Tuesday, May 18, 2010

The Latest on the Red Flags Rule

Elizabeth E. Hogue, Esq.
Office: 877-871-4062
Fax: 877-871-9739

The Federal Trade Commission (FTC) will begin enforcement of the Red Flags Rule on June 1, 2010. This Rule was created to ensure that certain types of organizations are doing everything in their power to identify, prevent, and reduce incidences of identity theft. Most health care providers are subject to this Rule that requires businesses to develop identity theft Programs tailored to the characteristics of their organizations. Although the FTC will not take any enforcement action before June 1, 2010, providers are still required to comply. (See information below regarding available materials.) There is, however, legislation pending in Congress that may change requirements to comply with the Rule.

Specifically, on October 8, 2009 H.R. 3763 was introduced into the House of Representatives. This proposed bill would amend the Fair Credit Reporting Act to exclude small businesses, including some health care providers, from Red Flags Rule requirements. This legislation was passed by the House of Representatives on October 21, 2009. It is currently being reviewed by the Senate Committee on Banking, Housing, and Urban Affairs. Section 1 of the proposed legislation provides as follows:

(4) EXCLUSION FOR CERTAIN SMALL BUSINESSES – For purposes of this subsection, the term ‘creditor’ shall not include—

(A) a health care practice with 20 or fewer employees;…or

(D) any other business, if the Commission determines, following an application for exclusion by such business, that such business—

i   knows all of its customers or clients individually;

ii   only performs services in or around the residences of its customers; or

iii   has not experienced incidents of identity theft and identity theft is rare for businesses of that type.

(5) DEFINITIONS – For purposes of this subsection:

(A) EMPLOYEE – With respect to a business, the term ‘employee’ means any individual who works for such a business and is paid either wages or a salary.

(B) HEALTH CARE PRACTICE –

(iv) IN GENERAL – The term ‘health care practice’ means a business that’s primary service is providing health care via health care professionals employed by the business.

(v) HEALTH CARE PROFESSIONAL – For purposes of subparagraph (A), the term ‘health care professional’ means an individual engaged in providing health care and licensed under State law, including physicians, dentists, podiatrists, chiropractors, physical therapists, occupational therapists, marriage and family therapists, optometrists, speech therapists, language therapists, hearing therapists, and veterinarians

If this proposed legislation is enacted, the Red Flags rule may not apply to some providers. Some providers may also qualify for an exclusion from the Rule, as indicated above.

There’s always something new in healthcare!

We have developed materials for you to use to meet the requirements of the Rule. The materials are appropriate for use by all providers, including home health agencies; private duty agencies; hospices; HME suppliers; and individual providers, such as therapists, ALF’s/ILF’s, physicians, etc. The materials include a comprehensive Policy, as required by the Rule, which should be used to provide training that is also mandated by the Rule. In addition, the materials include a resolution to be adopted by the governing body per the Rule.

The cost of these materials is $200.00. Please send a check made out to Elizabeth E. Hogue, Esq. to: Fulfillment, 107 Guilford, Summerville, SC 29483. We are unable to accept credit cards. Please be sure to include the name and e-mail address of the person who should receive the materials. We will e-mail them to the designated recipient upon receipt of payment.

©2010
Elizabeth E. Hogue, Esq. All rights reserved.
No portion of this material may be reproduced in any form without the advance written permission of the author.

No comments:

Post a Comment