Resources

Client Alerts, News Articles, Blog Posts, & Multimedia

Everything you need to know about BMD and the industry.

Telehealth Flexibility Updates: HIPAA, DEA, and CMS

Client Alert

The Covid-19 Public Health Emergency (PHE) officially ended on May 11, 2023.[1] But what does that mean for telehealth, a field that expanded exponentially during the PHE? Fortunately, many of the flexibilities will remain intact, at least temporarily. This client alert presents a brief overview of the timelines that providers need to follow, but for a more comprehensive review of telehealth flexibilities and when they will end, please see my presentation on the same topic here:  https://youtu.be/mIpFaKG7jio.[2]

HIPAA

On May 11, the Notice of Enforcement Discretion issued under HIPAA ended, which means providers must use HIPAA-compliant platforms and patient communication tools for all telehealth appointments. The Office of Civil Rights has released a statement allowing for a 90-day transition period for covered health care providers to come into compliance with the HIPAA rules. After that, providers should expect enforcement to resume.

Medicare

The Centers for Medicare and Medicaid Services (CMS) have extended many of the telehealth flexibilities offered during the pandemic but not all. For example, the waivers regarding telehealth and remote patient monitoring (RPM) cost sharing expired on May 11. [3]  CMS currently reimburses telehealth services at non-facilities at an equivalent rate to in-person rates, but this Medicare payment parity is scheduled to end on December 31, 2023.[4] Also, at the end of 2023, CMS will no longer allow virtual direct supervision.[5] Through the Consolidated Appropriations Act of 2023, many flexibilities were extended through December 31, 2024. [6] These include, among others:

  • FQHCs and RHCs can still serve as distant site providers for non-behavioral and mental telehealth services.
  • Medicare patients may receive telehealth services authorized by the Medicare 2023 physician fee schedule in their homes, and there will be no geographic restriction for the originating site for non-behavioral and mental telehealth services.
  • Certain non-behavioral and mental telehealth services can be delivered using audio-only communication platforms.
  • Providers can use telehealth for recertification of eligibility for hospice care.
  • The acute hospital care at-home program may continue to provide hospital services to patients in their homes using telehealth.

Physical therapists, occupational therapists, speech-language pathologists, or audiologists can still provide telehealth services.

There will be important permanent changes as well including:

  • FQHCs and RHCs can serve as distant site providers for behavioral and mental telehealth services.
  • Medicare beneficiaries can receive telehealth services for behavioral and mental health care in their homes.
  • No geographic restrictions for the originating site for behavioral and mental telehealth services, and services can be delivered using audio-only communication platforms.
  • Rural hospital emergency departments are accepted as originating sites.

DEA – Controlled Substances Prescribing

The DEA proposed new rules for permanent telemedicine flexibilities on Feb. 24, 2023.[1] These rules added flexibility to the Ryan Haight Act, while also trying to guard against any bad actors who are prescribing controlled substances improperly. The new rules would not impact telemedicine consultations that do not involve prescribing controlled substance or practitioners who have previously had an in-person exam. But they would prohibit a practitioner from being able to use telemedicine to prescribe more than a 30-day supply of Schedule III-V non-narcotic controlled medications or a 30-day supply of buprenorphine for the treatment of opioid use disorder without an in-person evaluation or referral from a medical practitioner that has conducted an in-person evaluation. The rules were exceptionally controversial and garnered over 38,000 comments. As a result, the DEA announced on May 10, 2023 that they would allow all COVID flexibilities to continue for another six months, until November 11, 2023. This buys the DEA enough time to rewrite the proposed rules and incorporate the many submitted comments. Therefore, until November 11, 2023 all providers may prescribe controlled substances through telehealth under the same rules that have been utilized throughout the pandemic.

Also notable are all of the telehealth safeguards and rules that individual states have instituted as a result of the COVID-19 pandemic. Ohio, for example, has instituted new laws and rules that govern telehealth for Medicaid patients as well as for all types of providers. The practice and regulation of telehealth will continue to evolve over the next several years, so it is important to understand all of the rules that apply to your practice. For questions, please reach out to attorney Ashley Watson at abwatson@bmdllc.com or any member of the BMD Healthcare Team.

[1]88 FR 12890; 88 FR 12875; DEA Announces Proposed Rules for Permanent Telemedicine Flexibilities, DEA (March 3, 2023, 12:32 PM), https://www.dea.gov/press-releases/2023/02/24/dea-announces-proposed-rules-permanent-telemedicine-flexibilities.

[1] Telehealth policy changes after the COVID-19 public health emergency, Telehealth.HHS.Gov (February 19, 2023, 1:45 PM), https://telehealth.hhs.gov/providers/policy-changes-during-the-covid-19-public-health-emergency/policy-changes-after-the-covid-19-public-health-emergency/.

[2] Please note the presentation was given prior to the DEA’s announcement on May 10, 2023 to extend controlled substance prescribing flexibilities.

[3] OIG Policy Statement Regarding Physicians and Other Practitioners That Reduce or Waive Amounts Owed by Federal Health Care Program Beneficiaries for Telehealth Services During the 2019 Novel Coronavirus (COVID-19) Outbreak, OIG (March 17, 2020); see also FAQs—OIG Policy Statement Regarding Physicians and Other Practitioners That Reduce or Waive Amounts Owed by Federal Health Care Program Beneficiaries for Telehealth Services During the 2019 Novel Coronavirus (COVID-19) Outbreak, OIG (March 24, 2020).

[4] CY 2023 Medicare Physician Fee Schedule (PFS).

[5] CY 2023 Medicare Physician Fee Schedule (PFS).

[6] Consolidated Appropriations Act of 2023, H. R. 2617.


Supreme Court Rules that Employers Must Show Substantial Increased Costs to Legally Decline Employees’ Religious Accommodation Requests

On June 29, 2023, the Supreme Court ruled in Groff v. DeJoy that under Title VII of the Civil Rights Act of 1964 (“Title VII”) employers must show, in order to decline religious accommodations, that the burden of granting religious accommodations to employees will result in substantial increased costs in relation to the conduct of an employer’s particular business, thus amending the prior, simple standard of a “de minimis” undue hardship.

Recent HIPAA Breach Settlements - Lessons Learned

According to the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR), the consequences for providers may include settlements of $30,000 to $240,000. OCR recently released two settlements for improper breaches of protected health information (PHI) that are good examples of the major monetary penalties that can result from common HIPAA mistakes.

Supreme Court Issues Major False Claims Act Decision

WEBINAR SERIES RECAP | Ending the Public Health Emergency + Post-Pandemic Check-Up

Some may take the position that the rest of the country already returned to a new “normal” following the COVID-19 pandemic.  But healthcare providers continue to implement COVID protocols and navigate the ever-changing healthcare regulations at both the federal and state levels.  It is important for healthcare providers to take time for a “Healthcare Check-Up” with the start of 2023 and the ending of the Public Health Emergency (“PHE”).

Sharp Rise in False Claims Act Cases - Navigating the FCA Waters

Recently, on April 18, 2023, the United States Supreme Court heard arguments regarding the FCA’s scienter, or mental state, requirement. To prove violation of the FCA, the statute requires that a defendant “knowingly” file false claims for payment. The term “knowingly” is defined within the statute to mean a person that acts with actual knowledge, deliberate ignorance, or reckless disregard. Circuit courts are split on how to interpret and apply the knowledge element of the FCA, and based on the Supreme Court’s decision, there will be a large impact on healthcare defendants and their businesses as well as anyone who contracts with, or receives money from, a federal program. A broader interpretation of the FCA would unnecessarily target and stifle healthcare, and other businesses, for simple errors in daily operations. This goes against the intended application of the FCA, which was to prevent fraudulent activity.