To verify the compliance and certifications of a medical billing agency, take the following steps:
1. Request Documentation:
Ask the agency to provide copies of their compliance policies, HIPAA training records, Business Associate Agreements (BAAs), and any relevant certifications (such as AAPC or AHIMA certifications for staff).
2. Evaluate HIPAA Compliance:
Confirm the agency has up-to-date HIPAA compliance documentation, including privacy and security policies, regular risk assessments, and evidence of staff HIPAA training. Check for signed BAAs, which are mandatory for all vendors handling protected health information (PHI).
3. Review Industry Certifications:
Request proof of professional credentials for key personnel. Common certifications include AAPC’s Certified Professional Biller (CPB), Certified Professional Coder (CPC), and AHIMA’s Certified Coding Specialist (CCS).
4. Assess Security Measures:
Ask for details about their data security protocols (encryption, access controls, audit trails), and whether they conduct regular security audits. Inquire about their incident response plans for data breaches.
5. Verify Regulatory Knowledge:
Ensure the agency’s staff receives ongoing education regarding regulatory changes (such as ICD-10 updates or payer-specific requirements) and that their processes reflect current best practices.
6. Check for Third-Party Audits:
See if the agency undergoes external compliance audits, such as SOC 2 or HITRUST certification, which further demonstrates robust data protection and process controls.
7. Conduct Reference Checks:
Contact current or past clients of the agency to ask about their experiences, especially regarding compliance and data security.
8. Review Contracts and Agreements:
Examine service agreements for compliance clauses, data handling, liability coverage, and provisions for regular compliance reviews.
9. Search for Complaints or Violations:
Look up the agency with regulatory bodies or online databases to ensure there is no history of HIPAA violations or legal actions related to non-compliance.
By systematically following these steps, you can confidently verify a medical billing agency’s compliance and certifications before entering a partnership.
