Frequently Asked Questions are used to provide additional information and/or statutory guidance not found in State Medicaid Director Letters, State Health Official Letters, or CMCS Informational Bulletins. The different sets of FAQs as originally released can be accessed below.
Frequently Asked Questions
The Deficit Reduction Act of 2005 (DRA) requires states to have laws in effect that require health insurers to honor claims submitted by the Medicaid agency within three years of the date of service.
Supplemental Links:
State Medicaid agencies and their business associates can use the data obtained pursuant to the process established under section 1902(a)(25)(I) of the Social Security Act and applicable state laws, as permitted or required by law. This should include the coordination of payments for services covered under the Medicaid state plan and actions to ensure that correct payment amounts are made under the Medicaid program and that mistaken payments are recovered. If the appropriate legal relationships are established (e.g., business associate agreements under the Health Insurance Portability and Accountability Act of 1996 (HIPAA)), we expect that the data could be released to entities working under contract with a state agency for use in activities such as claims adjudication activities, or for the purpose of recovering improper Medicaid payments. State Medicaid agencies must have procedures in place to ensure that the privacy of individuals is appropriately protected, and that information concerning applicants and beneficiaries is protected in accordance with the requirements of 42 CFR Part 431 Subpart F and the regulations at 45 CFR Parts 160 and 164, which were promulgated under HIPAA and Health Information Technology for Economic and Clinical Health (HITECH) Act.
Supplemental Links:
State laws determine what information is required of the health plans. A health plan's disclosure and use of information that is required to be submitted under state law - such as, information from insurer eligibility files sufficient to determine during what period any individual may be, or have been, covered by a health insurer and the nature of the coverage that is or was provided by the health insurer — is consistent with the HIPAA privacy provisions.
Under HIPAA, both the state Medicaid agency and most health insurers are covered entities and must comply with the HIPAA Privacy Rule in 45 CFR Part 160 and Part 164, Subparts A and E. In their capacities as covered entities under HIPAA, the state Medicaid agency and health insurers are restricted from using and disclosing protected health information (PHI), as that term is defined in 45 CFR section 160.103, other than as permitted or required by the HIPAA Privacy Rule. However, as relevant here:
- A covered entity may use or disclose PHI to the extent that such use or disclosure is required by law and the use or disclosure complies with and is limited to the relevant requirements of the law. (45 CFR 164.512(a)(1)) Under this provision, each covered entity must be limited to disclosing or using only the PHI necessary to meet the requirements of the law that compels the use or disclosure. Anything required to be disclosed by a law can be disclosed without violating HIPAA under the ""required by law"" provisions. Therefore, health insurers may disclose data elements in addition to the four minimum data elements, up to and including submission of an entire insurer eligibility file, to the extent such information is required to be submitted by state law. (45 CFR 164.512(a))
- Separately, a covered entity may use or disclose PHI, without the consent of an individual, for payment activities, including to facilitate payment. (45 CFR 164.502(a)(1) and 164.506) Under HIPAA, the term payment includes activities undertaken by a health plan to determine or fulfill its responsibility for coverage and provision of benefits under the health plan. These activities include determinations of eligibility or coverage, adjudication or subrogation of health benefits claims, and collection activities. (45 CFR 164.501) To the extent plans are releasing this information to the Medicaid program for payment purposes; this is a separate basis for disclosure under HIPAA.
- The HIPAA Privacy Rule generally requires covered entities to take reasonable steps to limit the use and disclosure of PHI to the minimum necessary to accomplish the intended purpose. (45 CFR 164.502(b)(1)) However, among other limited exceptions, the minimum necessary requirements do not apply to uses or disclosures that are required by law under 45 CFR 164.512(a).
Supplemental Links:
Effective for dates of service on and after January 1, 2013 through December 31, 2014, states are required by law to reimburse qualified providers at the rate that would be paid for the service (if the service were covered) under Medicare. Most states and the District of Columbia will need to submit a Medicaid state plan amendment (SPA) to increase Medicaid rates up to this level. The Centers for Medicare & Medicaid Services (CMS) has issued a state plan amendment (SPA) preprint for the purpose of expediting review and approval of the primary care payment increase.
For dates of service starting January 1, 2013 qualified providers are entitled to receive the higher payment in accordance with the approved Medicaid state plan amendment. States may not have attestation procedures or higher fee schedule rates in place on January 1, 2013. In that event, providers will likely continue to be reimbursed the 2012 rates for a limited period of time. Once attestation procedures are in place and providers are identified as eligible for higher payment, the state will make one or more supplemental payments to ensure that providers receive payment for the difference between the amount paid and the Medicare rate. Qualified providers should receive the total due to them under the provision in a timely manner.
A state may draw federal financial participation for the higher payments only after the SPA methodology is approved.
Supplemental Links:
The statute specifies that higher payment applies to primary care services delivered by a physician with a specialty designation of family medicine, general internal medicine, or pediatric medicine. The regulation specifies that specialists and subspecialists within those designations as recognized by the American Board of Medical Specialties (ABMS) the American Osteopathic Association (AOA) or the American Board of Physician Specialties (ABPS) also qualify for the enhanced payment. Under the regulation, "general internal medicine" encompasses internal medicine and all subspecialties recognized by the ABMS, ABPS and AOA. In order to be eligible for higher payment:
- Physicians must first self-attest to a covered specialty or subspecialty designation.
- As part of that attestation they must specify that they either are Board certified in an eligible specialty or subspecialty and/or that 60 percent of their Medicaid claims for the prior year were for the Evaluation and Management (E&M) codes specified in the regulation. It is quite possible that physicians could qualify on the basis of both Board certification and claims history.
Only physicians who can legitimately self-attest to a specialty designation of (general) internal medicine, family medicine or pediatric medicine or a subspecialty within those specialties recognized by the American Board of Physician Specialties (ABPS), American Osteopathic Association (AOA) or American Board of Physician Specialties (ABPS) qualify.
It is possible that a physician might maintain a particular qualifying Board certification but might actually practice in a different field. A physician who maintains one of the eligible certificates, but actually practices in a non-eligible specialty should not self-attest to eligibility for higher payment. Similarly, a physician Board certified in a non-eligible specialty (for example, surgery or dermatology) who practices within the community as, for example, a family practitioner could self-attest to a specialty designation of family medicine, internal medicine or pediatric medicine and a supporting 60 percent claims history. In either case, should the validity of that physician's self-attestation be reviewed by the state as part of the annual statistical sample, the physician's payments would be at risk if the agency finds that the attestation was not accurate.
Supplemental Links:
Subspecialists that qualify for higher payment are those recognized by the American Board of Medical Specialties (ABMS), American Board of Physician Specialties (ABPS) or American Osteopathic Association (AOA). For purposes of the rule, "General Internal Medicine" encompasses "Internal Medicine" and all recognized subspecialties. The websites of these organizations currently list the following subspecialty certifications within each specialty designation:
ABMS
Family Medicine - Adolescent Medicine; Geriatric Medicine; Hospice and Palliative Medicine; Sleep Medicine; Sports Medicine.
Internal Medicine - Adolescent Medicine; Advanced Heart Failure and Transplant Cardiology; Cardiovascular Disease; Clinical Cardiac Electrophysiology; Critical Care Medicine; Endocrinology, Diabetes and Metabolism; Gastroenterology; Geriatric Medicine; Hematology; Hospice and Palliative Medicine; Infectious Disease; Interventional Cardiology; Medical Oncology; Nephrology; Pulmonary Disease; Rheumatology; Sleep Medicine; Sports Medicine: Transplant Hepatology.
Pediatrics - Adolescent Medicine; Child Abuse Pediatrics; Developmental-Behavioral
Pediatrics; Hospice and Palliative Medicine; Medical Toxicology; Neonatal-Perinatal Medicine; Neurodevelopmental Disabilities, Pediatric Cardiology; Pediatric Critical Care Medicine; Pediatric Emergency Medicine; Pediatric Endocrinology; Pediatric Gastroenterology; Pediatric Hematology-Oncology; Pediatric Infectious Diseases; Pediatric Nephrology; Pediatric Pulmonology; Pediatric Rheumatology, Pediatric Transplant Hepatology; Sleep Medicine; Sports Medicine.
AOA
Family Physicians - No subspecialties
Internal Medicine - Allergy/Immunology; Cardiology; Endocrinology; Gastroenterology; Hematology; Hematology/Oncology; Infectious Disease; Pulmonary Diseases; Nephrology; Oncology; Rheumatology.
Pediatrics - Adolescent and Young Adult Medicine, Neonatology, Pediatric Allergy/immunology, Pediatric Endocrinology, Pediatric Pulmonology.
ABPS
The ABPS does not certify subspecialists. Therefore, eligible certifications are: American Board of Family Medicine Obstetrics; Board of Certification in Family Practice; and Board of Certification in Internal Medicine. There is no Board certification specific to Pediatrics.