Compliance Review Program

The CMS National Standards Group, on behalf of HHS, administers the Compliance Review Program to ensure compliance among covered entities with HIPAA Administrative Simplification rules for electronic health care transactions.

In April 2019, HHS randomly selected 9 HIPAA-covered entities—a mix of health plans and clearinghouses—for compliance reviews. HHS piloted the program with health plan and clearinghouse volunteers to streamline the compliance review process and identify any system enhancements. In 2019, providers were able to participate in a separate pilot.

More information on the Compliance Review Program

illustration of a web browser's url box containing assett.cms.gov overlaid by a video play button

Reaching Compliance with ASETT (Video)

To help the health care community use electronic standards for administrative transactions, CMS has released the Reaching Compliance with ASETT video.

  • Explains the benefits of complying with Administrative Simplification standards, including substantial cost savings
  • Describes how ASETT—the Administrative Simplification Enforcement and Testing Tool—allows you to test transactions, both your own and your business trading partners’ transactions
  • Tells you how to use ASETT to file a complaint if you have any noncompliant business trading partners
Image text says Enforcing Administrative Simplification

Enforcing HIPAA Administrative Simplification Requirements (Video)

Enforcing Administrative Simplification requirements is essential to ensuring the health care community reaps the benefits of standardized transactions and reduced administrative costs. Learn more about how CMS enforces Administrative Simplification requirements in this video.

 

document icon
2022 Compliance Review Program Findings (PDF)
The 2022 Compliance Review Program Findings report includes updates to the lists of common violations of standards and operating rules from Compliance Reviews
document icon
2021 Compliance Review Program Findings (PDF)
The 2021 Compliance Review Program Findings report includes updates to the lists of common violations of standards and operating rules from Compliance Reviews.
document icon
2020 Compliance Review Program Findings (PDF)
The Compliance Review Program Findings report includes common violations of standards and operating rules from Compliance Reviews.
video icon
CMS Compliance Review Program (Video)
Watch the CMS video about the Compliance Review Program to learn about why compliance reviews are important for the health care industry and how they are conducted.
document icon
Compliance Review Infographic (PDF)
Learn the process CMS uses to conduct compliance reviews in this infographic.
document icon
 
 

Why Compliance Reviews?

Health care providers, health plans, and clearinghouses have encouraged HHS to take proactive steps, including reviews, to ensure compliance with Administrative Simplification transaction standards, which reduce the administrative burden on the health care industry.

HHS’s proactive approach implements a progressive penalty process with the goal of remediation. If an organization isn’t compliant, HHS will work with the entity to resolve any issues. Corrective Action Plans are commonly used to address non-compliance. In cases of willful and egregious noncompliance, monetary penalties may be assessed and calculated on a case by case basis.

Provider Pilot Program

The CMS National Standards Group, on behalf of HHS, launched a volunteer Provider Pilot Program to test the compliance review process and to gain insight on compliance with HIPAA Administrative Simplification rules among providers. This followed a successful pilot program for health plans and clearinghouses completed in 2018.

In April 2019, HHS selected 3 health care providers from the pool of volunteers to participate.

Learn more about the Provider Pilot Program:

Page Last Modified:
01/05/2024 09:32 AM