Laserfiche WebLink
<br />16 <br /> <br /> <br /> <br />Managed Care <br />Nursing facilities throughout the United States are facing a health care environment that is becoming <br />increasingly dominated by the development of risk-based managed care plans. The necessity for nursing facilities to <br />contract with managed care plans is increasing not only for privately insured residents but also for Medicaid and <br />Medicare beneficiaries. States are experimenting with innovative delivery and payment systems to provide care to <br />such beneficiaries, and in Minnesota there are certain plans that provide for contractual risk sharing in the delivery of <br />services to individuals who are eligible for both Medicaid and Medicare. The current trend in health care <br />reimbursement is for the federal government to enable the states to use managed care as a way to reduce costs without <br />the need for federal interference and approval. There can be no assurances that over time the Corporation will be able <br />to enter into satisfactory contracts with such managed care plans or that the revenues generated by any such managed <br />care plans with which it may choose to contract will be sufficient to meet the actual operating costs of the Corporation’s <br />nursing facilities. <br />Privacy and Security Regulations <br />The confidentiality of patient medical records and other health information is subject to considerable <br />regulation by state and federal governments. Legislation and regulations governing the dissemination and use of <br />medical record information are being proposed continually at both the state and federal levels. For example, the <br />administrative simplification provisions of HIPAA mandate that health care providers use and disclose certain <br />protected health information in accordance with DHHS standards and requirements. These rules require the <br />implementation of policies and procedures by covered entities for coding, maintaining, storing and transmitting <br />medical information, as well as policies and procedures designed to protect the security, data integrity and <br />confidentiality of patient medical information and to permit patients to exercise their specific rights under HIPAA. <br />HIPAA. The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) mandates the adoption <br />of federal privacy and security standards to protect the confidentiality of protected health information. Regulations <br />designed to protect health information impose very complex procedures and operational requirements. Failure to <br />protect the privacy and security of protected health information could result in damages or civil or criminal penalties. <br />In particular, HIPAA imposes civil monetary penalties for violations and criminal penalties for knowingly obtaining <br />or using individually identifiable health information. Any violation of HIPAA or the regulations promulgated <br />thereunder is subject to civil and criminal penalties that include monetary penalties and/or imprisonment. Violations <br />may increase operating expenses as necessary to notify affected individuals of privacy or security breaches, correct <br />problems, comply with federal and state regulations, defend against potential claims and implement and maintain any <br />additional requirements imposed by government action. <br />HIPAA, along with privacy rules arising under federal and various state statutes, addresses the confidentiality of <br />individuals’ health information. Use or disclosure of individually identifiable health information is prohibited unless <br />expressly permitted under the provisions of the HIPAA statute and regulations or authorized by the patient. HIPAA’s <br />confidentiality provisions extend not only to patient medical records, but also to a wide variety of health care clinical <br />and financial settings where patient privacy restrictions often impose new communication, operational, accounting <br />and billing restrictions. These add costs and create potentially unanticipated sources of legal liability. <br />On December 10, 2020, DHHS announced a proposed rule proposing changes to HIPAA regulations in an <br />effort to promote value-based health care. The proposed rule includes changes regarding individual rights to access <br />health information, related to information sharing for the purposes of care coordination and case management, and <br />relating to encouraging family and caregiver involvement in care of patients.