Frequently Asked Questions

No, an upper payment limit demonstration considers all Medicaid payments (base and supplemental). States must conduct UPL demonstrations for the applicable services described in State Medicaid Director Letter (SMDL) 13-003 regardless of whether a state makes supplemental payments under the Medicaid state plan for the services.

FAQ ID:92191

The cost of the tax should be reported in Variable 401 - MCD Provider Tax Cost. A state may separately report the Medicaid portion of the cost of a provider assessment/tax only when it is using a cost based methodology to calculate the UPL. A state may not include this cost when calculating a DRG or Payment based UPL demonstration.

FAQ ID:92366

The regulation only prohibits insurance policies that would be sold ""in conjunction with"" enrollment in the Medicaid managed care plan. Section 438.104 alone does not prohibit a Medicaid managed care plan from providing information about a Qualified Health Plans (QHP) to potential enrollees who could enroll in such a plan as an alternative to the Medicaid managed care plan due to a loss of Medicaid eligibility or to potential enrollees who may consider the benefits of selecting an Medicaid managed care plan that has a related QHP in the event of future eligibility changes. However, Medicaid managed care plans should consult their contracts and the State Medicaid agency to ascertain if other provisions exist that may prohibit or limit such activity.

Section 438.104(b)(1)(iv) implements a provision in section 1932(d)(2)(C) of the Social Security Act, titled ""Prohibition of Tie-Ins."" In promulgating regulations implementing this provision, CMS clarified that we interpreted it to preclude tying enrollment in the Medicaid managed care plan with purchasing (or the provision of) other types of private insurance. We do not intend the statutory prohibition of tie-ins to apply to a discussion of a possible alternative to the Medicaid managed care plan, which a QHP could be if the consumer is determined to be not Medicaid eligible or loses Medicaid eligibility.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 138.58 KB)

FAQ ID:94351

States are encouraged to review their managed care contracts to clearly identify the legal entity with which they are contracted for Medicaid coverage since federal Medicaid managed care regulations do not address this aspect of contracting. If the party to the contract is an entity (such as a parent company) that has a contract with a state Medicaid agency to provide benefits as a Medicaid managed care plan and is also a QHP issuer, then some contractual provisions may apply to both. Although the federal Medicaid regulations do not apply to a QHP issuer or QHP, state law, regulation, or contract language may have implications for the QHP issuer. If changes are needed to narrow the scope of the contract to apply only to the Medicaid managed care plan, we encourage states to make those changes so as to ensure consistent understanding and application of the Medicaid contract terms.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 138.58 KB)

FAQ ID:94371

Yes. Responding to direct questions from consumers is not generally a violation of 42 CFR 438.104. Proactive consumer inquiries to a health plan for information about coverage options, benefits, or provider networks is no different than a consumer obtaining information from the health plan's website. So long as the limits on marketing are satisfied and respected (e.g., the information is accurate and does not mislead, confuse or defraud beneficiaries or the state Medicaid agency), responding to direct questions from potential enrollees with accurate information is not prohibited.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 138.58 KB)

FAQ ID:94391

There is no provision in 42 CFR 438.104 specifically addressing a Medicaid managed care plan's outreach to enrollees for eligibility purposes; therefore, it depends on the Medicaid managed care plan's contract with the state Medicaid agency. The federal regulation at 42 CFR 438.104 defines marketing as ""any communication, from an [Medicaid managed care plan] to a Medicaid beneficiary who is not enrolled in that entity, that can reasonably be interpreted as intended to influence the beneficiary to enroll in that particular [Medicaid managed care plan's] Medicaid product, or either to not enroll in, or to disenroll from, another [Medicaid managed care plan's] Medicaid product."" So long as information and outreach about the eligibility renewal process is neither directed to beneficiaries who are not enrolled with that Medicaid managed care plan, nor intended to influence the beneficiary to enroll in that particular Medicaid managed care plan-or to not enroll in, or disenroll from another Medicaid managed care plan-the activity is not within the scope of 42 CFR 438.104. Materials and information that purely educate an enrollee of that Medicaid managed care plan on the importance of completing the State's Medicaid eligibility renewal process in a timely fashion would not meet the federal definition of marketing. However, Medicaid managed care plans should consult their contracts and the state Medicaid agency to ascertain if other provisions exist that may prohibit or limit such activity.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 138.58 KB)

FAQ ID:94396

State laws determine what information is required of the health plans. A health plan's disclosure and use of information that is required to be submitted under state law - such as, information from insurer eligibility files sufficient to determine during what period any individual may be, or have been, covered by a health insurer and the nature of the coverage that is or was provided by the health insurer — is consistent with the HIPAA privacy provisions.

Under HIPAA, both the state Medicaid agency and most health insurers are covered entities and must comply with the HIPAA Privacy Rule in 45 CFR Part 160 and Part 164, Subparts A and E. In their capacities as covered entities under HIPAA, the state Medicaid agency and health insurers are restricted from using and disclosing protected health information (PHI), as that term is defined in 45 CFR section 160.103, other than as permitted or required by the HIPAA Privacy Rule. However, as relevant here:

1. A covered entity may use or disclose PHI to the extent that such use or disclosure is required by law and the use or disclosure complies with and is limited to the relevant requirements of the law. (45 CFR 164.512(a)(1)) Under this provision, each covered entity must be limited to disclosing or using only the PHI necessary to meet the requirements of the law that compels the use or disclosure. Anything required to be disclosed by a law can be disclosed without violating HIPAA under the "required by law" provisions. Therefore, health insurers may disclose data elements in addition to the four minimum data elements, up to and including submission of an entire insurer eligibility file, to the extent such information is required to be submitted by state law. (45 CFR 164.512(a))
2. Separately, a covered entity may use or disclose PHI, without the consent of an individual, for payment activities, including to facilitate payment. (45 CFR 164.502(a)(1) and 164.506) Under HIPAA, the term payment includes activities undertaken by a health plan to determine or fulfill its responsibility for coverage and provision of benefits under the health plan. These activities include determinations of eligibility or coverage, adjudication or subrogation of health benefits claims, and collection activities. (45 CFR 164.501) To the extent plans are releasing this information to the Medicaid program for payment purposes; this is a separate basis for disclosure under HIPAA.
3. The HIPAA Privacy Rule generally requires covered entities to take reasonable steps to limit the use and disclosure of PHI to the minimum necessary to accomplish the intended purpose. (45 CFR 164.502(b)(1)) However, among other limited exceptions, the minimum necessary requirements do not apply to uses or disclosures that are required by law under 45 CFR 164.512(a).

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 252.32 KB)

FAQ ID:91216

Yes. There is a significant amount of third party coverage derived from health plans licensed in a different state than where the Medicaid beneficiary resides. This can commonly happen when the policyholder works in one state and lives in another state. For example, there may be policyholders who are enrolled in Medicaid coverage in Maryland, or have dependents that are enrolled, who work in Delaware, the District of Columbia, Pennsylvania, Virginia, or West Virginia and also have coverage through their employer in that state. This highlights the need for Medicaid agencies to obtain plan eligibility information from contiguous states in addition to collecting information in their respective state.

Another example is when Medicaid-eligible children are covered by the insurance plan of non-custodial parents who live in a different state than their child(ren). This example is not limited to contiguous states because non-custodial parents could reside in any state in the country. Depending on the size, it may be beneficial for the state to obtain the plan's entire eligibility file. The specific geographical areas to be included in the data exchange should be negotiated with the plans. We recommend use of a Trading Partner Agreement in the exchange of electronic data.

Finally, section 1902(a)(25)(I)(i) of the Social Security Act directs states, as a condition of receiving federal financial participation (FFP) for Medicaid, to have laws in effect that require health insurers doing business in their state to provide the state with the requisite information with respect to individuals who are eligible for, or are provided medical assistance, i.e., Medicaid beneficiaries. State law cannot reach beyond the entities that are "doing business" in their states.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 252.32 KB)

FAQ ID:91221

Yes. State Medicaid programs may enter into data matching agreements directly with third parties or may obtain the services of a contractor to complete the required matches. Such arrangements should comply with Health Insurance Portability and Accountability Act of 1996 (HIPAA)'s "Business Associate" requirements, where applicable. When the state Medicaid program chooses to use a contractor to complete data matches, including matches as required by the Deficit Reduction Act of 2005 (DRA), the program delegates its authority to obtain the desired information from third parties to the contractor.

Third parties should generally treat a request from the contractor as a request from the state Medicaid agency. Third parties may request verification from the state Medicaid agency that the contractor is working on behalf of the agency and the scope of the delegated work.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 252.32 KB)

FAQ ID:91226

Yes. State Medicaid programs may contract with MCOs to provide health care to Medicaid beneficiaries, and may delegate responsibility and authority to the MCOs to perform third party liability TPL discovery and recovery activities, including data matches as required by the Deficit Reduction Act of 2005 (DRA). The Medicaid program may authorize the MCO to use a contractor to complete these activities. The contract language between the state Medicaid agency and the MCO dictates the terms and conditions under which the MCO assumes TPL responsibility. Generally, any TPL administration and performance standards for the MCO will be set by the state and should be accompanied by state oversight.

When TPL responsibilities are delegated to an MCO, third parties are required to treat the MCO as if it were the state Medicaid agency, including:

1. Providing access to third party eligibility and claims data to identify individuals with third party coverage;
2. Adhering to the assignment of rights from the state to the MCO of a Medicaid beneficiary's right to payment by such insurers for health care items or services; and,
3. Refraining from denying payment of claims submitted by the MCO for procedural reasons.

Third parties may request verification from the state Medicaid agency that the MCO or its contractor is working on behalf of the agency and the scope of the delegated work.

Supplemental Links:

• This FAQ was released as part of a larger set. View the full set. (PDF, 252.32 KB)

FAQ ID:91231