An unencrypted thumb drive cost a dermatology practice $150,000. On December 26, 2013, the U.S. Department of Health & Human Services (HHS) announced a settlement with Adult & Pediatric Dermatology, P.C. of Concord, Massachusetts (APD) of alleged violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA). APD, a “covered entity” for HIPAA purposes, has offices in Concord, Westford, Marlborough, and Ayer, Massachusetts, and Wolfeboro, New Hampshire.
The thumb drive contained unsecured electronic protected health information (ePHI) relating to the performance of Mohs surgery for about 2,200 patients. The thumb drive was stolen from the vehicle of one of APD’s employees. APD informed its patients of the theft of the thumb drive and provided a media notice.
HHS investigated and determined that APD did not timely conduct an accurate and thorough analysis of the risks associated with potential exposure of the ePHI. HHS also determined that APD did not fully comply with the administrative requirements of HIPAA’s breach notification requirements to have written policies and procedures and train employees regarding breach notification requirements. HHS also determined that APD disclosed ePHI in violation of HIPAA by the access gained to it when APD did not reasonable safeguard an unencrypted thumb drive.
HHS fined APD $150,000 and required APD’s execution of a Corrective Action Plan. The Corrective Action Plan requires APD to develop a comprehensive risk analysis and risk management plan to ensure future compliance with HIPAA and to periodically report to HHS the status of APD’s implementation of the plan. HHS released its right to take further action against APD, conditioned upon full compliance by APD with the Corrective Action Plan. See HHS Resolution Agreement.
Continue reading ›
















The Affordable Care Act (ACA), widely known as “Obamacare,” will create new opportunities for primary care doctors (and some specialists) who weigh starting or converting to a direct primary care model. At first blush direct care medicine practices, also known as “concierge,” “boutique” and “retainer-based” practices, which charge patients a monthly or annual membership fee and tend to exclude (or limit) third party payer involvement (one of the strong points for pursuing the model), would seem limited as an opportunity by the ACA’s objective of getting everyone “insured.” But the opposite may prove to be the case. Actually, the ACA may drive a strong need for new concierge medicine doctors.
Nobody likes to work for free. Physicians and other healthcare providers are frequently at risk of non-payment for valuable services to patients due to third-party payer mistakes and/or attempts to arbitrarily delay, reduce or avoid reimbursement. A common practice of payers is, for example, to deny reimbursement based on an allegation that the provider did not submit correct paperwork or alleged improper coding. Another tactic of third third-party payers is to simply adjust a payment downward because the payer concludes the physician is entitled to less reimbursement based on what was paid on a prior, “similar” claim. Reimbursement issues have led 49 states to enact laws to address such problems. Unfortunately, State laws only mildly abate the problem for healthcare providers.
Ending a professional relationship is not easy for anyone. But the demise of a healthcare business relationship among doctors often involves more risks, greater headaches, and more issues to tackle than non-healthcare businesses. Dividing up medical business assets is, for example, much more complex and involved than simply drawing a line down the middle of the office. Federal laws and regulations affecting healthcare providers pose significant business risks and adverse legal ramifications where the division of assets is not done properly. If you and other physician owners are leaving a practice, it is critical to ensure any division of big ticket items — e.g., medical equipment leases, practice branding, and electronic health records – is done in a legally compliant manner.
The parties have talked in abstract terms and danced. There seems to be a deal in the making. Negotiating the particulars of a written purchase agreement for the sale/purchase of a medical practice – the real test to see if you have a deal — is time consuming and potentially expensive. Before you dive into that process, you want to know you have a deal and its specific parameters. A letter of intent is the tool that allows you to do just that. A letter of intent is, generally speaking, a non-binding way to see if you have a deal and establish a framework for the more involved process of negotiating a purchase agreement.
The amount of attention that physician recruitment receives from government eyes warrants recruitment agreements that are, ideally, airtight. So, what are key criteria for a physician recruitment agreement that is compliant and will work for both parties? There are many important elements of a good physician recruitment agreement, including the following.
Many doctors feel the involvement of an insurance company or other third party payer in the practice of medicine is a source of headaches for their medical practice. Nothing on the horizon seems to indicate that red tape, administrative burdens, and an arbitrary manner by which some insurers and other payers decide when and how claims get paid will abate. There seems to be no chance that a third party payer’s involvement in the practice of medicine will make rendering patient care better and easier. So what should doctors do to make a happy living providing care? How can patients afford and get the care and attention they need to protect their health?
On September 5, 2013, owners of Trust Care Health Services, Inc. (Trust Care) pled guilty in a Florida federal court to federal healthcare fraud charges. Roberto Marrero, Sandra Fernandez and Enrique Rodriguez, owned and operated Trust Care. Trust Care was a Florida corporation, incorporated in 2005 that did business as a home healthcare services business in the Miami and South Florida area. Trust Care provided home health and physical therapy services to Medicare beneficiaries.
The price Americans will pay for Affordable Care Act (ACA) changes may include lost wages and job benefits due to the price tag of ACA compliance for employers. It may seem to many like a good and noble thing to require insurers to insure everyone irrespective of health conditions and the attending financial risks and costs the insurer must assume; to make all individuals buy health insurance, irrespective of whether they want or need it; and to force employers to provide what the government decides says is the right kind of health insurance to employees. But nothing is free or without consequence, especially sweeping legislation intended to overhaul healthcare. Unfortunately, while the ACA will undoubtedly benefit many Americans, the true costs of the ACA will prove unaffordable for many employers and likely result in lost wages and job benefits for many Americans.
The Medicare Strike Force of the FBI and HHS-OIG continues