DEFINITIONS
“Health care operations” refers to a large number of activities, including:
- Conducting quality assessment and improvement activities including outcome evaluation and development of clinical guidelines, provided that the obtaining of generalized knowledge is not the primary purpose of any studies resulting from such activities; population-based activities relating to improving health or reducing health care costs, protocol development, case management and care coordination, contacting of health care providers and patients with information about treatment alternative; and related functions that do not include treatment;
- Reviewing the competence of qualifications of health care professionals evaluating practitioner and provider performance, health plan performance, conducting training programs in which students, trainees, or practitioners in areas of health care learn under supervision to practice or improve their skills as health care providers, training of non-health care professionals, accreditation, certification, licensing, or credentialing activities;
- Underwriting, premium rating, and other activities relating to creation, renewal or replacement of a contract of health insurance or health benefits, and ceding, securing, or placing a contract for reinsurance of risk relating to claims for health care (including stop-loss insurance and excess of loss insurance);
- Conducting or arranging for medical review, legal services, and auditing functions, including fraud and abuse detection and compliance programs;
- Business planning and development, such as conducting cost management and planning-related analyses related to managing and operating the entity, including formulary development and administration, development or improvement of methods of payment of coverage policies; and
- Business management and general administrative activities including but not limited to: (a) management activities relating to HIPAA privacy rule compliance; (b) customer services, including the provision of data analyses for policy holders, plan sponsors, or other customers, provided that protected health information is not disclosed to such policy holder, plan sponsor, or customer; (c) resolution of internal grievances; (d) due diligence in connection with the sale or transfer of assets to a potential successor in interest, if the potential successor in interest is a covered entity or, following completion of the sale or transfer, will become a covered entity; and (e) creating de-identified health information, fundraising for the benefit of the covered entity, and marketing for which an individual authorization is not required.
“Payment” means the activities undertaken by the physician to obtain reimbursement for the provision of health care. These activities referred to in this definition relate to the individual to whom health care is provided and include, but are not limited to:
- Determination of eligibility coverage (including coordination of benefits or the determination of cost sharing amounts), and adjudication of subrogation of health benefit claims;
- Billing, claims management, collection activities, obtaining payment under a contract for reinsurance, and related health care data processing;
- Review of health care services with respect to medical necessity, coverage under a health plan, appropriateness or care, or justification of charges;
- Utilization review activities, including precertification and preauthorization of services, concurrent and retrospective review of services; and
- Disclosure to consumer reporting agencies of any of the following information relating to reimbursement: name and address, date of birth, Social Security number, payment history, account number, and name and address of the physician.
“Treatment” means the provision, coordination, or management of health care and related services by one or more health care providers, including the coordination of management of health care by a health care provider with a third party; consultation between health care providers relating to a patient; or the referral of a patient for health care from one health care provider to another.
“Use” means the sharing, employment, application, utilization, examination, or analysis of patient information within the physician’s practice that maintains such information.
“Disclosure” means the revealing or sharing patient information within the physician’s practice that maintains such information.
|