hipaa.app updates, status and compliance updates
A practice-operations guide to CPT 85610 (prothrombin time): CLIA certificate scope, the QW modifier workflow, frequency denials, and the vendor and records-release exposure that follows every INR result out of your building.
Carl B. Johnson
One vaccine dose creates a claim, a registry submission, and a recall message. This guide walks administrators through immunization ICD 10 documentation, the vendor handoffs it triggers, and the agreements each one requires.
Carl B. Johnson
A practice-operations guide to telemedicine CPT codes: which code families your staff touches, how modifiers and place-of-service travel with the claim, and the vendor and BAA exposure that rides along with every virtual visit.
Carl B. Johnson
A practice-operations breakdown of CPT 82962 — the CLIA certificate that has to exist first, the documentation your biller needs, and the device vendors who quietly became business associates.
Carl B. Johnson
A Medicare additional documentation request usually gives you 45 days. Here is how to pull, package, and ship those charts without creating a privacy problem — plus the vendor and BAA questions the request exposes.
Carl B. Johnson
CPT 99080 is the code your practice reaches for when someone asks you to fill out a form. The billing question is the easy part; the authorization, minimum-necessary, and vendor questions are where practices get hurt.
Carl B. Johnson
A practice-operations guide to EHR documentation: what belongs in the designated record set, how to handle amendment requests and audit log demands, and which documentation vendors need a signed BAA.
Carl B. Johnson
Quality reporting moves patient-level data to registries, payers, and abstractors every year. Here's how to run it as an operations process with the BAA, minimum necessary, and records-request pieces handled.
Carl B. Johnson
What the CPT code 99215 definition actually says, how practices document and defend high-level established patient visits, and the records-handling and BAA obligations that follow every audit request.
Carl B. Johnson
Depth, surface area, and method drive debridement coding — and every one of those data points lives in a note, a photo, or a vendor's app. Here's the operational and privacy workflow behind the claim.
Carl B. Johnson