FRAUD & ABUSE
STARK & ANTI-KICKBACK
HIPAA
MANAGERS & REPORTING
INCIDENT REPORTING
100

What is the biggest difference between fraud and abuse?

Fraud is intentional deception.
Abuse is improper practice that may be unintentional.

100

What does the Stark Law prohibit?

Physicians referring Medicare/Medicaid patients for designated health services to entities where they have a financial relationship unless an exception applies.

100

What does PHI stand for?

Protected Health Information.

100

What should you do first when an employee raises a compliance concern?

Listen.

100

How soon should an employee report an incident?

Immediately.

200

Billing for services that were never provided is an example of what?

Fraud

200

Is the Anti-Kickback Statute intent-based?

Yes

200

True or False:
PHI only exists in electronic medical records.

False.

200

Should supervisors investigate concerns on their own?

No

200

Incident reports should be completed within how many hours?

24 hours.

300

Name TWO examples of abuse.  

  • Poor documentation
  • Failure to follow billing policies
  • Charging with incomplete documentation 
300

Name two requirements of an equipment rental Safe Harbor.

  • Written agreement
  • Signed by both parties
  • At least one year
  • Fair market value
  • Compensation set in advance
  • Not based on referrals
  • Commercially reasonable
300

Name four examples of PHI.

  • Name
  • DOB
  • Address
  • Medical record number
  • Email
  • Phone number
  • Social Security number
  • Photos
  • IP Address
300

True or False:
Employees should never be retaliated against for reporting concerns in good faith.

True.

300

Name three incidents that should be reported.

  • Patient injury
  • Employee injury
  • Vehicle accident
  • Equipment damage
  • Company property damage 
400

Abuse can still result in penalties even if there was no intent to deceive.

True

400

Failure to meet every Safe Harbor automatically means you violated the AKS.

False.

400

Who has rights to their health information under HIPAA?

Patients.

400

Name three supervisor responsibilities.

  • Listen
  • Maintain confidentiality
  • Report concerns
  • Escalate when needed
  • Encourage reporting
  • Avoid retaliation
400

What should you avoid when completing an incident report?

Making assumptions.

500

List three possible consequences of healthcare fraud.

  • Criminal charges
  • Fines
  • Imprisonment
  • Exclusion from Medicare/Medicaid
  • Loss of licensure
500

Which statement is compliant?

A. "Can you send us more patients?"
B. "Ownership means we'd expect more referrals."
C. "Let's discuss staffing needs and scheduling."
D. "More referrals mean a better investment."

 

C. "Let's discuss staffing needs and scheduling."

500

Name three different formats where PHI can exist.

  • Spoken
  • Written
  • Electronic
    (Photos and videos also count.)
500

Compliance training is required:

A. Every five years

B. For new hires and annually

C. Every two years

D. Only for new employees

500

After an incident report is submitted, name two things that may happen.

  • Review
  • More information gathered
  • Insurance documentation
  • QI Committee review
M
e
n
u