Compliance

Common Issues In Medical Billing


Losses due to AR underperformance or unsustainable costs.


Inability to attract and retain quality staff.


Backlogs in coding and billing.


Understaffing when onboarding new practices.


High past-dues, dues over 120+ days; other aging buckets, payer or service.


Piloting and testing new initiatives.


Our Compliance Competence


We have used Administrative, Physical and Technical Safeguards governing PHI as the bedrock of our HIPAA compliance program and they provide stipulations and guidelines across the organization on areas affecting privacy, security and business continuity.

Administrative Safeguards


BAA with all our clients and a customized NDA with all our employees.


PHI is not shared with any of the company’s’ vendors.


Designated security officer and committee to oversee all compliance activities.


Written policies and procedures covering privacy and security.


Written policies covering medical coding and billing integrity.


Training and tests on the policies and procedures.


Evaluation of policies and procedures including risk assessments.


Reporting channels and protocols to register non-compliant activities.


Physical Safeguards


Security guard and card-based electronic access with limited access to the facility.


CCTV cameras at every key entrance and exit, including the server room.


No access to printers, media drives, phones and devices that can be used to capture data.


Material movement is controlled between departments, teams or outside the organization.


All storage devices are disposed by reformatting, purging or destroying the data in them.


Hard copy disposal practices to make sure that any printed material is appropriately disposed.

Technical Safeguards


Limited access to the internet and monitoring of internet activities.


All digital media devices have been disabled on production systems.


Password protection and encryption of all PHI transmitted via email.


Encrypted connections to all client systems in the US.


Business Continuity Planning


CureMBC has a combined bandwidth of 40 mbps from two different lSPs each connected through fiber cables and RFID.


Copies of all critical files are routinely taken as a backup and kept onsite and at an alternate location under the control of authorized management personnel.


The data from the backup copies can easily be restored to ensure continuity of operations.


Our facilities have diesel back-up power supplies that can continue to support our operations in case of a power failure.


Uninterrupted Power Supply systems are used in tandem with alternate power supplies to ensure minimum downtime.