3.09: HIPAA and Billing - MedicalBillingandCoding.org (2024)

3.09: HIPAA and Billing

Now that you know a little more about what HIPAA is, it’s time to learn about how it affects billing. In this video, we’ll show you how HIPAA’s regulations impact the way we make claims and handle medical information.

PrevNext

In the previous course, we introduced you to HIPAA. In this course, we’ll show you how it affects the practice of medical billing.

Whether you know it or not, you’re actually already familiar with many of the provisions laid out by HIPAA. One of the most readily felt impacts of HIPAA is the standardization of medical codes used by coders and billers.

As we discussed in the last Course, HIPAA formalized the use of ICD codes for diagnosis and CPT and HCPCS codes for procedural reporting. We use these codes every day in medical billing to create claims.

HIPAA establishes and manages electronic medical transactions. Title II of HIPAA requires all providers and billers covered by HIPAA to submit claims electronically using the approved format. This format is known as ASC X12 005010. You may encounter the shorthand for this form as “HIPAA 5010.”

It’s important to remember that HIPAA 5010 does not necessarily prescribe the format of a claim, so much as the way it is transferred. You can think of HIPAA 5010 transactions as vehicles with uniform exteriors. They all must look the same, but each vehicle might carry different passengers in different arrangements (in this case, medical information).

Within ASC X12 005010, each type of transaction gets its own code set number. Let’s look at these code set numbers, and the type of transactions they correspond to, now. You’ll see that each code set number is preceded by an “X12.” This is to remind you that the code set is monitored and maintained by the ASC X12. Each of these transactions takes the form of a particular Electronic Data Interchange (EDI).

Each of these types of transaction forms has their own rules and formats. For simplicity’s sake, we’ve focused on the health care claim (the first code set number listed below), and we’ll continue to do so for the rest of the courses. The additional forms, and their code set numbers, are listed for your general knowledge in the downloadable ebook.

HIPAA Forms and Their Code Set Numbers

Health Care Claim Transaction

  • Code set number: X12 837
  • The health care claim is the most basic and common type of electronic medical transaction. Billers use claims to request reimbursem*nt on the behalf of providers. Claims include information about the patient, the provider, the patient’s health insurance plan, in addition to codes for the procedure and diagnosis.

Just as medical coders have to use the appropriate code set to describe a procedure or diagnosis, so too do medical billers have to use the right type of EDI to perform a certain billing task.

As you can see, HIPAA’s impact extends to almost every aspect of the medical billing process, from how records are stored and accessed to how codes are used in creating claims. As you pursue your formal training in medical billing, you’ll learn even more about HIPAA and the ways its affects medical billing.

3.09: HIPAA and Billing - MedicalBillingandCoding.org (2024)

FAQs

Where do I go for answers regarding HIPAA protected health information? ›

Frequently asked questions about the HIPAA Privacy and Security Rules can be found on the HIPAA Frequently Asked Questions site. For additional information about health information privacy, please visit the Office for Civil Rights' website.

What are the HIPAA rules for medical billing? ›

HIPAA Rules for Medical Billing: Privacy Rule

It simply covers the extent of how much you can much information disclose to other healthcare or medical entities. HIPAA rules for medical billing states that you can only have access to a patient's medical history and conditions including treatment information.

How does HIPAA affect the medical billing process? ›

HIPAA establishes and manages electronic medical transactions. Title II of HIPAA requires all providers and billers covered by HIPAA to submit claims electronically using the approved format. This format is known as ASC X12 005010. You may encounter the shorthand for this form as “HIPAA 5010.”

How many questions are in the HIPAA test? ›

HIPAA Certification Exam:

You need to pass the 12-question test (Six questions per chapter) with 70% to receive the Certified HIPAA Privacy Associate (CHPA®) certification. The test runs for 20 minutes (10 minutes allowed per chapter) and can be taken once only.

Which is the best answer as to who must comply with HIPAA? ›

Who Must Follow These Laws. We call the entities that must follow the HIPAA regulations "covered entities." Covered entities include: Health Plans, including health insurance companies, HMOs, company health plans, and certain government programs that pay for health care, such as Medicare and Medicaid.

What is the most common violation of HIPAA? ›

1. Poor Access Control Policies. The HHS (Department of Health and Human Services) and state attorney generals cite “failure to implement proper access controls” for protecting patient information as one of the most common HIPAA violations by healthcare services.

What is the hardest thing about medical billing and coding? ›

Understanding Medical Terminology, Codes, and Procedures. Medical billing and coding can be challenging, especially if you are not familiar with medical terminology, codes, and procedures. To be successful in this field, you must have a good understanding of these concepts.

What are 3 ways you can be guilty of a HIPAA violation? ›

A HIPAA violation refers to the failure to comply with HIPAA rules, which can include unauthorized access, use, or disclosure of Protected Health Information (PHI), failure to provide patients with access to their PHI, lack of safeguards to protect PHI, failure to conduct regular risk assessments, or insufficient ...

Are medical bills a HIPAA violation? ›

Under HIPAA, patient billing information qualifies as protected health information (PHI). Other types of PHI include information about an individual's mental or physical condition and the health care they receive.

Does HIPAA give access to billing? ›

Thus, individuals have a right to access a broad array of health information about themselves, whether maintained by a covered entity or by a business associate on the covered entity's behalf, including medical records, billing and payment records, insurance information, clinical laboratory test reports, X-rays, ...

Are billing companies covered under HIPAA? ›

Title II of HIPAA applies directly to medical billing companies, as it dictates the proper uses and disclosures of protected health information (PHI), as well as simplifying processing of claims and billing.

What could happen if you have violated HIPAA as a healthcare provider? ›

The penalties can include fines, corrective action plans, or even jail time. The OCR issues penalties for HIPAA violations. These range in severity based on the nature of the offense and the knowledge the offender had of the violation. HIPAA violations can involve one single person's PHI.

How do you maintain patient confidentiality and comply with HIPAA regulations in medical billing? ›

Healthcare providers should develop and implement security policies and procedures, train employees on security best practices, limit access to PHI, and regularly review and update security protocols to ensure compliance with HIPAA regulations.

Where can I ask a HIPAA question? ›

For questions related to Health Information Privacy or Patient Safety, email OCRPrivacy@hhs.gov.

Who should you go to when you have questions about HIPAA? ›

The US Department of Health and Human Services (HHS) Office of Civil Rights (OCR) enforces HIPAA.

What qualifies as protected health information under HIPAA *? ›

The information HIPAA protects is all individually identifiable health information that relates to an individual´s past, present, or future medical condition, treatment for medical conditions, and payment for treatments.

How do you prove you are HIPAA compliant? ›

HIPAA audit logs are one of the primary artifacts used to demonstrate regulatory compliance. Audit logs must be maintained for all systems that store or process ePHI. The logs must be made available to OCR and internal auditors to verify the required security and privacy measures are being implemented.

Top Articles
Latest Posts
Article information

Author: Rueben Jacobs

Last Updated:

Views: 5792

Rating: 4.7 / 5 (77 voted)

Reviews: 84% of readers found this page helpful

Author information

Name: Rueben Jacobs

Birthday: 1999-03-14

Address: 951 Caterina Walk, Schambergerside, CA 67667-0896

Phone: +6881806848632

Job: Internal Education Planner

Hobby: Candle making, Cabaret, Poi, Gambling, Rock climbing, Wood carving, Computer programming

Introduction: My name is Rueben Jacobs, I am a cooperative, beautiful, kind, comfortable, glamorous, open, magnificent person who loves writing and wants to share my knowledge and understanding with you.