Skip to Main Content

Of course, we’re all suffering from “data breach fatigue.” But some breach announcements carry considerably more risk to the victim than others. For example, if I had received a letter saying a credit card of mine had been compromised, the end result would be simple:

Financial fraud by the numbers. In a June 2016 Gallup poll, 72 percent of respondents said they had “very little” or only “some” confidence in banks.

Amidst the cycle of public health underfunding, and in the shadows of the COVID-19 pandemic, agencies are trying to find financial stability in a space that has seen volatile and drastic changes in recent years. According to the National Association of County and City Health Officials, “The sustainability of the governmental public health system depends on the financial health of state and local public health agencies.” With this co-dependency of successful and sustainable public health services to financial stability, it is imperative to have a workforce that understands their obligations to effectively manage public funds.

A public health workforce in need of training

According to the 2021 Public Health Workforce Interests and Needs Survey (WINS), 54% of public health employees across the nation identified budget and financial management as a strategic skill that is highly important to their role but their proficiency in the area is low. This category outranked all other training needs assessed including change management, community engagement, and strategic thinking.

To help public health state agencies target budget and fiscal management training needs for their workforce, a comprehensive assessment can be utilized to examine four domains of administrative management activities with a focus on financial management. These four domains and topic areas include:

Domain Topics

Planning, execution, and program implementation

Policies, processes, procedures, and practices

Budget and performance monitoring, reporting, and closeout

Communications

Subgrant award and monitoring

Workforce (staffing, roles, responsibilities, onboarding, competencies)

Executive oversight

Data, systems, and information

Program alignment

Risk and priority


Reviewing these areas can help an agency assess its current decision-making and grant management processes to identify challenges that may lead to opportunities. Opportunities highlight what an agency can do with available resources to support equitable services. The opportunities are then used to inform a roadmap for process improvement and identify action items with a focus on training, policy development, monitoring, and communication. The roadmap defines an implementation strategy with measurable benchmarks and outcomes.

Overall, a comprehensive assessment can kickstart a strategic planning cycle developed to encourage fair and impartial administrative practices that adhere to federal regulations and offer opportunities to leverage additional funds in the future.

Using this framework, your public health agency can begin to manage administrative services wisely and fully leverage funding that can have the greatest impact on population health in the regions you serve. Ask “What are we doing to set up administrative routines for our agency that support equitable services?” and “How are we equipping our staff with the tools needed to effectively leverage resources that promote and improve population health?”

BerryDunn is experienced and poised to support cross-agency governance teams to undertake assessment and implementation activities. Through collaboration with agency leaders, BerryDunn’s team can facilitate discovery of opportunities for improvements in governmental budgeting and finance training, process improvement, development of finance tools and resources, and enhance communication and coordination between program and finance staff.

Learn more about how BerryDunn can support your agency in achieving these goals. If you have a specific question or if you'd like to set up an informational meeting with our team, please contact Julie Sullivan, Senior Manager and Practice Lead.

Article
Financial management for public health systems: The path to building sustainable services

Read this if you are an administrator, compliance officer, or health information management/medical records professional at a Medicare skilled nursing facility.

The Office for Civil Rights (OCR) at the US Department of Health and Human Services is responsible for ensuring patients’ rights to timely access to health records. Since the start of 2024, the OCR has issued two settlements with skilled nursing facilities (SNFs) under the OCR Right of Access Initiative. Both settlements were related to potential violations under the Health Insurance Portability and Accountability Act (HIPAA) Right of Access provision, which requires that individuals or their personal representatives have timely access to their health information.

As a HIPAA-covered entity, a SNF must provide access to the individual’s protected health information within 30 days of receiving a request from the patient or the patient’s personal representative, such as a guardian. In both recent SNF right of access cases, the OCR noted that access was not provided to the patients’ personal representative in a timely manner (161 days and 323 days, respectively). 

Both settlements, which were published on the OCR’s website, led to the imposition of significant civil money penalties (CMPs) against the SNFs. In one case, the OCR imposed a CMP of $100,000, which was not contested by the SNF. In the second case, the SNF challenged the imposition of a $75,000 CMP and agreed to a $35,000 settlement.

Other non-financial outcomes of an OCR Right of Access Settlement

In addition to the financial and reputational implications of an OCR Right of Access Settlement, a SNF must also undertake the following actions:

  • Revise and obtain the OCR’s approval of any noncompliant HIPAA policies and procedures (P&P) 
  • Provide the OCR with copies of all training materials that the SNF must use to train its workforce about the revised HIPAA P&P
  • Submit and obtain the OCR’s approval of the training plan outlining the topics to be covered, when the sessions will be held, and the names of the trainers
  • Send a signed attestation to the OCR documenting when the trainings have been completed

Remember

  • A patient or their personal representative may file a complaint directly with the Office for Civil Rights in writing, by email, by fax, or electronically via the OCR’s Complaint Portal
  • Subject to certain exceptions, the Privacy Rule at 45 CFR 164.502(g) requires covered entities to treat an individual’s personal representative as the individual with respect to uses and disclosures of the individual’s protected health information, as well as the individual’s rights under the rule. The personal representative “stands in the shoes” of the individual and can act for the individual and exercise the individual’s rights.

Actionable items to help ensure compliance with the Privacy Rule

  • Periodically (we suggest at least annually) check your SNF’s policies, procedures, and workflows that focus on access to medical records. We recommend you review:
    • Documentation of the turn-around times (TATs) for processing requests
    • The process for informing your patient or the patient’s representative, in writing and within the initial 30-day period if a request for records cannot be accommodated within 30 calendar days (only one extension may be made for an additional 30 days)
    • That the correspondence template provides a written statement of the reasons for the delay and the date when the SNF will complete its action on the request
  • Confirm that your SNF’s access to medical records timelines complies with your state’s requirements, as they may be more restrictive than the federal regulations. For example, California requires a 15-calendar day turnaround time while Texas requires action within 15 business days. Be aware that the OCR issued a Notice of Public Rulemaking on December 10, 2020, proposing that its current 30-day rule be decreased to 15 days. This change in federal rules has not yet gone into effect, but it is still expected and your SNF should be prepared. 
  • Maintain a log of medical records requests, including date received, person requesting, response due date, person responsible for completion of the request, and person assigned to review the record prior to release (such as Director of Nursing, Administrator) for completeness. 
  • We also recommend reviewing BerryDunn’s resource, Best Practices for Responding to Medical Record Requests in Healthcare Compliance Insights.

Need help assessing your SNF’s HIPAA program? BerryDunn can help.

BerryDunn’s SNF operations, compliance, and HIPAA privacy experts can answer your questions and provide an external review of policies, procedures, workflows, and training tools. Please contact Trisha Lee, Robyn Hoffmann, or Olga Gross-Balzano

Resources

https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access/index.html 
https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access/index.html#newlyreleasedfaqs 
https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access/index.html#maximumflatfee 
https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/personal-representatives/index.html
https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/hackensack-meridian-health-west-caldwell-care-center/index.html#nfd 
https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/phoenix-healthcare/index.html

Article
SNFs and HIPAA Right of Access: Understand the requirements and avoid costly penalties

At first glance, the healthcare patient check-in process seems straightforward. But when examined through the lens of your revenue cycle and patient experience, it’s one of the most important interactions for your team to get right.

Several key elements must be taken into consideration to create a smooth and simple patient check-in. Patient satisfaction is the tip of the iceberg. You want your patients to have a great experience that is efficient, easy-to-understand, and doesn’t create billing headaches for them later on. The good news is that the same techniques that give your patients a good experience also form the basis for an optimal revenue cycle. Developing this process starts with the undersurface elements that patients never see.

Scripting for patient access teams

Communicating clearly, consistently, and positively is important to put patients at ease, and to make sure that you collect the most accurate and up-to-date information from patients. Doing this correctly up front will save time and will prevent denials and associated workload and revenue loss. The best practice is to establish scripting for your patient access staff and provide training to make sure they are confident in the scripting provided. Here are some examples:

When confirming that patient information is up to date:

Say this: “To ensure your account is as accurate as possible, we require all patients to present a minimum amount of information.”

Not that: “Have there been any changes in your information since the last time you were here?”

Or when connecting a self-pay patient with a financial counselor:

Say this: “Before scheduling your appointment, I will connect with a financial counselor who can determine if you qualify for assistance and will help you understand your financial obligations.”

Not that: “We can’t schedule you until you speak with someone in Finance.”

Developing clear and efficient scripting will give your team the tools to communicate effectively and will help your patients feel like they are well taken care of.

Schegistration: What is it? 

What is “schegistration” anyway? Schegistration is the process of scheduling a patient appointment while also pre-registering the patient at the same time. By gathering and confirming information at the time of scheduling, the in-person check-in process will have fewer steps and will be quicker and easier for both the patient and your team.

Technology: Align your EHR with patient access workflows

Technology, specifically your Electronic Health Record (EHR), can either make your workflows more efficient, or can hinder your patient access staff. It’s important to align your technology platforms with your operational workflows, so it is seamless for your staff to enter and pull up information. It’s also important to have your staff trained regularly on your technology systems so they feel confident that they are using the system correctly and most efficiently.

Documentation: Write it down! 

When you develop new workflows to increase efficiency and the patient experience, it can be challenging for staff to make the change. In a busy office environment, it can also be difficult to train new staff effectively. To make it easy and to create consistency and continuity, it’s important to develop standard operating procedures and to document them thoroughly. Providing easy to understand instructions, including visuals of workflows, will reduce errors, promote standardization, and improve accountability.

Leadership: Reinforce best practice workflows

Keeping workflows optimized takes the whole team, beginning with leadership. The leaders of your patient access team should act as reinforcement when team members learn and complete best practice check-in workflows. Having documentation readily available and providing support and encouragement to team members will help keep your processes running smoothly.

Patient access team collaboration

Establish clear expectations to foster a supportive team environment and facilitate problem-solving and quick assistance. When scripting, workflows, and documentation are consistent, it’s easy for team members to help each other out and support each other when challenges arise.

The healthcare revenue cycle is an intricate system involving interdependent functions. Like an ecosystem, each component plays an important role in the system. The patient access process is just one piece of the puzzle. Optimizing your revenue cycle also includes looking at these areas: coding and compliance, billing, and denial management.

BerryDunn's audit, tax, clinical, and consulting professionals, focused on specific healthcare industry areas, understand the biggest challenges facing healthcare leaders, and are committed to helping you meet and exceed regulatory requirements, maximize your revenue, minimize your risk, improve your operations—and most importantly—facilitate positive outcomes. Learn more about our healthcare consulting team

Article
Optimizing revenue cycle processes: Patient check-in

Read this if your organization uses provider-based billing. 

Like an old car rusting in a field, provider-based billing is not something that gets much attention. Hospitals have set up departments to manage it, completed their attestations (or not), and then forgotten about it, leaving it to rust in the field. Provider-based billing is one of those things that is not a problem until it is. There are many reasons why hospitals may want to review their provider-based billing processes:

  1. Facility updates are constant in healthcare and departments may have moved since their initial inceptions
  2. Hospital acquisitions and mergers have changed ownership structures and may have removed grandfather status protections
  3. When leadership changes, new leadership often assumes that everything was set up and is being billed correctly
  4. Commercial payor guidance has and continues to change 
  5. CMS provider-based rules have changed

Many hospitals move department locations and do not give much thought to the claim implications. Besides address, enrollment, and credentialing updates that may or may not be needed, the move may make the department ineligible to continue provider-based billing because it no longer meets the criteria under the updated regulations.

Attestations for smoother audits

Very few hospitals have a library where they can easily access all their attestations. Many providers don’t ever submit an attestation to Medicare as they are not required to do so. However, not having one opens the hospital to more risk if the department is ever deemed non-compliant with the regulations. If the hospital has a library of all attestations, an audit can be a quick and painless experience. The audit would involve:

  • Confirming nothing has changed since the attestation in terms of location and structure
  • Reviewing some claims to identify if charges are split and billed correctly
  • Ascertaining if payor rules are being followed
  • Checking that signage is correct in the lobby of provider-based locations.
  • Reviewing the 855 form and confirming the required departments are listed

If an attestation is not available, the audit becomes more difficult. If the department is on the main campus and meets all the provider-based rules, the audit easily follows the above steps. If the department is not on the main campus, the audit becomes more challenging, as you would need to confirm:

  • The department is located within 35 miles of the main campus
  • If the department is or was grandfathered and doesn’t need to meet the requirements
  • If an attestation should be completed
  • How/when was the department created, and what other facts pertaining to its inception are relevant  

Difficulties arise when a hospital identifies that a department does not meet the current criteria and an attestation is not available. Simply stopping billing as provider-based billing is not sufficient as there are False-Claim Act and other compliance implications. Regardless of the remedy, identifying these issues on your own—as opposed to during an external audit—is certainly better. It will provide you time to fully research the situation and confirm if there is or is not really a concern. If it is confirmed that billing was incorrect, proactively self-disclosing the issues is certainly better than defending an audit. 

Proactive audits for peace of mind

You may be wondering why we are writing about provider-based billing now. The reality is that we are seeing more provider-based billing issues both with our clients and across the country. Hospitals are very busy and there is simply not enough time to worry about everything. This is an area where a quick audit can bring peace of mind and also force your teams to become reacquainted with the updated regulations and safeguard against future problems. 

BerryDunn has assisted several health systems with auditing and working through provider-based concerns. Our experts are available to support clients with questions or concerns about their provider-based departments. If you have questions about your specific situation, please don’t hesitate to contact us. We’re here to help.

Article
Provider-based billing: An ounce of prevention

Non-profit financial statements include a wealth of important knowledge and can often be overwhelming. When sharing your financial statements with your board of directors or other stakeholders, it can be useful to simplify your financial statements so the key information stands out and unimportant information doesn’t cause confusion. In our work with independent schools and other non-profit clients, we’ve seen many ways that financial statements can be simplified to paint a clearer picture of your organization’s health.

Engage with stakeholders to improve your financial statements 

Boards, donors, creditors, and other stakeholders gain key insights to a non-profit's financial status through reading the financial statements, allowing them to make informed strategic decisions. These reports also allow for improving communication between organizations and their stakeholders. Financial reporting additionally provides historical knowledge that can assist with strategic planning and forecasting.

As a first step in improving the ease with which your financial statements can be read, proactively engage with your stakeholders to gather feedback on the effectiveness and clarity of your current financial statements. To do this, consider conducting informational sessions or webinars to explain changes and address questions. Make sure to understand the needs of your stakeholders and what financial statement items they are most interested in and tailor disclosures to address their concerns and the items that matter most to them.

Simplify your financial statement disclosures 

For any financial statements that are to be issued in accordance with US generally accepted accounting principles (US GAAP), there are a certain number of required disclosures. Subject to materiality, for each financial statement line item, there is a related disclosure, and any item in your financial information that is material should be disclosed. As a general rule, if a trial balance account is less than 5% of total revenue, it could be grouped into an “other” category instead of being presented as a separate financial statement line item. This can also be done on the statement of financial position, but using 5% of total assets or total liabilities. Removing these smaller items can put more focus on the important items within your financial statements.

Another way to simplify your financial statements is to consider removing some small, fixed assets from your statements. For example, the purchase of an office printer could technically be considered a fixed asset to be capitalized, but it’s likely not worth the effort—and it makes the financial statement look more complex than necessary. Consider implementing a financial statement capitalization policy that determines a dollar limit threshold for capitalizing fixed assets and expensing items under that threshold.

Remove disclosures once they’re no longer needed  

Other common items that can increase the length of financial statements are disclosures related to the implementation of new accounting policies. In the year of adoption, footnotes are required to explain the impact of the adoption. In following years, not as many disclosures are necessary and can be removed. Ensure that information that is remaining after the year of adoption is either required under US GAAP or is necessary to stakeholders. If it’s not, remove it.

Take ownership of your financial statements 

Although your CPA firm might assist with the preparation of the financial statements, the ultimate responsibility rests on your organization’s management team to produce financial statements in accordance with US GAAP and satisfy the needs of your stakeholders. Ensuring your financial statements are optimized opens a great opportunity for you to sit down with your audit team and discuss your needs. Contact us at any time to set up a meeting and learn more.

Article
Optimizing financial statements for independent schools