HIPAA Handbooks

  • Privacy and security training for new and seasoned staff
  • 11 staff/setting focus areas
  • Education on protecting PHI
  • HITECH Act updates
  • Discounts on bulk purchases

More»

E-learning

  • Role-based training using real-life case scenarios
  • Test-your-knowledge exercises with remediation
  • Post-course test to document staff participation

More»

Other HIPAA Resources

  • Hot-topic audio conferences
  • CD-Rom, books on privacy and security
  • Business associate training
  • Videos with real-life HIPAA scenarios

More»

May
21

Lawsuit: Red Flags Rule violates doctor/patient relationship

Email This Post Print This Post

By Cheryl Clark, HealthLeaders Media

Medical and osteopathic associations today sued the Federal Trade Commission for covering them under the Red Flags Rule, which requires them to start verifying their patients’ true identities before they agree to treat them. Enforcement of the rule begins June 1.

The lawsuit seeks to prevent the FTC from defining physicians as “creditors” whenever they do not require payment in full at the time they provide care, and later bill them, according to the brief filed by the American Medical Association and the American Osteopathic Association and the Medical Society of the District of Columbia, the District Court where the case was filed.

“Creditors,” as defined by the FTC, must comply with the rule by implementing an identity theft prevention program that detects “red flags” for potential medical identity theft.

The physician groups say that the rule requires them to set up identity theft prevention and detection programs, which aren’t necessary, and said the FTC was “arbitrary and capricious” in extending the application of the law to them.

Also, the extension of the Red Flags Rule to doctors would do nothing to improve care, the physician groups say.

The American Bar Association was successful in its litigation to exempt attorneys from having to comply with the rule.

The AMA and several other health provider groups petitioned the FTC in March for a similar exemption, but were not successful.

According to the lawsuit, complying with the Red Flags Rule “imposes significant burdens on physicians, particularly sole practitioners, and those practicing in small groups.”

Also it would require physicians to develop a plan to detect red flags, which cannot always be done “on a cookie cutter basis,” the lawsuit says. “A plan for a physician who serves in a rural area in which patients are well-known will be different from one for a physician in a large group in a urban area. The injuries suffered by the Medical Associations and their members, as well as by the Medical Societies and their members, from application of the Red Flags Rule to physicians cannot be remedied at law and are irreparable.”

The physicians’ complaint also says that the FTC acted beyond its authority because they are not reasonably considered “creditors” nor are patients “account holders” or “customers” under the Fair and Accurate Credit Transactions Act.

Categories : Red Flags Rule

Comments

  1. Bonnie @ MEDITECH says:

    As a consumer, I am horrified by this attempt to exempt Physician practices from the Red Flag Rules. It is just as possible that someone can use my identity/insurance/financial information when presenting at a Physician’s office as it would be in a larger healthcare setting.

    “A plan for a physician who serves in a rural area in which patients are well-known will be different from one for a physician in a large group in a urban area.” Of course it will! None of this legislation dictates WHAT the entities/practices Red Flag policy and procedures must entail. This is specifically why it is up to each entity to devise their own policy. The policy, the Red Flags that are defined and then followed up on when they occur, can be relatively simple and common sense indicators. If these providers would simply read through the ruling and understand exactly what is involved in meeting this requirement, they would have already been able to meet the (4) criteria in the amount of time they have taken resisting being held accountable.