Nearly 90% of Cyber Breaches are Caused by…

Every day, pharmacies and their hardworking staff safeguard patients’ Protected Health Information (PHI), but breaches still occur. The June 2023 Health and Human Services Office for Civil Rights (OCR) Cybersecurity Newsletter focused on providing an insight into cybersecurity authentication and tips for building a more robust “wall” for malicious actors to encounter before a breach could occur. The OCR newsletter indicated that according to a 2023 Data Breach Investigations Report, “86% of [cyber] attacks to access an organization’s Internet-facing systems (e.g., web servers, email servers) used stolen or compromised credentials” and “robust authentication serves as the first line of defense against malicious intrusions and attacks”.

As mentioned in the OCR newsletter, the National Institute of Standards and Technology’s Digital Identity Guidelines believes that “historically, three factors form the cornerstones of authentication:

  • Something you know (e.g., password, personal identification number (PIN))
  • Something you have (e.g., smart ID card, security token)
  • Something you are (e.g., fingerprint, facial recognition, other biometric data)”

Multi-factor authentication is a common method for ensuring the person gaining access to a system is, in fact, who they say they are. It would require one element from two different bullets listed above, such as a password plus a security token. The Cybersecurity Newsletter states that “Cyber-attacks often begin with a compromised password that is used to gain initial access to an electronic information system.” If a password is compromised through a successful phishing attempt, the second element (e.g., security token) may be enough to block unauthorized entry long enough for the Security Officer to perform an Information Systems Activity Review and identify the unusual activity and intervene.

Safeguarding PHI and being compliant with the HIPAA Security Rule is required for any entity handling PHI. The Security Rule was designed to be flexible, allowing providers with varying scopes, sizes and resources to be compliant. Whether your pharmacy has been around for 30 years or 30 days, a thorough evaluation of your HIPAA program should be done at least annually. The beauty of the PAAS National® Fraud, Waste & Abuse (FWA) and HIPAA Compliance Program, is that it mirrors the flexibility of the HIPAA Security Rule and is anything BUT a cookie-cutter program. Pharmacies perform a risk analysis upon enrolling in the program and answer questions which allows us to customize a compliance policy and procedure manual specific to your pharmacy. PAAS Analysts are always happy to discuss how the PAAS FWA/HIPAA Compliance Program is built to help you address federal regulations. Call (608) 873-1342 or visit PAASNational.com to see how you can become an FWA/HIPAA Compliance member today.

PAAS Tips:

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

Did you know there is much more to your audit assistance membership than just help with audits? The PAAS Member Portal contains a wealth of information and resources to assist you with audits and member service questions. Below is a list of 6 pages found on the Audit Assistance section of the PAAS Member Portal to assist you and your pharmacy staff to be proactive when it comes to audits.

  • Access Services
    • Audit Documentation Submission Guidance
    • An online form to submit safe filling and billing questions
    • Your PAAS Membership Manual
  • Newsline
    • Monthly newsletter articles, written by our expert PAAS analyst team, provide safe filling and billing tips and relays relevant/current PBM trends to be help prevent audits
    • Search the Newsline Archive to get PAAS tips at the click of a button
    • Special Edition Newslines including: Top 10 articles of the prior year, DMEPOS Article Series and a Self-Audit Article Series
    • Ability to print monthly issues or individual articles
  • Proactive Tips
    • Audit flags – list of various claim attributes the PBMs use to select claims for audit
    • Billing insulin vials – flowchart to assist whether you should bill Medicare Part B vs Part D
    • DAW Codes Explained – use to understand when to effectively use DAW codes, their definitions and why claims may be flagged for audit if a DAW code is used incorrectly
    • Basic DMEPOS documentation guidance
    • Onsite Credentialing Checklist and expanded definitions of policies and procedures
    • Proof of refill request and affirmative response form for DMEPOS items
    • Steps on how to prepare for an onsite audit
    • And more!
  • Days’ Supply Charts
    • Utilize the days’ supply charts for inhalers, insulins, nasal sprays, eye drops and topicals to aid you in calculating the correct days’ supply
    • Guidance on overbilled quantities and incorrect days’ supply account for a sizable portion of audit chargebacks
    • Additional miscellaneous charts, which include: Dispense in Original Container and Return to Stock
  • Forms
    • Signature Logbook for print
    • Signature Trifold Mailer
    • Fax and Email Coversheet
    • Patient Attestation for over-the-counter COVID-19 test kits
  • On-Demand Webinars
    • Short webinars on hot topics in the PBM industry. Here are a few examples:
      • USP 800 Compliance
      • Cultural Competency Training
      • Dispensing Prescriptions Off-Label
      • Biologic Medications and Interchangeability
      • Continuous Glucose Monitor Requirements for Medicare Part B

PAAS Tips:

  • MORE AUDITS, MORE INSIGHT – PAAS National® is the industry-leading defender of community pharmacy dealings with Prescription Benefit Programs, including Caremark, Express Scripts, Humana, Medicaid, OptumRx, Prime Therapeutics., and more. PAAS assists on all third-party audits, including: desktop audits, onsite audits, invoice audits, OIG/Medicaid audits, Medicare B audits. The PAAS team is dedicated to helping you! We have five pharmacists and a complement of technician analysts with over 50 years of dedicated audit assistance experience. PAAS continuously updates their database with every audit received — in fact, we even keep a scorecard on individual auditors.
  • Get answers to your questions on days’ supply calculations, drug substitutions, billing practices, required documentation, prior authorization requirements, record retention, and internal audit procedures – just to name a few. As a trusted partner, we will provide tailored guidance to help you proactively prevent audits. Remember, the prescription claims you submit today are the audits of the future.
  • Keep your employees engaged and help lower audit risk by adding all employees to the portal and giving them permission to access these tools, resources and eNewsline. For more information review September 2019 Newsline article, What Are You Waiting For? Make Sure ALL of Your Employees are Added to the PAAS Portal!
  • Contact PAAS at (608) 873-1342, if you would like a tour of your PAAS Member Portal, so you can reap all the benefits of your PAAS Audit Assistance. We appreciate you being a member.

OMIG compliance reviews are happening now – this includes independent pharmacies!

PAAS National® has started to see New York State Office of the Medicaid Inspector General (OMIG) conducting reviews on pharmacies to evaluate if they have a compliance program that meets the new requirements of Social Services Law 363-d and 18 NYCRR Part 521.

As of March 28, 2023 there are NEW requirements. If your current program has not been updated to reflect these changes, you are not compliant.  

Avoid potential sanctions (including termination of your provider status) by joining the PAAS FWA/HIPAA Compliance Program.

PAAS has worked extensively to make sure our program meets NY Medicaid requirements! A typical pharmacy can have a fully customized compliance program up and running with only a few hours’ setup and general upkeep. PAAS also provides exceptional customer service, with pharmacists and technicians to help answer your questions about compliance related issues and guide you through a NY OMIG compliance review.

It’s NOT TOO LATE to get compliant! Ensure you have all your compliance bases met and attest with confidence.

Current members

If you receive a notification letter, please reach out to us to get customized guidance from an expert analyst, info@paasnational.com or (608) 873-1342 and we will guide you through a NY OMIG compliance review.

Medication Error Reporting Through PAAS’ FWA/HIPAA Compliance Program

The importance of having an internal process to record and monitor medication errors cannot be overstated. Being able to identify how medication errors occur can help pharmacy owners avoid repeat issues and pinpoint an area for operational improvement. Medication error reports can also help mitigate legal action if brought against the pharmacy.

PBMs require pharmacies to have a medication error reporting tool as part of credentialing, resulting in pharmacies commonly asking if PAAS offers a medication error reporting tool. The answer is yes! The PAAS Fraud, Waste, and Abuse & HIPAA Compliance Program offers a robust section pertaining to quality assurance incident reporting, including medication error reporting and close call reporting. Section 4.4 “Quality Assurance” speaks to the pharmacy’s dedication to ensuring medication errors and drug interactions are caught and corrected expeditiously in addition to what procedures are implemented to minimize the likelihood of errors occurring. The actionable parts of your medication error reporting can be found in Appendix B in the section entitled Quality Assurance Incident Reporting system (QuAIR). QuAIR meets the federal requirements for pharmacies to have a medication error reporting system in place. For pharmacies looking to develop more robust policies, the Policy & Procedure Manual now allows for custom content in a new section.

If you are not yet an FWA/HIPAA compliance member and would like to schedule a time for a virtual service overview, you can sign up for a time by visiting PAASNational.com/contact. Current FWA/HIPAA member admins and officers can review their compliance tasks in the Member Portal to confirm that your compliance program is up-to-date for 2023. If you would like a PAAS team member to walk-thru the program with you, schedule a virtual meeting here or call us at (608) 873-1342.

HIPAA Breach Notification Letter Sent to 82,466 Patients Due to Improperly Shared Data

According to the U.S. Department of Health and Human Services breach portal, the mail-order pharmacy Healthy Options dba Kroger Postal Prescription Services (PPS) reported a breach of information which affected 82,466 patients. Kroger’s March 10, 2023 press release described the incident as “an internal error” which caused patient names and email addresses affiliated with Kroger PPS to be “improperly shared with its affiliated grocery business”.

This breach comes two years after the Accellion incident which also affected Kroger. Accellion is a company which provides secure third-party data file transfer services to businesses, one of which was Kroger. Their services were used to send human resources data, pharmacy patient information, clinic patient information, and money services records through secure file transfers. Kroger’s internal review indicated the Kroger systems were not directly accessed, and that the information was obtained only through Accellion. Kroger cut their ties with Accellion and sent out HIPAA breach notification letters to the affected individuals.

As these two incidents illustrate, breaches can happen—sometimes they are malicious in nature and sometimes it is due to poor training or lack of appropriate safeguards. PAAS National® analysts suggest regularly evaluating your pharmacy’s HIPAA compliance program and implementation to identify deficiencies so improvements can be made in a timely manner. If you are not sure where to begin or what a “top of the line” HIPAA program looks like, just contact us (608) 873-1342 for a virtual overview of the PAAS National® Fraud, Waste and Abuse and HIPAA Compliance Program. We are here to guide you through compliance – get started today.

PerformRxSM Investigational Audits Are on the Rise

PAAS National® has recently seen a new trend with investigational audits completed by PerformRxSM. These audits are a combination of an invoice, desk, and a compliance audit. Pharmacies must obtain invoices for the requested date range, 25-60 prescriptions, signature logs and proof of copay collection for all refills.

This investigational audit also includes an extensive questionnaire. The questionnaire may have unique questions based on idiosyncrasies the PBM has identified for your pharmacy. Mailing and delivery procedures and automatic refill policies are just some of the questions pharmacies must address.

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

Did you know there is much more to your audit assistance membership than just help with audits? The PAAS Member Portal contains a wealth of information and resources to assist you with audits and member service questions. Below is a list of 6 pages found on the Audit Assistance section of the PAAS Member Portal to assist you and your pharmacy staff to be proactive when it comes to audits.

  • Access Services
    • Audit Documentation Submission Guidance
    • An online form to submit safe filling and billing questions
    • Your PAAS Membership Manual
  • Newsline
    • Monthly newsletter articles, written by our expert PAAS analyst team, provide safe filling and billing tips and relays relevant/current PBM trends to be help prevent audits
    • Search the Newsline Archive to get PAAS tips at the click of a button
    • Special Edition Newslines including: Top 10 articles of the prior year, DMEPOS Article Series and a Self-Audit Article Series
    • Ability to print monthly issues or individual articles
  • Proactive Tips
    • Audit flags – list of various claim attributes the PBMs use to select claims for audit
    • Billing insulin vials – flowchart to assist whether you should bill Medicare Part B vs Part D
    • DAW Codes Explained – use to understand when to effectively use DAW codes, their definitions and why claims may be flagged for audit if a DAW code is used incorrectly
    • Basic DMEPOS documentation guidance
    • Onsite Credentialing Checklist and expanded definitions of policies and procedures
    • Proof of refill request and affirmative response form for DMEPOS items
    • Steps on how to prepare for an onsite audit
    • And more!
  • Days’ Supply Charts
    • Utilize the days’ supply charts for inhalers, insulins, nasal sprays, eye drops and topicals to aid you in calculating the correct days’ supply
    • Guidance on overbilled quantities and incorrect days’ supply account for a sizable portion of audit chargebacks
    • Additional miscellaneous charts, which include: Dispense in Original Container and Return to Stock
  • Forms
    • Signature Logbook for print
    • Signature Trifold Mailer
    • Fax and Email Coversheet
    • Patient Attestation for over-the-counter COVID-19 test kits
  • On-Demand Webinars
    • Short webinars on hot topics in the PBM industry. Here are a few examples:
      • USP 800 Compliance
      • Cultural Competency Training
      • Dispensing Prescriptions Off-Label
      • Biologic Medications and Interchangeability
      • Continuous Glucose Monitor Requirements for Medicare Part B

PAAS Tips:

  • MORE AUDITS, MORE INSIGHT – PAAS National® is the industry-leading defender of community pharmacy dealings with Prescription Benefit Programs, including Caremark, Express Scripts, Humana, Medicaid, OptumRx, Prime Therapeutics., and more. PAAS assists on all third-party audits, including: desktop audits, onsite audits, invoice audits, OIG/Medicaid audits, Medicare B audits. The PAAS team is dedicated to helping you! We have five pharmacists and a complement of technician analysts with over 50 years of dedicated audit assistance experience. PAAS continuously updates their database with every audit received — in fact, we even keep a scorecard on individual auditors.
  • Get answers to your questions on days’ supply calculations, drug substitutions, billing practices, required documentation, prior authorization requirements, record retention, and internal audit procedures – just to name a few. As a trusted partner, we will provide tailored guidance to help you proactively prevent audits. Remember, the prescription claims you submit today are the audits of the future.
  • Keep your employees engaged and help lower audit risk by adding all employees to the portal and giving them permission to access these tools, resources and eNewsline. For more information review September 2019 Newsline article, What Are You Waiting For? Make Sure ALL of Your Employees are Added to the PAAS Portal!
  • Contact PAAS at (608) 873-1342, if you would like a tour of your PAAS Member Portal, so you can reap all the benefits of your PAAS Audit Assistance. We appreciate you being a member.

Looking for an FWA/HIPAA Compliance program? Schedule a service overview with PAAS National® today and learn how to get started on customizing your Policy and Procedure Manual. 

Prepare Yourselves! Onsite Audits Are Coming in Strong

Health and Human Services (HHS) is planning for the public health emergency (PHE) to expire on May 11, 2023 and PBM auditors are in full swing of resuming their onsite visits. Onsite audits have always been the most aggressive and highest risk to community pharmacies. PAAS National® saw a 300% increase in onsite audits in just the 3rd Quarter of 2022 and they continue to be on the rise! PAAS analysts have years of experience helping our members navigate through preparation for an onsite audit. We are available to assist you throughout your audit process starting with, How to Prepare for an Onsite Audit.

Your PAAS analyst can provide pre-audit consultations, helpful tips and tools, reminders on state law requirements, and discuss current PBM trends. Our Onsite Credentialing Guidelines document has been created specifically to help pharmacies be ready for questions the auditor may ask during their visit. This tool is updated frequently to provide members the most up to date information along with providing PAAS National® FWA/HIPAA Compliance members reference to locate specific policies in their customized FWA/HIPAA Compliance Policy & Procedure Manual.

PAAS Tips:

Contact PAAS National® (608) 873-1342 today to get your customized FWA/HIPAA compliance program! Or schedule a service overview of the program to see why it was designed to meet CMS’ seven core elements required to adopt and implement an effective compliance program.

Express Scripts Provider Manual – 2023 Updates

All PBMs update their Provider Manuals at regular intervals and Express Scripts (ESI) is no exception. Express Scripts released an updated version of their Provider Manual in January 2023 and provided a “summation of changes” document for network pharmacies that provides a brief description of the changes and where in the Provider Manual the change occurred. Here are important changes that may impact audits:

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

Did you know there is much more to your audit assistance membership than just help with audits? The PAAS Member Portal contains a wealth of information and resources to assist you with audits and member service questions. Below is a list of 6 pages found on the Audit Assistance section of the PAAS Member Portal to assist you and your pharmacy staff to be proactive when it comes to audits.

  • Access Services
    • Audit Documentation Submission Guidance
    • An online form to submit safe filling and billing questions
    • Your PAAS Membership Manual
  • Newsline
    • Monthly newsletter articles, written by our expert PAAS analyst team, provide safe filling and billing tips and relays relevant/current PBM trends to be help prevent audits
    • Search the Newsline Archive to get PAAS tips at the click of a button
    • Special Edition Newslines including: Top 10 articles of the prior year, DMEPOS Article Series and a Self-Audit Article Series
    • Ability to print monthly issues or individual articles
  • Proactive Tips
    • Audit flags – list of various claim attributes the PBMs use to select claims for audit
    • Billing insulin vials – flowchart to assist whether you should bill Medicare Part B vs Part D
    • DAW Codes Explained – use to understand when to effectively use DAW codes, their definitions and why claims may be flagged for audit if a DAW code is used incorrectly
    • Basic DMEPOS documentation guidance
    • Onsite Credentialing Checklist and expanded definitions of policies and procedures
    • Proof of refill request and affirmative response form for DMEPOS items
    • Steps on how to prepare for an onsite audit
    • And more!
  • Days’ Supply Charts
    • Utilize the days’ supply charts for inhalers, insulins, nasal sprays, eye drops and topicals to aid you in calculating the correct days’ supply
    • Guidance on overbilled quantities and incorrect days’ supply account for a sizable portion of audit chargebacks
    • Additional miscellaneous charts, which include: Dispense in Original Container and Return to Stock
  • Forms
    • Signature Logbook for print
    • Signature Trifold Mailer
    • Fax and Email Coversheet
    • Patient Attestation for over-the-counter COVID-19 test kits
  • On-Demand Webinars
    • Short webinars on hot topics in the PBM industry. Here are a few examples:
      • USP 800 Compliance
      • Cultural Competency Training
      • Dispensing Prescriptions Off-Label
      • Biologic Medications and Interchangeability
      • Continuous Glucose Monitor Requirements for Medicare Part B

PAAS Tips:

  • MORE AUDITS, MORE INSIGHT – PAAS National® is the industry-leading defender of community pharmacy dealings with Prescription Benefit Programs, including Caremark, Express Scripts, Humana, Medicaid, OptumRx, Prime Therapeutics., and more. PAAS assists on all third-party audits, including: desktop audits, onsite audits, invoice audits, OIG/Medicaid audits, Medicare B audits. The PAAS team is dedicated to helping you! We have five pharmacists and a complement of technician analysts with over 50 years of dedicated audit assistance experience. PAAS continuously updates their database with every audit received — in fact, we even keep a scorecard on individual auditors.
  • Get answers to your questions on days’ supply calculations, drug substitutions, billing practices, required documentation, prior authorization requirements, record retention, and internal audit procedures – just to name a few. As a trusted partner, we will provide tailored guidance to help you proactively prevent audits. Remember, the prescription claims you submit today are the audits of the future.
  • Keep your employees engaged and help lower audit risk by adding all employees to the portal and giving them permission to access these tools, resources and eNewsline. For more information review September 2019 Newsline article, What Are You Waiting For? Make Sure ALL of Your Employees are Added to the PAAS Portal!
  • Contact PAAS at (608) 873-1342, if you would like a tour of your PAAS Member Portal, so you can reap all the benefits of your PAAS Audit Assistance. We appreciate you being a member.

Black Market HIV Medications Are Not Worth the Savings!

According to a statement released by the U.S Attorney’s Office in the Southern District of New York, five individuals were arrested the morning of March 2, 2023 as a result of defrauding government insurance plans, including Medicaid and manipulating low-income individuals out of their HIV medications from July 2020 through February 2023. This resulted in $15 million worth of illegitimate payments to the pharmacy from government insurance plans. Instead of purchasing the HIV medications through accredited distributors, the pharmacy opted to buy HIV medications from the black market, totaling over $6 million worth of purchases.

In the fraud scheme, an individual sold the black-market HIV medications to a pharmacy store owner with two pharmacy locations in Bronx, New York. He subsequently dispensed the black-market medication to patients with HIV in addition to submitting fraudulent insurance claims for profit. The other three indicted individuals were employed by the pharmacy and assisted the pharmacy owner in paying illegal kickbacks to incentivize patients to use their pharmacy for their HIV medications. To make matters worse, the pharmacy team encouraged patients to sell their HIV medications back to the pharmacy, foregoing the treatment meant to control their HIV infections. The five individuals are looking at time in prison varying from 27 to 47 years if sentenced to the maximum.

Although this is a case that shows blatant intent of actions, the basis still applies:

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

Did you know there is much more to your audit assistance membership than just help with audits? The PAAS Member Portal contains a wealth of information and resources to assist you with audits and member service questions. Below is a list of 6 pages found on the Audit Assistance section of the PAAS Member Portal to assist you and your pharmacy staff to be proactive when it comes to audits.

  • Access Services
    • Audit Documentation Submission Guidance
    • An online form to submit safe filling and billing questions
    • Your PAAS Membership Manual
  • Newsline
    • Monthly newsletter articles, written by our expert PAAS analyst team, provide safe filling and billing tips and relays relevant/current PBM trends to be help prevent audits
    • Search the Newsline Archive to get PAAS tips at the click of a button
    • Special Edition Newslines including: Top 10 articles of the prior year, DMEPOS Article Series and a Self-Audit Article Series
    • Ability to print monthly issues or individual articles
  • Proactive Tips
    • Audit flags – list of various claim attributes the PBMs use to select claims for audit
    • Billing insulin vials – flowchart to assist whether you should bill Medicare Part B vs Part D
    • DAW Codes Explained – use to understand when to effectively use DAW codes, their definitions and why claims may be flagged for audit if a DAW code is used incorrectly
    • Basic DMEPOS documentation guidance
    • Onsite Credentialing Checklist and expanded definitions of policies and procedures
    • Proof of refill request and affirmative response form for DMEPOS items
    • Steps on how to prepare for an onsite audit
    • And more!
  • Days’ Supply Charts
    • Utilize the days’ supply charts for inhalers, insulins, nasal sprays, eye drops and topicals to aid you in calculating the correct days’ supply
    • Guidance on overbilled quantities and incorrect days’ supply account for a sizable portion of audit chargebacks
    • Additional miscellaneous charts, which include: Dispense in Original Container and Return to Stock
  • Forms
    • Signature Logbook for print
    • Signature Trifold Mailer
    • Fax and Email Coversheet
    • Patient Attestation for over-the-counter COVID-19 test kits
  • On-Demand Webinars
    • Short webinars on hot topics in the PBM industry. Here are a few examples:
      • USP 800 Compliance
      • Cultural Competency Training
      • Dispensing Prescriptions Off-Label
      • Biologic Medications and Interchangeability
      • Continuous Glucose Monitor Requirements for Medicare Part B

PAAS Tips:

  • MORE AUDITS, MORE INSIGHT – PAAS National® is the industry-leading defender of community pharmacy dealings with Prescription Benefit Programs, including Caremark, Express Scripts, Humana, Medicaid, OptumRx, Prime Therapeutics., and more. PAAS assists on all third-party audits, including: desktop audits, onsite audits, invoice audits, OIG/Medicaid audits, Medicare B audits. The PAAS team is dedicated to helping you! We have five pharmacists and a complement of technician analysts with over 50 years of dedicated audit assistance experience. PAAS continuously updates their database with every audit received — in fact, we even keep a scorecard on individual auditors.
  • Get answers to your questions on days’ supply calculations, drug substitutions, billing practices, required documentation, prior authorization requirements, record retention, and internal audit procedures – just to name a few. As a trusted partner, we will provide tailored guidance to help you proactively prevent audits. Remember, the prescription claims you submit today are the audits of the future.
  • Keep your employees engaged and help lower audit risk by adding all employees to the portal and giving them permission to access these tools, resources and eNewsline. For more information review September 2019 Newsline article, What Are You Waiting For? Make Sure ALL of Your Employees are Added to the PAAS Portal!
  • Contact PAAS at (608) 873-1342, if you would like a tour of your PAAS Member Portal, so you can reap all the benefits of your PAAS Audit Assistance. We appreciate you being a member.

PAAS’ Fraud, Waste & Abuse and HIPAA Compliance program keeps members compliant beyond training and exclusion checking. If you aren’t a member of FWA/HIPAA and are interested in saving $129 on your membership, please contact PAAS at (608) 873-1342.

Not-So-GoodRx Reprimanded $1.5 million for Sharing Consumers’ Information

The article GoodRx Shares Consumer Data appeared in the April 2020 Newsline, which pertained to GoodRx sharing their consumers’ data with various platforms, including Facebook and Google. Key information from the article include:

  • Both Facebook and Google denied utilizing information, specifically personal health information, obtained from GoodRx to target ads to mutual consumers.
  • Despite Facebook and Google’s claims, GoodRx did issue an apology for their role they played in sharing consumer information to the platforms and vowed to “do better”
  • Since GoodRx is “a private company with no doctors or hospitals involved, it does not have to protect the health data a consumer gives it”

One could speculate that GoodRx was hoping this would be the end of the ordeal. However, it was not.

For the first time, the Federal Trade Commission (FTC) has enforced the Health Breach Notification Rule, due to “GoodRx Holdings Inc…failing to notify consumers and others of its unauthorized disclosures of consumers’ personal health information to Facebook, Google, and other companies.” Pending federal court approval, the Proposed Order will include numerous provisions that GoodRx will need to follow, including:

  • Prohibited from sharing user health data with applicable third parties for advertising purposes
  • Require user consent for sharing health information outside of advertising purposes
  • Implement a privacy program which includes safeguards from unauthorized access to user data
  • Mandatory outreach to third parties requesting consumer health data be deleted and disclose information about the breach of their health information and FTC’s legal action to consumers
  • Limit the amount of time consumers’ health information will be retained
  • Make available to the public how long their information will be retained, what information is collected, and why the information collected is necessary
  • Pay a civil penalty of $1.5 million due to “sharing sensitive personal health information for years with advertising companies and platforms -contrary to its privacy promises…”.

As alluded to above, GoodRx is not a HIPAA covered entity and therefore not legally bound to the same notification rules as covered entities. As such, patients should be made aware of this if they choose to upload information into GoodRx’s app or website or request that a pharmacy submit claims information to GoodRx. Patients can refer to  GoodRx’s updated “Privacy Policy” for more information.

Proof of Copay Collection – Secondary Payers Hidden in Plain Sight

If your pharmacy has not had to deal with proof of copay collection on an audit, your time is coming. More frequently, PBM auditors are comparing the copay amount on a point-of-sale receipt against the copay the PBMs expect based on the plan design and claim adjudicated. Copays are used by insurers to make patients aware of the cost of their medications and incentivize them to try less expensive alternatives. Waiving or discounting copays (unless permitted by law) or placing copays on a house account (with no intent to collect) are all fraudulent actions and may put your contract at risk.

Become an audit assistance member today to continue reading this article. As a member, you’ll have access to hundreds of articles and receive our monthly proactive newsletter!

Did you know there is much more to your audit assistance membership than just help with audits? The PAAS Member Portal contains a wealth of information and resources to assist you with audits and member service questions. Below is a list of 6 pages found on the Audit Assistance section of the PAAS Member Portal to assist you and your pharmacy staff to be proactive when it comes to audits.

  • Access Services
    • Audit Documentation Submission Guidance
    • An online form to submit safe filling and billing questions
    • Your PAAS Membership Manual
  • Newsline
    • Monthly newsletter articles, written by our expert PAAS analyst team, provide safe filling and billing tips and relays relevant/current PBM trends to be help prevent audits
    • Search the Newsline Archive to get PAAS tips at the click of a button
    • Special Edition Newslines including: Top 10 articles of the prior year, DMEPOS Article Series and a Self-Audit Article Series
    • Ability to print monthly issues or individual articles
  • Proactive Tips
    • Audit flags – list of various claim attributes the PBMs use to select claims for audit
    • Billing insulin vials – flowchart to assist whether you should bill Medicare Part B vs Part D
    • DAW Codes Explained – use to understand when to effectively use DAW codes, their definitions and why claims may be flagged for audit if a DAW code is used incorrectly
    • Basic DMEPOS documentation guidance
    • Onsite Credentialing Checklist and expanded definitions of policies and procedures
    • Proof of refill request and affirmative response form for DMEPOS items
    • Steps on how to prepare for an onsite audit
    • And more!
  • Days’ Supply Charts
    • Utilize the days’ supply charts for inhalers, insulins, nasal sprays, eye drops and topicals to aid you in calculating the correct days’ supply
    • Guidance on overbilled quantities and incorrect days’ supply account for a sizable portion of audit chargebacks
    • Additional miscellaneous charts, which include: Dispense in Original Container and Return to Stock
  • Forms
    • Signature Logbook for print
    • Signature Trifold Mailer
    • Fax and Email Coversheet
    • Patient Attestation for over-the-counter COVID-19 test kits
  • On-Demand Webinars
    • Short webinars on hot topics in the PBM industry. Here are a few examples:
      • USP 800 Compliance
      • Cultural Competency Training
      • Dispensing Prescriptions Off-Label
      • Biologic Medications and Interchangeability
      • Continuous Glucose Monitor Requirements for Medicare Part B

PAAS Tips:

  • MORE AUDITS, MORE INSIGHT – PAAS National® is the industry-leading defender of community pharmacy dealings with Prescription Benefit Programs, including Caremark, Express Scripts, Humana, Medicaid, OptumRx, Prime Therapeutics., and more. PAAS assists on all third-party audits, including: desktop audits, onsite audits, invoice audits, OIG/Medicaid audits, Medicare B audits. The PAAS team is dedicated to helping you! We have five pharmacists and a complement of technician analysts with over 50 years of dedicated audit assistance experience. PAAS continuously updates their database with every audit received — in fact, we even keep a scorecard on individual auditors.
  • Get answers to your questions on days’ supply calculations, drug substitutions, billing practices, required documentation, prior authorization requirements, record retention, and internal audit procedures – just to name a few. As a trusted partner, we will provide tailored guidance to help you proactively prevent audits. Remember, the prescription claims you submit today are the audits of the future.
  • Keep your employees engaged and help lower audit risk by adding all employees to the portal and giving them permission to access these tools, resources and eNewsline. For more information review September 2019 Newsline article, What Are You Waiting For? Make Sure ALL of Your Employees are Added to the PAAS Portal!
  • Contact PAAS at (608) 873-1342, if you would like a tour of your PAAS Member Portal, so you can reap all the benefits of your PAAS Audit Assistance. We appreciate you being a member.