Dr. Ross Koppel: Another Angle on EMR-Incited Upcoding

At my Feb. 15, 2011 post "Does EHR-Incited Upcoding (Also Known as "Fraud") Need Investigation by CMS?" I explained how, based on data I received from an active ED physician, EHR's and their algorithmic "billing advice" tools were apparently inciting massive upcoding.

The upcoding was causing a huge spike in "level 4" and "level 5" determinations for ED billing when comparing 2002 data to 2008 data, with resultant billions of dollars of increased Medicare expenditure for a few extra mouse clicks. See the above post for details, as shown on the graphs below:

(E/M level increases, 2002 compared to 2008. Click to enlarge)

(Est. increased Medicare expenditures from EHR upcoding, comparing 2002 to 2008. Click to enlarge)

Another angle on EHR-incited upcoding comes from University of Pennsylvania sociologist and EHR expert Ross Koppel, PhD. His words are reproduced with his permission below.

First, Dr. Koppel was quoted in today's Wall Street Journal in an article entitled "Many Medical Bills Contain Errors That Could End Up Wrecking Your Credit Score, Here's What You Need to Know" by Jessica Silver-Greenberg:

... What's more, some health-care experts say the number of errors could jump in coming years. That's because the 2009 economic-stimulus legislation included $19 billion in spending to encourage the use of electronic health records—a major source of billing mistakes, says Ross Koppel, a sociology professor at University of Pennsylvania's Center for Clinical Epidemiology and Biostatistics who has studied electronic records extensively.

Dr. Koppel adds the following commentary for HC Renewal:

With several EHRs, there's "auto-fill" for the EHR that reports on parts of the body the physician does not examine. So, for example, if the physician is a hand specialist, she/he will probably not examine the legs, head, chest, back, etc.

On many EHRs this is listed [e.g., entered by the user through clicking a form or checkbox - ed.] as "unremarkable" which in medical-speak means "I've examined these organs/body parts and found no problems."

In billing terms, that means "I've examined these parts and should be paid for a more comprehensive visit....what's called "up-coding."

It's actually dangerous for physicians because if the patient next week walks in with a major tumor that the doc should obviously have seen (had she/he examined that body part) then the physician is on the line and can get sued.

On other other hand, if the unexamined parts don't turn up in a medical case, it means the doc will make more money...with the only danger to the doc that she/he can be charged with fraud by the government and or by a payer.

So, in effect, today's EHR's, not just through algorithmic "recommendations" for upcoding but also through their template-checkbox nature, incite upcoding.

The resultant increased expenditures do not reflect more medical care provided or cognitive processes utilized, but merely a small amount of elbow, carpal and index finger activity:

Click...click...an easy way to generate billions of dollars of additional billing?

-- SS

EHR as Molestation Candidate Selector: What was this Resident looking for in the EHR before "examining" female patients?

As I was the Director of Clinical Informatics/CMIO (Chief Medical Informatics Officer) at Christiana Care Health System in Delaware back in the mid to late 1990's, and was the physician-architect of their EHR systems then, I find this story particularly disturbing:

First-Year Resident Accused Of Fondling 6 Patients
FoxPhilly.com, Feb. 18, 2011

Warrants Issued, Police Searching For Suspect

NEWARK, Del. - Delaware State Police are trying to find a former first-year resident at Christiana Hospital who they have identified as a suspect in alleged sexual contact with six patients.

According to state police, [the former Medical Resident] has been charged with six counts each of third-degree unlawful sexual contact and abuse, mistreatment or neglect of a patient or resident of a facility.

... The incidents were reported between Oct. 1 and Nov. 15 at the hospital in Newark.

The female patients were between the ages of 20 and 32, police said.

Authorities interviewed victims and hospital staff, reviewed patient charts, and audited access to computer records, which led to the identification of [the Resident] as a suspect, according to state police.

... State police said investigators found [the Resident] accessed the computerized hospital records of the six victims prior to the incidents, performed "physical exams" on the victims and failed to provide clinical documentation of the examinations in the victims' hospital charts. Scheduling records also indicated that [the Resident] was working when the incidents occurred.

... In three of the incidents, it was determined that the victims were identified as "non- teaching" patients for whom [the Resident] had no direct patient care responsibilities and had no authority to conduct physical exams or access their hospital records.

Also noted in another account of the story in the Delaware News Journal (a newspaper) is this:

... State police initially released details about three of the assaults on Nov. 12 and said at the time that they were investigating why hospital officials did not report the incidents to police until after the third assault, some two weeks after the first victim reported the incident to hospital staff.

During the subsequent police investigation, three additional women contacted state police to report similar incidents.

One could ask, then, why the Medical Resident was able to access these medical records, and why the unauthorized accesses apparently took some time to discover by "investigators" (presumably law enforcement officers), only after complaints were made.

It is also reasonable to assume this Resident did not abuse the first woman's records he found in a search. There was likely a larger series of unauthorized chart accesses as he searched the EMR system. In other words, I don't think he was peeking at an individual record, and then going in to a room to do his nasty work, one at a time. He was likely looking at a number of potential "candidates" before each incident; i.e., he was likely "trolling around" for potential victims.

It would be interesting to see the electronic "footprint" he left.

I had horrifying firsthand experience with abuse of electronic medical information in an earlier role in the public sector.

Specifically, I had observed the events in John Doe vs. the Southeastern Pennsylvania Transportation Authority (link). In this situation a gay co-worker, the SEPTA Employee Assistance Program liaison John Eakes (now deceased of AIDS) with whom I had worked extensively in the SEPTA Medical Department, was discriminated against by administration after peeks at his prescription records. His medications included those used in treating HIV-positive patients:

...[After the disclosure to SEPTA Chief Administrative Officer (and Deputy General Manager - ed.) Judith Pierce, Doe - a.k.a. Eakes] testified that he felt as though he were being treated differently. A proposal he had made for an in-house employee assistance program met with scant interest; he felt that this was because of his HIV condition. In addition, an administrator who reported to Pierce did not call on Doe to assist in the same way that he had called on Doe earlier. Doe testified that he felt as though there was less social chitchat, co-workers ate less of the baked goods he brought to the office to share, and that his work space seemed more lonely than before. He also became fearful of Pierce, who never told Doe that she knew of his illness. Doe alleges that he became depressed and requested a prescription for Zoloft, an antidepressant, from his physician. Later, another antidepressant called Elavil was added to the medications Doe was taking.

John Eakes was a good and conscientious employee and deserved none of this, in these relatively early years of HIV+ intolerance.

Therefore, when I was CMIO at Christiana Care Health System just a few years later, and as Chair of the committee on compliance with the then-new Health Insurance Portability and Accountability Act of 1996 (HIPAA), I recommended strongly that chart audits for unauthorized access be performed on a regular basis by a dedicated person or team, and rapid action taken if it occurred. (Then again, my counsel on healthcare IT was not infrequently ignored.)

Multiple accesses by a resident (trainee) to EHR records of non-teaching (private) patients should have sent up a very large and immediate cybernetic red flag.

Ding! Ding! Ding! Warning! Unauthorized accesses detected...

I am also concerned about the characteristics this former trainee was seeking in reviewing the EHR. A history of gynecological or breast disease to serve as a ploy for performing an intrusive exam? Was he looking for a psychiatric history? A history of prior sexual abuse?

While the EHR proved helpful in post hoc forensics, are we now seeing another potential abuse of EHR's for the identification of patients who may be preyed upon by the disturbed?

It would be helpful to know if there was a common medical theme regarding the patients affected in this rather shocking affair.

-- SS

Feb. 19 Addendum:

This affair reminds me of a saying that became news in the election of President Barack Obama:

"The Chickens Have Come Home To Roost" - Rev. Jeremiah Wright

Feb. 21 Addendum:

It appears that the corporate PR folks are monitoring the airwaves in planning their responses to this scandal. From the blog viewing logs:

IP Address 167.112.160.# (Christiana Care Health Services)
ISP Christiana Care Health Services
Time of Visit Feb 21 2011 9:36:32 am
Last Page View Feb 21 2011 9:42:03 am
Visit Length 5 minutes 31 seconds
Page Views 5
Referring URL http://us.cisionpoint.com/NewsItemDetail.aspx?id=1671771040
Visit Entry Page http://hcrenewal.blogspot.com/2011/02/what-was-this-medical-resident-looking.html
Visit Exit Page http://hcrenewal.blogspot.com/2011/02/what-was-this-medical-resident-looking.html

On the "Cisionpoint" company, us.cisionpoint.com, the "referring" URL that led to this post:

CisionPoint brings together - in one integrated customized dashboard - the on-demand tools you need to create, execute and evaluate superior campaigns from start to finish.

Log in to plan your campaign, connect with the media directly, monitor news coverage and analyze campaign results.

It will be interesting to see how this horrifying episode is "managed" by the corporate spin doctors.

-- SS

Feb. 21 addendum #2:

Here is a message posted by the organization:

Message from the chief operating officer

Posted today

Christiana Care is steadfast in our commitment to the safety and well-being of our patients, employees and all visitors to our campuses.

The Delaware State Police have issued a press release identifying a suspect in the case of inappropriate touching first reported late last year. The suspect is a former first year medical resident at Christiana Care.

The prompt and thorough work of our Department of Public Safety when the allegations first surfaced, and information we shared with the State Police from our robust health information technology system, was instrumental to the process. We quickly identified the medical resident as a person of interest, and took swift action to prevent any further patient contact. As a result of our preliminary investigation, he was suspended and upon further investigation dismissed from employment.

Our rapid response when the allegations were first reported revealed no systemic issues contributed to this incident. As an organization guided by learning, we are continuing a thorough review of best practices in hospital security to determine if there are any new security measures we should adopt.

[Hopefully in the intervening years since I was CMIO, they've become even more of a learning organization compared to here, here and here, where under the prior "C" level leadership they learned so much from me and made me feel so at home, I felt compelled to leave to maintain my sanity - ed.]

We remind and encourage all patients and family to always ask health care providers to identify themselves, explain why they are there to see the patient, and explain the care provided to them. All Christiana Care employees are required to prominently display their identification badges.

[One wonders if they now permit PhD holders to use that credential on the badge, not permitted when I was there - ed.]

We deeply regret the alleged incidents and our concern for the affected patients is shared throughout our health system.

Gary Ferguson
Chief Operating Officer

As I knew Mr. Ferguson in a prior role, and as he is a good person, I with some regret point out that this appears to be corporate spin control.

A truly "robust" HIT security system, in my opinion, would have flagged the perpetrator after the first victim. It might even have prevented the molestation if there was a time delay between when he, as a trainee, trolled for a victim by viewing the records of a private patient, and then saw the patient, without some medical emergency that could have justified the records breach.

Merriam-Webster dictionary

ro·bust
adj \rō-ˈbəst, ˈrō-(ˌ)bəst\

a : having or exhibiting strength or vigorous health
b : having or showing vigor, strength, or firmness [a robust debate] [a robust faith]
c : strongly formed or constructed : sturdy [a robust plastic]
d : capable of performing without failure under a wide range of conditions [robust software]

This "robust" system, after all, is a system critical to human life and well-being, not an inventory system of medical data.

Let an unauthorized person access, say, government intelligence files, and see how far that flies...

(Notwithstanding the Wikileaks affair, where the low-level person who accessed the diplomatic files did have authorization to access the servers, through managerial complacency.)

-- SS

Feb. 26 Addendum:

This story was picked up by the Newark Post, the local newspaper in Newark, Delaware, where Christiana Hospital is located.

Questions raised about access to hospital medical records
By Doug Rainey, Newark Post
Published: Thursday, February 24, 2011

-- SS

Pharmacia, or Maybe Pfizer Settles, Only Eight Years Later

Didn't somebody say "justice delayed is justice denied?"* 

Here is a story for a Friday afternoon, via a press release from the New York state Attorney General's office, per Bloomberg:

Attorney General Eric T. Schneiderman today announced a multimillion dollar settlement with a pharmaceutical company that inflated the cost of drugs sold to state health programs. The company, Pharmacia Corporation, has paid $2.5 million to the New York Medicaid program and to the Elderly Pharmaceutical Insurance Coverage Program (EPIC), and also to cover the costs of the investigation.

Here is more information about the lawsuit:

The lawsuit, filed in 2003, charged that Pharmacia failed to report real and accurate prices, and did not take into account discounts, rebates, chargebacks and other price concessions to their wholesalers. As a result, New York's Medicaid Program and the EPIC program paid more for certain drugs manufactured by Pharmacia than those state programs should have.

This is an unusual entrant into our march of legal settlements. As noted above, this lawsuit took eight years to settle. The entity that made the settlement, Pharmacia, is actually long gone as an independent company. It merged into Pfizer in 2003 (see this). Despite the eight years of waiting, the settlement is extremely paltry compared to the size of the company to which the settlement now applies. According to Google Finance, in 2010, Pfizer's annual revenues were more than $67 billion.

This settlement adds in a small way to a series of settlements Pfizer has recently made.  Pfizer paid a $2.3 billion settlement in 2009 (see post here), and three other major settlements from then to early 2010 (see post here).  The company was listed as one of the pharmaceutical "big four" companies in terms of defrauding the government (see post here).  For other discussions of Pfizer on Health Care Renewal, look here. 

The New York Attorney General's press release claimed, "These are hard financial times for our state, and my office will do its part by uncovering every dishonestly claimed dollar, and holding those who take advantage of New York accountable."  Begging his pardon, but could he really have been serious that nicking Pfizer for $2.5 million eight years after the lawsuit was filed is really holding this giant company accountable?  Will this settlement make the company any more accountable than all those that came before, some almost one thousand times bigger?  Meanwhile, as is usually the case in these stories about the march of legal settlements in health care, no person who authorized, directed or implemented the questionable activity apparently paid any penalty or suffered any sort of negative consequences.

This week, Matt Taibi asked "why isn't Wall Street in jail?" in the title of his most recent Rolling Stone article.  I should also ask, why aren't some leaders of pharmaceutical, device, biotechnology, and managed care corporations in jail? 

Just as the leaders of big financial service firms seem to be completely unaccountable for the havoc they created in the global economy, and despite bluster by various government officials, the leaders of big health care corporations seem to be completely unaccountable for the unethical behavior of their companies that continue to inflate the health care bubble.

So for the nth time I will repeat:  we will not deter unethical behavior by health care organizations until the people who authorize, direct or implement bad behavior fear some meaningfully negative consequences. Real health care reform needs to make health care leaders accountable, and especially accountable for the bad behavior that helped make them rich.

Meanwhile, the continued unwillingness of government leaders to take on corporate leaders suggests how corporatist the US has become. Government for the corporations, by the corporations, and of the corporations, bodes no good for the people whose rights are increasingly being displaced.

Mr Taibi encapsulated the problem in a more colorful way, and I will end with his version, somewhat edited for this family publication:

Over drinks at a bar on a dreary, snowy night in Washington this past month, a former Senate investigator laughed as he polished off his beer.

'Everything's f***ed up, and nobody goes to jail,' he said. 'That's your whole story right there. Hell, you don't even have to write the rest of it. Just write that.'

* - the quote has been attributed to William Gladstone in a 1868 speech. but may be older than that (link here)

Massive Nationwide Medicare Bust: 111 Charged For Scams Worth $225 Million

The article "Massive Nationwide Medicare Bust: 111 Charged For Scams Worth $225 Million" in the HuffPo reports that:

MIAMI — Federal authorities charged more than 100 doctors, nurses and physical therapists in nine cities with Medicare fraud Thursday, part of a massive nationwide bust that snared more suspects than any other in history.

More than 700 law enforcement agents fanned out to arrest dozens of people accused of illegally billing Medicare more than $225 million. The arrests are the latest in a string of major busts in the past two years as authorities have struggled to pare the fraud that's believed to cost the government between $60 billion and $90 billion each year. Stopping Medicare's budget from hemorrhaging that money will be key to paying for President Barack Obama's health care overhaul ...

Read the entire story at the link above.

As I wrote at my Feb. 15, 2010 post "Does Possible EMR-Facilitated Upcoding (Also Known as "Fraud") Need Investigation by CMS, And Could it Explain HIT Irrational Exuberance?", those "Federal authorities" need to look into how EHR's facilitate upcoding, which is a form of fraud that is likely worth far, far more than a mere $225 million:

(Click to enlarge. $225 million might be mere chicken feed. See here.)

Worse, without careful scrutiny, EHR-mediated fraud might not be as easily detected as the "conventional" Medicare fraud mills, where, for example, it can get highly obvious something's amiss:

... A Brooklyn, N.Y., proctologist was charged with billing $6.5 million for hemorrhoid removals, most of which he never performed.

Finally, one might wonder if any of those caught in this recent sting operation were using EHR's...

-- SS

After Manufacturing Problems, Genzyme CEO's Golden Parachute Means "Failure = Success"

In late 2009, I posted about problems at a Genzyme plant that manufactured some fabulously expensive drugs, e.g. Cerezyme whose cost to patients approximated $160,000 a year. We thought then that for a drug costing that much, the company ought to have figured out a conservative process to provide pure and unadulterated product. In a later post I asked why a company that could afford to make its CEO very rich could not afford to adequately maintain its manufacturing facilities. In May, 2010, I posted about a legal settlement of charges related to its manufacturing problems requiring Genzyme to pay a $175 million fine and function under US government supervision.  And in August, 2010, I posted about how this series of management missteps could lead to the company's CEO becoming even richer because they lead to a declining stock price, which increased the likely that the company would be bought out, which could trigger the CEO's golden parachute.  I suggested then that were this to happen, it would be a gross example of how massively perverse incentives stupendously reward the top brass of health care organizations for mediocre, or worse leadership and bad results for both patients/ clients/ customers and stock-holders alike.

Now it  looks like this will happen.  Yesterday, the Boston Globe reported:

Ggenzyme Corp., the largest biotechnology company in Massachusetts and one of the industry’s historic pioneers, has struck a definitive agreement to be bought by French pharmaceutical giant Sanofi-Aventis SA, in a deal valued at about $20.1 billion.

As a result of this deal,

Genzyme’s high-profile president and chief executive, Henri A. Termeer, who has run the company for 28 years, will resign following the close of the transaction. But he will advise Sanofi on integrating the two companies. Termeer built the company into a global operation with 10,000 employees worldwide and a business model that has been the envy of the biotechnology industry. He turns 65 on Feb. 28.

Termeer, though fiercely proud of Genzyme’s independence, stands to make more than $23 million when the sale is completed, according to a 'change of control' clause in his employment contract. In addition, as a major Genzyme shareholder, he would be in a position to cash out shares that last year were worth more than $275 million.

That and several other articles s noted that it was Genzyme's manufacturing problems that lead to the buy-out:

the string of events that made Genzyme vulnerable to a takeover began in the summer of 2009 when workers discovered viral contamination at Genzyme’s Allston Landing plant overlooking the Charles River.

Genzyme was forced to temporarily shut down and clean up the plant and ration shipments of its best-selling Cerezyme and Fabrazyme drugs, both of which treat enzyme deficiencies. The events created an opening for competitors such as Shire and Israel’s Protalix Biotherapeutics and sent Genzyme’s stock tumbling on the Nasdaq.

The dip in Genzyme’s share price drew activist investors, including Carl C. Icahn of New York and Ralph Whitworth of San Diego, who accumulated shares they hoped to sell at a rich premium. They pressured management to take steps to boost shareholder value, including a stock buyout and the elimination of 1,000 jobs worldwide.

Ultimately, the company gave Whitworth a seat on its board, and, after Icahn threatened to unseat Genzyme directors in a proxy battle, it granted two seats to his associates.

In many ways, industry watchers said, an acquisition became inevitable once Genzyme stumbled at its Allston plant.

A Bloomberg article noted that this sequence of events would lead to

The departure package [which] makes him 'one of the biggest all- time winners in biotech,' said [University of Michigan business professor Erik] Gordon, who has studied the pharmaceutical industry for three decades.

Our criticism of the Genzyme CEO's potential for reaping hugely perverse incentives was paralleled by Jim Edwards' critique of what actually happened:

Here’s how crazy CEO incentive compensation is: Genzyme (GENZ) CEO Henri Termeer walked away from his company with a payout that may be worth $300 million yesterday when Sanofi-Aventis (SNY) acquired his company. But the only reason Genzyme was acquired — triggering Termeer’s gargantuan change-of-control package — is because Termeer nearly ran his company into the ground, making his stock cheap enough for Sanofi to buy.

In other words, failure = success when it comes to change-of-control packages for CEOs.

So let me just repeat my conclusion from last August: As long as being a health care CEO is effectively a license to loot the company, is it any wonder that health care organizations continue to be badly lead, and health care costs soar while quality and access suffer?

Once more with feeling: real health care reform would require us to make health care executives truly accountable for their actions, and penalize them for those that are ill-informed, contemptuous of health care values, self-interested, or corrupt.