth services for Medicare enrollee. The other would expand telehealth for Medicaid and Children’s Health Insurance Programs.) 

That’s good. But with laws come regulations covering acceptable types, locations and forms of delivery of telehealth services. And with regulations come scrutiny and audits. That can create challenges, especially with the specter of FCA liability in the background. 

The best way to cope with audits is to prevent the need for them in the first place. Here are six steps to follow: 

  1. Know what you’re up against. Keep up to date with all the developing federal and state regulations, waivers, and other requirements. That in itself can take up most, if not all, of your personal and your compliance team’s time.  
     
    Related: Find out how a team of expert compliance professionals and a nationally respected law firm track and analyze the latest regulatory changes, keep you updated, and give you actionable ways to adapt your process.  
     
  1. Inventory your waivers. Which waivers do you rely on, in which departments and facilities? Do the providers and staff that they apply to know about them? And who makes sure the requirements are met and documents it? 
  1. Check your records. One of the biggest causes of noncompliance isn’t malice. It’s error. Did an accidental typo in Coding result in an incorrect claim? Does everyone in Billing know which states require what reimbursement levels for telehealth services? Are certain telehealth records missing? Who’s responsible for keeping the signed doctors’ orders and documents that establish medical necessity? Do patients and services meet billing guidelines? Do you have a telehealth compliance policy? Does it need changing? Start conducting spot-checks to find out. 

    Related: Find out about state requirements for telehealth billing.  
     
  2. Audit your process. Another big cause of noncompliance is miscommunication – particularly the assumption that someone else is taking care of something. So put together an internal audit team, with each department represented. That way, each can learn from the other. Hold an entrance conference to highlight what you learned from your spot checks, define the internal audit’s scope, set expectations, and assign specific tasks and timelines. 
  1. Fix whatever’s broken. Reconvene the internal audit team and communicate the findings. Together, use that input to find opportunities to correct or cure what’s wrong in your process. Then, create a Corrective Action Plan (CAP) that will include needed education, training, policy, and process changes. Monitor your CAP over time, to see how it’s working and to spot anything else that needs fixing. 
  1. Rebill and repay. If your internal audit and CAP were successful, you’ll have discovered missing or insufficient documentation. Report it. You may have also have found instances of incorrect payments. Rebill and repay. Yes, it will cost your hospital money. But not nearly as much as a full-blown government audit. A Department of Justice investigation could end up costing you time, legal fees, and FCA triple damages. 

Patient demand for telehealth isn’t going away. Neither are the costs of noncompliance with telehealth regulations. As the public health emergency expires, fines from regulators and denial of claims from payers are sure to add up. The best way for your healthcare organization to solve these potentially massive financial problems is to work together to prevent them. Proactively partnering with colleagues in all relevant departments, your compliance team can lead the efforts to identify and fix issues before they become major problems. That way, you’ll be able to provide the telehealth services patients want in compliance with what the regulations demand. 

It’s a big effort to keep your compliance champions connected and communicating. See how YouCompli can help you manage the rollout of new regulations and verify best efforts to regulators and your board. YouCompli is the only healthcare compliance software combining actionable regulatory analysis with a simple SaaS workflow.