Paubox blog: HIPAA compliant email made easy

What is the role of the Centers for Medicare & Medicaid Services?

Written by Kirsten Peremore | September 10, 2023

The Centers for Medicare & Medicaid Services, known as CMS, is a federal agency within the United States Department of Health and Human Services (HHS) responsible for administering two major health insurance programs in the United States: Medicare and Medicaid. 

 

The role of the CMS

CMS plays a role in shaping and implementing healthcare policies related to these programs. CMS's primary mission is to ensure access to quality healthcare services for eligible beneficiaries, protect the rights of consumers, and promote innovative approaches to healthcare delivery. It sets and enforces regulations, guidelines, and standards that govern healthcare providers, health plans, and other entities participating in these programs. 

CMS works in collaboration with state governments to administer Medicaid, providing federal funding and guidance while allowing states flexibility in program design. Additionally, CMS manages Medicare, which provides health coverage primarily for individuals aged 65 and older and those with certain disabilities. The agency also focuses on payment reform initiatives, quality improvement, and the adoption of health information technology to enhance patient outcomes and reduce healthcare costs. 

See also: ERP services and HIPAA

 

Who benefits from CMS?

Medicare

Medicare is a federal health insurance program primarily for people aged 65 and older, certain younger individuals with disabilities, and those with end-stage renal disease (ESRD). CMS oversees and administers various parts of Medicare, including Part A (Hospital Insurance), Part B (Medical Insurance), Part C (Medicare Advantage Plans), and Part D (Prescription Drug Coverage).

 

Medicaid

Medicaid is a joint federal and state program that provides health coverage to low-income individuals and families. The CMS works with individual states to administer and oversee their Medicaid programs, ensuring compliance with federal guidelines and regulations.

See also: Restrictions on PHI transmitted via text messaging

 

CMS HIPAA fact sheet

The CMS released a fact sheet in 2022, providing the mandates and prohibitions for HIPAA Covered Entities related to administrative transactions, code sets, unique identifiers, and operating rules. These include:

  • Covered entities cannot enter into agreements that alter the definition, data condition, or use of data elements in adopted standards or operating rules, or use codes not intended for use in a standard.
  • Healthcare providers using DDE platforms offered by health plans must comply with data content and data condition requirements of adopted standards.
  • Health plans must conduct transactions using adopted standards when requested. They cannot delay or reject standard transactions or offer incentives against their use.
  • Covered healthcare providers must obtain an NPI and use it in all standard transactions requiring their identifier. Organizations working with individual prescribers must ensure they obtain and share NPIs when requested.
  • Covered entities must use the standard unique employer identifier in transactions requiring an employer identifier.
  • Covered entities must use valid medical data code sets at the time of care and valid nonmedical data code sets at the time of transaction initiation.

 

Organizations that operate under the CMS

  1. Medicare Administrative Contractors (MACs): MACs are private insurance companies contracted by CMS to process and pay Medicare claims for specific regions of the country.
  2. Medicaid Managed Care Organizations (MCOs): These are private health insurance companies that contract with state Medicaid agencies to provide managed care services to Medicaid beneficiaries.
  3. State Medicaid agencies: Each state has its own Medicaid agency responsible for administering the Medicaid program within its jurisdiction.
  4. Medicare Advantage Plans: Private health insurance plans approved by CMS to offer Medicare benefits (Part C) to eligible beneficiaries.
  5. Prescription drug plans (Part D Plans): Private insurance companies offering Medicare prescription drug coverage to eligible beneficiaries.
  6. Health insurance marketplaces (Exchanges): State or federally facilitated exchanges where individuals and families can purchase health insurance plans, including plans that meet Affordable Care Act (ACA) requirements.
  7. Medicare Part B and Durable Medical Equipment (DME) Suppliers: Companies that provide medical equipment and supplies covered under Medicare Part B and D.
  8. Accountable Care Organizations (ACOs): Groups of healthcare providers who work together to coordinate care and improve quality while reducing costs for Medicare beneficiaries.
  9. Federally Qualified Health Centers (FQHCs): Community-based healthcare providers that serve underserved and vulnerable populations, receiving enhanced reimbursement from Medicare and Medicaid.
  10. State health departments: State-level agencies that work in collaboration with CMS to implement and administer various healthcare programs, including Medicare and Medicaid

See also: HIPAA Compliant Email: The Definitive Guide