Health and Welfare Plans Archives - Page 16 of 125

Health Data in the EU and UK: Regulatory Trends and Developments

by Sharon Lamb, Deniz Tschammler, Daniel F. Gottlieb, Lorraine Maisnier-Boché and Pilar Arzuaga | Apr 25, 2023 | Digital Health, Employee Benefits, Health and Welfare Plans

With the General Data Protection Regulation (GDPR) resulting in a rise in enforcement incidents, it is prudent for organizations operating in the health and life sciences industries across the United Kingdom, European Union (EU) and other European Economic Area (EEA) nations to assess their responsibilities regarding the gathering and handling of health data.

Major Points:

“Data concerning health” is a wide term; it doesn’t just apply to medical records. Policies and processing records should accurately capture all health data, including inference data.
Most EEA countries, and the United Kingdom, have national laws that supplement GDPR.
Consent is not the only legal basis for collecting, storing and using health data; there are other options available, but be aware that “insufficient legal basis for data processing” is a common type of GDPR violation.
If used, health data consents must be granular, specific and transparent, and they must break down all the purposes for which the data is being processed. Consent must be granted on an “opt-in” basis and not as a result of a pre-filled tick box.
Health data may be reused for genuine scientific research purposes provided the processing is compatible with the original use, appropriate safeguards are in place and any separate national law conditions are satisfied.
Privacy policies and transparency notices must be clear about the basis on which health data is processed.
Proceed carefully and consider reidentification risk when relying on anonymisation to process data; document any reidentification risk assessment and periodically review risk assessment in light of developments in publicly available data and evolving risk environment. Technical measures, such as evolving encryption standards, should be reviewed periodically.

Read more here.

OCR Issues Proposed Rule to Modify HIPAA Privacy Rule to Include Explicit Protections for Reproductive Healthcare

by Stacey Callaghan, Jiayan Chen, Caroline Reignley, Scott Weinstein and Dexter Golinghorst | Apr 20, 2023 | Digital Health, Employee Benefits, Health and Welfare Plans

On April 12, 2023, the US Department of Health and Human Services (HHS) Office for Civil Rights (OCR) issued a notice of proposed rulemaking detailing its proposal to modify the HIPAA Privacy Rule (Proposed Rule). The Proposed Rule comes as a part of the Biden administration’s response to the US Supreme Court’s ruling in Dobbs v. Jackson Women’s Health Organization.

The Proposed Rule would provide special protections for protected health information (PHI) related to reproductive healthcare. Following the Dobbs decision, many healthcare providers expressed concerns that PHI related to reproductive healthcare may be sought by state and local governments for use in criminal, civil or administrative investigations or proceedings. OCR noted that such compelled uses and disclosures of PHI could have a chilling effect on lawfully obtained healthcare and erode trust in confidential communications between a patient and provider. Additionally, providers could elect to leave out critical details from a patient’s medical record if they fear the information could later be used by a state or local government actor against the patient.

Stakeholders may submit comments on the proposed rule on or before June 16, 2023.

Read more here.

Telehealth Trends to Watch: Increased Focus on Privacy and Security

by Lisa Schmitz Mazur, Dale C. Van Demark, Amanda Enyeart and Marshall E. Jackson, Jr. | Apr 19, 2023 | Digital Health, Employee Benefits, Health and Welfare Plans

We expect to see continued focus on privacy and security at the federal and state level. For example, California, Virginia, Colorado, Utah and Connecticut have new privacy laws coming into effect in 2023. As part of our State Law Privacy Video Series, McDermott described how these laws will affect health data and healthcare entities—in particular, those entities that are regulated by HIPAA.

In addition, at the end of 2022, the US Department of Health and Human Services (HHS) proposed long-awaited changes to the regulations protecting the confidentiality of substance-use disorder patient records under Part 2 of Title 42 of the Code of Federal Regulations (42 CFR Part 2, or Part 2). Specifically, the proposed rule would implement provisions of Section 3221 of the Coronavirus Aid, Relief, and Economic Security Act (CARES Act), which required HHS to align Part 2 with certain provisions of HIPAA and to make certain changes to the HIPAA Notice of Privacy Practices, the form given to patients and plan members that describes patient privacy rights, covered entity duties, and the covered entity’s uses and disclosures of protected health information.

Read more here.

ERISA Preemption Developments in Managed Care

by Jeremy Earl and Kate McDonald | Apr 13, 2023 | Employee Benefits, Health and Welfare Plans

For plans governed by the Employee Retirement Income Security Act of 1974, 29 U.S.C. §§ 1001-1461 (ERISA), the doctrine of federal ERISA preemption over state statutes, regulations or administrative schemes has been a central subject of litigation since the inception of the statute. In December 2020, the US Supreme Court issued a decision on the subject in Rutledge v. Pharm. Care Mgmt. Ass’n, 208 L. Ed. 2d 327 (2020).

In the short, unanimous opinion, the Supreme Court in Rutledge held that ERISA did not preempt an Arkansas statute that regulates pharmacy benefit managers’ (PBM) drug reimbursement rates. Arkansas passed Act 900 in 2015 to regulate PBM reimbursement rates for pharmacies, which, in effect, established a reimbursement floor that requires PBMs to reimburse pharmacies at a rate that reflects the pharmacy’s acquisition cost for the drug in question.

Access this McDermott Health 2023 Annual Report (pg. 9).

Preparing for the End of the COVID-19 Emergency: Tri-Agencies Issue FAQs to Assist Plans and Issuers

by Jacob Mattinson, Sarah Raaii, Alden Bianchi and Teal Trujillo | Apr 5, 2023 | Employee Benefits, Health and Welfare Plans

The Biden administration has announced its intention to end the COVID-19 National Emergency (NE) and the COVID-19 Public Health Emergency (PHE) on May 11, 2023 (read our series introduction for more information).

On March 29, 2023, the US Departments of Labor, Health and Human Services, and Treasury (the Departments) issued a set of Frequently Asked Questions (available here), which answered questions from stakeholders relating to the various laws, regulations and other guidance enacted or adopted in connection with the NE and PHE. The FAQs include eight questions related to the anticipated end of the “Outbreak Period” on July 10, 2023, which is 60 days after the end of the NE and PHE on May 11 (rules regarding the Outbreak Period are set forth in our earlier articles here and here). Below are the highlights:

Following the end of the PHE, plans and issuers can impose cost-sharing, prior authorization or other medical management requirements for COVID-19 diagnostic tests, although the Departments encourage plans not to do so.
Plans and issuers are encouraged to notify plan participants of changes regarding COVID-19 diagnosis, testing and treatment. Special rules apply under which Summaries of Benefits and Coverage (SBCs) need not be amended mid-year.
While plans and issuers will no longer be required to post prices for diagnostic tests furnished after May 11, they are nevertheless encouraged to do so.
Plans must continue to cover vaccines that qualify as preventive services, without cost-sharing, when provided in-network.
The FAQs provide examples relating to the application and termination of extended time periods for elections under the Consolidated Omnibus Budget Reconciliation Act (COBRA) and the Health Insurance Portability and Accountability Act (HIPAA).
In what is a welcome surprise, the FAQs confirm that individuals covered by a High-Deductible Health Plan (HDHP) will remain Health Savings Account (HSA)-eligible until further notice even if the HDHP in which they are enrolled provides medical care services and items purchased related to testing for and treatment of COVID-19 prior to the satisfaction of the HDHP’s applicable minimum deductible.

To keep employers apprised of the rules and to assist with providing notice to plan participants of the changes that will accompany the end of the NE and PHE, the Department of Labor has issued two blog posts, which are available here and here.

Action Items: We urge plan sponsors to pay particular attention to notifying employees of the upcoming changes that will accompany the end of the PHE and NE and to ensure that participants covered under an HDHP understand that they may continue to contribute to their HSAs. Employers should consider communicating these changes to their employees.

For any questions regarding the end of the PHE and/or NE, please contact your regular McDermott lawyer or one of the authors.

New 50-State Survey | ID Verification for Telemedicine Encounters

by McDermott Will & Emery | Mar 30, 2023 | Digital Health, Health and Welfare Plans

Verifying the identity of a patient prior to delivering telehealth services is important to prevent a range of potential risks, including the creation of fake accounts, insurance fraud and drug abuse/diversion.

A growing number of states and health plans require the verification of a patient’s identity. This verification activity has become a standard practice in the telehealth industry and is expected to continue.

Download our 50-state survey to learn which states require patient identity verification and access links to relevant state laws in one convenient place.

Download the report.

Mental Health Parity, Quantitative Treatment Limitations, Employee Assistance Plans and the End of the COVID-19 Emergency

by Jacob Mattinson, Sarah Raaii, Alden Bianchi and Teal Trujillo | Mar 29, 2023 | Employee Benefits, Health and Welfare Plans, Mental Health Parity and Addiction Equity Act

The Biden administration has announced its intention to end the COVID-19 National Emergency (NE) and the COVID-19 Public Health Emergency (PHE) on May 11, 2023 (read our series introduction for more information). Among other things:

The NE and the PHE modified the rules governing financial requirements and quantitative treatment limitations under the Mental Health Parity and Addiction Equity Act (MHPAEA). The end of the NE and the PHE will require modifications to group health plans’ and health insurance issuers’ MHPAEA testing as it relates to financial requirements and quantitative treatment limits. The NE and the PHE also affect the design and operation of some employee assistance plans (EAPs).
The NE and the PHE allowed plan sponsors to expand coverage under excepted benefit EAPs in certain respects without risking their status as the Health Insurance Portability and Accountability Act (HIPAA)-excepted benefits.

MHPAEA

MHPAEA requires that the financial requirements (such as coinsurance and copays) and quantitative treatment limits (such as visit limits) imposed on mental health or substance use disorder (MH/SUD) benefits cannot be more restrictive than the predominant financial requirements and treatment limitations that apply to substantially all medical/surgical benefits in a particular benefit classification. During the public health emergency period, group health plans and health insurance issuers were permitted to disregard certain items and services related to testing for the detection of SARS-CoV-2, the virus that causes COVID-19, when performing the “substantially all” and “predominant” tests. Absent this relief, the costs of covering COVID-19 testing items and services without cost-sharing would be the amounts allocated to medical/surgical benefits, thereby putting group health plans and health insurance issuers at risk of running afoul of MHPAEA quantitative treatment limits.

From and after the end of the PHE, group health plans and health insurance issuers must include the cost of covering COVID-19 tests, either diagnostic or over-the-counter, or testing-related services, when calculating MHPAEA quantitative treatment limits.

Action Items: Employers should revisit their MHPAEA compliance testing to ensure that the coverage of COVID-19 tests is properly accounted for in applying the relevant quantitative treatment limits. There is, however, no longer a requirement that a group health plan or health insurance issuer cover these services without charge.

EMPLOYEE ASSISTANCE PLANS

The end of the NE and the PHE could have various impacts on EAPs depending on the specific plan design. Employers may, for example, see a spike in the need for mental health support that could be met through EAP services. While the pandemic may be winding down, the mental health impacts of the past three years may continue for by many employees. Employers may need to continue to offer mental health services and resources through their EAPs, and potentially explore expanding mental health services through an EAP or otherwise, to support employees who are struggling with anxiety, depression or other mental health issues related to the pandemic.

Particular attention is required in the case of excepted benefit EAPs. Excepted benefit EAPs do not provide minimum essential coverage for Affordable Care [...]

Continue Reading

Telehealth and the End of the COVID-19 Emergency

by Jacob Mattinson, Sarah Raaii, Alden Bianchi and Teal Trujillo | Mar 22, 2023 | Employee Benefits, Health and Welfare Plans

The Biden administration has announced its intent to end the COVID-19 National Emergency (NE) and the COVID-19 Public Health Emergency (PHE) on May 11, 2023 (read our prior article for more information). In response to the COVID-19 pandemic, lawmakers and agencies made legislative and regulatory changes to expand access to telehealth services for individuals. This article explores what will happen to these temporary telehealth benefits at the end of the PHE and NE.

Current flexibilities under the Affordable Care Act (ACA) allow applicable large employers (ALEs) to offer stand-alone telehealth and remote care services to employees who were not eligible for other employer coverage during the PHE.

In addition, the Coronavirus Aid, Relief, and Economic Security Act (CARES) Act and IRS Notice 2020-29 established a temporary telehealth safe harbor, providing that a high-deductible health plan (HDHP) could cover telehealth and other remote care services on a pre-deductible basis without impacting an individual’s ability to contribute to an HSA. This relief applied to services provided on or after January 1, 2020, with respect to plan years beginning on or before December 31, 2021. Thus, for most calendar-year plans, this relief ended on December 31, 2021. The Consolidated Appropriations Act, 2022 (CAA 2022) renewed the relief under the CARES Act for months beginning after March 31, 2022, and before January 1, 2023—but it created a three-month gap in coverage from January 1, 2022, to March 31, 2022. The CAA 2022 also extended certain flexibilities related to Medicare coverage and payment for telehealth services through the end of 2024. The relief provided under the CAA 2022, however, was provided on a temporary basis and not tied to the PHE or NE.

Effective December 29, 2022, the Consolidated Appropriations Act, 2023 (CAA 2023) provided a two-year extension allowing first-dollar coverage of telehealth under an HDHP so that individuals can access services without needing to meet a deductible first. The CAA 2023 extends telehealth relief for plan years beginning after December 31, 2022, and before January 1, 2025. Most calendar year plans should therefore have coverage of pre-deductible telehealth services without affecting HSA eligibility for all of 2023 and 2024. When the PHE ends, stand-alone telehealth offerings must cease, but telehealth offerings on a pre-deductible basis can continue.

The stand-alone telehealth relief under the ACA is available until the end of the latest plan year that begins on or before the last day of the PHE. For calendar-year plans, this relief would last until December 31, 2023. When an employer ends its stand-alone telehealth benefit, it may need to provide participants a 60-day notice of a material reduction in benefits.

Employers offering telehealth coverage on a pre-deductible basis with HDHPs have been provided statutory relief through December 31, 2024, through the CAA 2023. However, employers should continue to watch for legislative updates regarding telehealth. Lawmakers have proposed multiple other bills in Congress to extend or make permanent telehealth flexibilities.

For any [...]

Continue Reading

GOP Calls Biden’s Medicare Plans a Tax Hike on Small Businesses

by McDermott Will & Emery | Mar 17, 2023 | Health and Welfare Plans

Republican lawmakers are calling the Biden administration’s plan to extend the Medicare trust fund’s solvency a tax hike on small businesses. According to this InsideHealthPolicy article, US House Committee on Ways and Means Republicans say their own legislation would protect Medicare benefits if the country runs against its spending limit.

Read more here.

Coverage of COVID-19 Vaccines and the End of the COVID-19 Emergency

by Jacob Mattinson, Sarah Raaii, Alden Bianchi and Teal Trujillo | Mar 15, 2023 | Employee Benefits, Health and Welfare Plans

Since the Biden administration announced its intention to end the COVID-19 National Emergency (NE) and the COVID-19 Public Health Emergency (PHE) on May 11, 2023, a topic of great debate has been the requirement and the coverage of COVID-19 vaccines.

As of March 27, 2020, the Coronavirus Aid, Relief, and Economic Security (CARES) Act has required health plans and issuers to cover COVID-19 vaccines without cost sharing, even when provided by out-of-network providers, during the PHE. Health plans and issuers have been required to cover COVID-19 vaccines within 15 days after any vaccine becomes recommended by the Advisory Committee on Immunization Practices (ACIP) of the Centers for Disease Control and Prevention or receives a rating of “A” or “B” classification recommendation from the United States Preventive Services Task Force (USPSTF). Separately, the Affordable Care Act (ACA) generally requires coverage of vaccines recommended by the ACIP and the USPSTF as preventative care without cost sharing. If a COVID-19 vaccine is provided by an out-of-network provider, however, health plans may begin to impose cost sharing and certain prior authorization and medical management requirements. As a result, after the PHE, COVID-19 vaccines will still need to be covered without cost sharing except in the case of an out-of-network provider.

Due to the ongoing requirements of the ACA, there will be minimal actions that employers need to take after the PHE ends regarding vaccine coverage. The primary changes are that ACIP-recommended COVID-19 vaccines should be covered immediately instead of after a 15-day hold period and that health plans can decide whether to apply cost sharing, prior authorization and medical management requirements to COVID-19 vaccines obtained from an out-of-network provider. A summary of material modifications and/or plan amendment may be required for any changes the health plan makes. Even for plans that are not subject to the ACA, such as grandfathered health plans, participants cannot be balance billed if a vaccine dose was purchased by the federal government. However, the federal government has not received additional funds from Congress to continue to purchase more vaccines for some time. Employers and plan sponsors should stay up to date on developments, as there may be some questions regarding which vaccines must be covered without cost sharing as more vaccines become available.

For any questions regarding the end of the PHE and/or NE, please contact your regular McDermott lawyer or one of the authors.

BLOG EDITORS

STAY CONNECTED

TOPICS

ARCHIVES

RECENT POSTS