Description:
Many HME/DME, O&P and Rehab organizations are unaware of the Red Flag Rules or are uncertain of the applicability of these requirements. Providers should be aware of the Red Flag Rules, revisit their existing privacy and security compliance programs to ensure that the requirements of the Red Flag Rules have been addressed, and take action to bring themselves into compliance with applicable requirements. The FTC has interpreted these rules as applying in the health care sector, where medical identity theft is a real concern. Medical identity theft occurs when someone uses another person’s name and sometimes other parts of their identity, such as insurance information or Social Security Number, without the victim’s knowledge or consent, to obtain medical services or goods.
This material was developed by the staff of the VGM Group in response to requests for a guide to explain and comply with the Red Flag Rules as well as the “Address Discrepancy Rules” which were effective November 1, 2008. In general, healthcare “creditors” that are subject to FTC enforcement under the Fair Credit Reporting Act (FCRA) with “covered accounts” must implement programs that identify, detect and respond to DMEPOS facilities that could indicate identity theft. With few exceptions, all homecare providers must comply.
This two-disc set includes: