The Confidentiality of National Provider Index (NPI) Numbers

Written by Researchbite | Updated on: February 17, 2023

The Confidentiality of National Provider Index (NPI) Numbers

Medicare created the UPIN (Unique Physician Identification Number) as a substitute for the Social Security number for doctors and other medical professionals. When CMS adopted NPIs as the preferred provider identification number in 2007, the UPIN Registry was shut down. To standardize and streamline the claims submission procedure, this was done.

The Unique Physician Identification Number was replaced by the National Provider Identifier (NPI)

Since the National Provider Identifiers (NPIs) was implemented by the CMS ten years ago, the billing procedure for hospitals and other healthcare facilities has improved. Furthermore, NPIs are supported and encouraged by both Medicare and Medicaid. Due to their resemblance to Social Security numbers, NPIs have grown to be an essential component of the healthcare ecosystem. This means that a healthcare provider's identity can be stolen via an NPI as it is not private. On the National Plan and Provider Enumeration System, NPIs are available to the general public.

Every year, from the puclic NPI Profile data, thousands of NPIs are stolen. The information in the public NPI profile is based on the information you provided when requesting an NPI number from the CMS. The NPI number will not contain any more information on you and is an intelligence-free number. If you believe that inaccurate information about you has been shown on the NPPES site, you have the option to easily change the information.

Because it was listed as your primary contact information on NPI rather than your office location and contact information, it is quite probable that your phone number or home address will show up on several internet directories and websites. It may happen that somebody might fill out your NPI profile on your behalf and unintentionally use their contact information. You are not even aware of the fact that this information will be available to the public when you initially filled out your application.

Healthcare providers must make sure their NPI profile contains the precise information they are willing to share for their patients to see because several online directories rely on public NPI data. Knowing that the general public would be able to access your information is terrifying.

No healthcare practitioner would like the following: Think about getting a call on your phone and discovering a patient on the other end. Alternatively, picture the patient in front of your home. Your data might be accessible to the general public without your knowledge, even though both of these situations may seem extremely unlikely.

The procedure for clearing your identity and obtaining relief from alleged financial responsibility is difficult if you believe your NPI has been stolen. Regardless, to assist those whose NPI numbers have been stolen and to hasten the exoneration process, CMS established the Center for Program Integrity (CPI) in 2011. If you suspect that your NPI number has been stolen, contact CPI right away.

Start your research after getting in touch with CPI. You might start by checking the records for discrepancies, particularly the patient and billing files associated with the erroneously billed services. If fraudulent activity is discovered, alert those who have accessed the patient's records. Additionally, let them know that the information in the records is inaccurate and ask them to update it with the proper information.

If the breach occurred following the HIPPA Breach Notification Rule (45 CFR part 164 subpart D) or any applicable state breach notification law, you must later send out important notifications about the breach. Additionally, you must review your HIPAA compliance and information security measures.

What Sort of Damage Control Would You Use?

It's unsettling to see your personal information online. The good news is that you can control your identity and manage your personal information online. Finding out what could be accessible out there is the first step.

Carefully enter your contact information

If you've just begun practicing and haven't yet requested an NPI, you might want to think again about including your cell phone number. This is because it might make your information public. NPIs are assigned to graduating medical students, so inquire with your director about the best address and phone number.

Consider Your NPI Profile's Information Carefully

You might not recall what information you entered if you already have an NPI. Visit the NPI register to check that all the details on your profile are accurate. By simply registering an account on the NPI website, you may make any necessary changes.

NPI Helps Prevent Healthcare Fraud

Verifying the NPI is one of the crucial components in combating fraud in Medicare, along with standardized provider identification. When a provider is treating patients, writing prescriptions, or procuring equipment and supplies, their identification may be verified with the use of their NPI number. While having a valid NPI number does not guarantee that a provider is properly licensed, excluded from services, or sanctioned, the combination of all these credentialing components deters healthcare fraud.

Since the National Provider Identifiers (NPIs) was adopted by the CMS ten years ago, the billing procedure for hospitals and other healthcare facilities has improved. Furthermore, NPIs are supported and encouraged by both Medicare and Medicaid. Due to their resemblance to Social Security numbers, NPIs have grown to be an essential component of the healthcare ecosystem. This means that a healthcare provider's identity can be stolen via an NPI as it is not private. On the National Plan and Provider Enumeration System, NPIs are available to the general public.

Every year, thousands of NPIs are taken from the public NPI profile and used for dishonest purposes. The information in the public NPI profile is based on the information you provided when requesting an NPI number from the CMS. The NPI number will not contain any more information on you and is an intelligence-free number. If you believe that inaccurate information about you has been shown on the NPPES site, you have the option to easily change the information.

Only because it was listed as your primary contact information on NPI rather than the details of your office location and contact information, it is quite probable that your phone number or home address will show up on several internet directories and websites. Someone else may fill up your NPI profile on your behalf and unintentionally use their contact information. You might not have been aware that this information will be available to the public when you initially filled out your application.

Conclusion

The procedure for clearing your identity and obtaining relief from alleged financial responsibility is difficult if you believe your NPI has been stolen. Regardless, to assist those whose NPI numbers have been stolen and to hasten the exoneration process, CMS established the Center for Program Integrity (CPI) in 2011. If you suspect that your NPI number has been stolen, contact CPI right away.

Start your research after getting in touch with CPI. You m ight start by checking the records for discrepancies, particularly the patient and billing files associated with the erroneously billed services. If fraudulent activity is discovered, alert those who have accessed the patient's records. Additionally, let them know that the information in the records is inaccurate and ask them to update it with the proper information.

If the breach occurred following the HIPPA Breach Notification Rule (45 CFR part 164 subpart D) or any applicable state breach notification law, you must later send out important notifications about the breach. Additionally, you must review your HIPAA compliance and information security measures.

When you file a lawsuit, an emotionally and financially costly exercise, there are a few circumstances that are justified and right. For instance, healthcare providers have sued entities or individuals for unauthorized use of their NPI numbers to recover financial losses. According to this theory of culpability, a defendant company or individual misappropriated the identity of a healthcare practitioner and broke a fiduciary responsibility.

Additionally, the case alleges a breach of contract where there is a contract between the defendant and the healthcare provider. These cases are occasionally brought after the government has completed its investigation, accepted the defendant's plea, and settled any civil culpability with the defendant. There are a few instances where the plaintiff stands to gain significantly from bringing a lawsuit after the government has completed its investigation. There has already been admission and the gathering of pertinent data.

These are a few of the most crucial actions you must take if your NPI number has been compromised or stolen. You should safeguard your NPI exactly like you would your SSN, and at the absolute least, check your NPI profile frequently, just like you would your credit report.

In situations where your NPI number has already been stolen, preventative steps are ineffective. Make the appropriate reports and notifications in such circumstances, look into and identify the source of the theft, and then launch a lawsuit if necessary. The earlier you take the appropriate action, the better. Healthcare won't get more expensive if healthcare fraud schemes are stopped before they spread and become dangerous. Additionally, it aids in taxpayer money savings.


         

Written by
Researchbite
ResearchBite is a platform committed to availing the scientific knowledge and information at your fingertips.

Check out other articles written by Researchbite .