Frequently Asked Questions

We believe these files have information that states can rely on. As with any transmission of data or logic process, discrepancies may arise. However, we have done quality reviews and continue to act on reports of issues as quickly as possible by investigating them and introducing systems fixes as needed. We are continuing our testing and quality assurance efforts as well. We expect that states will be doing the same on accounts transferred from states to the FFM. We will continue to rely on our daily desk officer calls and our SOTA process to follow up with states on any questions that may arise.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 198.3 KB)

FAQ ID:91906

If the state would like to exclude individuals from enrollment based on the flat file, please reach out to CMCS to discuss the state's options. Our goal in offering this flat file option is to provide an additional avenue for enrollment and we will work with states on how they might best maximize the use of these files.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 198.3 KB)

FAQ ID:91921

In a letter dated November 29, 2013, (see http://www.medicaid.gov/Federal-PolicyGuidance/downloads/SHO-13-008.pdf (PDF, 117.76 KB)) CMS offered states the opportunity to apply for a waiver under section 1902(e)(14)(A) of the Social Security Act to allow them to make temporary enrollment decisions based on the information included in the flat file. So, as long as states follow the procedures outlined in the guidance and other applicable rules with respect to eligibility and claiming, federal funding is available for this temporary enrollment. Individual's circumstances might change and other factors might arise that could change the outcome of the eligibility determination once the state evaluates eligibility based on the full account transfer. Federal funding is not at risk for states that follow appropriate procedures to enroll beneficiaries based on the FFM's determination or assessment of eligibility.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 198.3 KB)

FAQ ID:91926

Since the waiver is a temporary grant of authority, if changes in circumstance are reported then states have the flexibility to choose to act on reported changes immediately or wait until the full determination occurs. If a state has the capability to review and process the changes reported they can do so, and if a state does not wish to act upon reported changes during this temporary waiver period that is also permissible. States should discuss with CMS how to document the state's policy regarding changes in circumstance in the waiver request.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 198.3 KB)

FAQ ID:91931

Because the Federally Facilitated Marketplace (FFM) is providing eligibility determinations/assessments for Medicaid under the MAGI standard, the state can process enrollment for MAGI individuals under the waiver authority. Since the FFM is providing non-MAGI applicant referrals on the expanded flat file, the state would act upon the non-MAGI referrals in the same manner as it would through the account transfer service.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 198.3 KB)

FAQ ID:91936

Yes, all the regulations and security constraints that apply to paper applications are necessary with the expanded flat file. The state would need to maintain the same level of security for the expanded flat file as they would in regard to paper applications.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 198.3 KB)

FAQ ID:91941

Applicants can apply for whatever state they choose. Sometimes someone will want to file an application for a state they don't currently live in. For example, if they are temporarily residing outside the state or have a family member or tax dependent that needs coverage who lives there. When an applicant applies on the Federally Facilitated Marketplace (FFM), they provide their home address and that information is used to validate the eligibility criteria of state residency during the eligibility determination process. If an applicant does not indicate they have a home address in the state they are applying to, and they do not indicate they are temporarily absent from the state, they will be denied Medicaid, CHIP and APTC for that state in accordance with state and federal rules. However, an applicant can always request a full determination, and in doing so, the account is transferred to the state indicated. In order to respond, the state will need to verify residency, and approve or deny Medicaid as applicable.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 198.3 KB)

FAQ ID:91946

The flat file contains only accounts that have been determined/assessed as eligible for Medicaid or referred for a full determination at the applicant's request. If an individual applies at the FFM, is potentially eligible for Medicaid based on income, and does not indicate that he or she is currently enrolled in Medicaid, the FFM does not check for other coverage. The state would do a check with its system as they do when an applicant applies directly to the state and take appropriate action if the person is already enrolled.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 198.3 KB)

FAQ ID:91951

State laws determine what information is required of the health plans. A health plan's disclosure and use of information that is required to be submitted under state law - such as, information from insurer eligibility files sufficient to determine during what period any individual may be, or have been, covered by a health insurer and the nature of the coverage that is or was provided by the health insurer — is consistent with the HIPAA privacy provisions.

Under HIPAA, both the state Medicaid agency and most health insurers are covered entities and must comply with the HIPAA Privacy Rule in 45 CFR Part 160 and Part 164, Subparts A and E. In their capacities as covered entities under HIPAA, the state Medicaid agency and health insurers are restricted from using and disclosing protected health information (PHI), as that term is defined in 45 CFR section 160.103, other than as permitted or required by the HIPAA Privacy Rule. However, as relevant here:

1. A covered entity may use or disclose PHI to the extent that such use or disclosure is required by law and the use or disclosure complies with and is limited to the relevant requirements of the law. (45 CFR 164.512(a)(1)) Under this provision, each covered entity must be limited to disclosing or using only the PHI necessary to meet the requirements of the law that compels the use or disclosure. Anything required to be disclosed by a law can be disclosed without violating HIPAA under the "required by law" provisions. Therefore, health insurers may disclose data elements in addition to the four minimum data elements, up to and including submission of an entire insurer eligibility file, to the extent such information is required to be submitted by state law. (45 CFR 164.512(a))
2. Separately, a covered entity may use or disclose PHI, without the consent of an individual, for payment activities, including to facilitate payment. (45 CFR 164.502(a)(1) and 164.506) Under HIPAA, the term payment includes activities undertaken by a health plan to determine or fulfill its responsibility for coverage and provision of benefits under the health plan. These activities include determinations of eligibility or coverage, adjudication or subrogation of health benefits claims, and collection activities. (45 CFR 164.501) To the extent plans are releasing this information to the Medicaid program for payment purposes; this is a separate basis for disclosure under HIPAA.
3. The HIPAA Privacy Rule generally requires covered entities to take reasonable steps to limit the use and disclosure of PHI to the minimum necessary to accomplish the intended purpose. (45 CFR 164.502(b)(1)) However, among other limited exceptions, the minimum necessary requirements do not apply to uses or disclosures that are required by law under 45 CFR 164.512(a).

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 252.32 KB)

FAQ ID:91216

Yes. There is a significant amount of third party coverage derived from health plans licensed in a different state than where the Medicaid beneficiary resides. This can commonly happen when the policyholder works in one state and lives in another state. For example, there may be policyholders who are enrolled in Medicaid coverage in Maryland, or have dependents that are enrolled, who work in Delaware, the District of Columbia, Pennsylvania, Virginia, or West Virginia and also have coverage through their employer in that state. This highlights the need for Medicaid agencies to obtain plan eligibility information from contiguous states in addition to collecting information in their respective state.

Another example is when Medicaid-eligible children are covered by the insurance plan of non-custodial parents who live in a different state than their child(ren). This example is not limited to contiguous states because non-custodial parents could reside in any state in the country. Depending on the size, it may be beneficial for the state to obtain the plan's entire eligibility file. The specific geographical areas to be included in the data exchange should be negotiated with the plans. We recommend use of a Trading Partner Agreement in the exchange of electronic data.

Finally, section 1902(a)(25)(I)(i) of the Social Security Act directs states, as a condition of receiving federal financial participation (FFP) for Medicaid, to have laws in effect that require health insurers doing business in their state to provide the state with the requisite information with respect to individuals who are eligible for, or are provided medical assistance, i.e., Medicaid beneficiaries. State law cannot reach beyond the entities that are "doing business" in their states.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 252.32 KB)

FAQ ID:91221