Compliance, Ethics, and Regulatory Requirements
Regulatory framework
Candidates must know the major laws affecting coding and billing: HIPAA (privacy and security of PHI), False Claims Act (liability for knowingly submitting false claims), Anti-Kickback Statute, Stark Law (physician self-referral), and Civil Monetary Penalties Law. Understand the role of OIG and CMS in enforcement and the importance of compliance programs.
Ethical coding
Ethical practice requires accuracy over reimbursement, confidentiality, and integrity. Coders must not alter codes to increase payment, must report suspected fraud, and must follow the AHIMA Code of Ethics and Standards of Ethical Coding. Understand the difference between fraud (intentional deception) and abuse (improper practices that may be unintentional).
Traps to watch
- Confusing fraud with abuse.
- Assuming HIPAA permits disclosure for any business purpose (minimum necessary rule applies).
- Overlooking Stark Law (self-referral) versus Anti-Kickback (remuneration for referrals).
- Failing to recognize upcoding and unbundling as compliance risks.
- Ignoring the requirement to report suspected fraud.
Rule of thumb
If a coding decision is driven by payment rather than documentation, it is a compliance risk. Document the rationale and follow the guidelines.
Worked example
A coder is pressured to assign a higher-level E/M code without supporting documentation. The correct action is to code to the documentation and report the pressure through the compliance program-this is an ethical and legal obligation.