"For example," Mr. Miller continued, "patients showing IDs that don't match their appearance; clients receiving statements or information that does not pertain to them, or patients without identity documentation. The policy should have steps to address such discrepancies which may be similar to HIPAA privacy procedures: investigation, notification and mitigation. Compliance with Red Flag rules by physicians may also extend to financial or status information maintained for staff, particularly if the office provides medical care to employees. Consideration should be given to make sure policies also extend to identifying possible identity theft involving staff information."

The FTC offers a "how-to" guide for businesses on the Rule, available at:
http://www.ftc.gov/bcp/edu/pubs/business/idtheft/bus23.pdf and a do-it-yourself kit for low-risk businesses available at: http://ftc.gov/bcp/edu/microsites/redflagsrule/RedFlags_forLowRiskBusinesses.pdf
Based in part upon the letter from the FTC to the AMA

Read more on DOTmed.com
Healthcare Chronicles: Are You Ready to Comply With the Red Flags Rule?
https://www.dotmed.com/news/story/8861/


Back to HCB News

More Industry Headlines