§149.510. Independent dispute resolution process.
45 C.F.R. § 149.510
(2) Any inadvertent disclosure by a person who is authorized to access IIHI at a certified IDR entity to another person authorized to access IIHI at the same certified IDR entity, and the information received as a result of the disclosure is not further used or disclosed in a manner not permitted under paragraph (e)(2)(v) of this section.
(3) A disclosure of IIHI in which a certified IDR entity has a good faith belief that an unauthorized person to whom the disclosure was made would not reasonably have been able to retain such information.
(1) The nature and extent of the IIHI involved, including the types of identifiers and the likelihood of re-identification;
(2) The unauthorized person who used the IIHI or to whom the disclosure was made;
(3) Whether the IIHI was actually acquired or viewed; and
(4) The extent to which the risk to the IIHI has been mitigated.
(1) Information sufficient to identify the provider, facility, or provider of air ambulance services, including the name and current contact information (including the legal business name, email address, phone number, and mailing address) as provided with the claim form submitted by the provider, facility, or provider of air ambulance services to the plan or issuer, and the applicable National Provider Identifier (NPI);
(2) Information sufficient to identify the plan or issuer, including the plan's or issuer's registration number, as required under § 149.530, or an attestation from the party submitting the open negotiation notice that the plan's or issuer's registration number was not provided on any remittance advice associated with the initial payment or notice of denial of payment for the item or service; the legal business name of the plan or issuer (or, in the case of a self-insured group health plan that does not have a legal business name, the legal business name of the plan sponsor), as well as the current contact information (name, email address, phone number, and mailing address) of the plan or issuer as provided with any remittance advice associated with the initial payment or notice of denial of payment for the item or service; and if the party submitting the open negotiation notice is a plan or issuer, the plan type (for example, self-insured or fully-insured);
(3) The name and contact information (including the legal business name, email address, phone number, and mailing address) for any third party representing the party submitting the open negotiation notice, and an attestation that the third party has the authority to act on behalf of the party it represents in the open negotiation;
(4) Information sufficient to identify the item or service, including: the date(s) the item or service was furnished and, if the party submitting the open negotiation notice is a provider, facility, or provider of air ambulance services, the date(s) that the provider, facility, or provider of air ambulance services received the initial payment or notice of denial of payment for the item or service from the plan or issuer; the type of item or service (specifically, whether the item or service is an emergency service as defined in § 149.110(c)(2)(i) or (ii), a non-emergency service as described in § 149.120(b), or an air ambulance service as defined in § 149.30); whether the service is a professional service or facility-based service; the State where the item or service was furnished; the claim number; the service code; and information to identify the location where the item or service was furnished (such as, place of service code or bill type code);
(5) The initial payment amount (including $0 if payment is denied);
(6) The qualifying payment amount, if provided in a remittance advice associated with the initial payment or notice of denial of payment, or if the party submitting the open negotiation notice is a plan or issuer;
(7) An offer of an out-of-network rate for each item or service;
(8) If the party submitting the open negotiation notice is a plan or issuer, the amount of cost sharing imposed for the item or service, if any;
(9) If the party submitting the open negotiation notice is a provider or facility, a statement that the items and services do not qualify for the notice and consent exception described at 45 § 149.410(b) or § 149.420(c) through (i);
(10) A statement that the provider, facility, or provider of air ambulance services was a nonparticipating provider, nonparticipating emergency facility, or nonparticipating provider of air ambulance services on the date the item or service was furnished;
(11) General information listed in the standard open negotiation notice developed by the Secretary pursuant to paragraph (b)(3) of this section describing the open negotiation period and the Federal IDR process (including a description of the purpose of the open negotiation period and Federal IDR process and key deadlines in the open negotiation period and Federal IDR process); and
(12) A copy of any remittance advice associated with the initial payment or notice of denial of payment for the item or service.
(1) Information sufficient to identify the provider, facility, or provider of air ambulance services, including the name and current contact information (including the legal business name, email address, phone number, and mailing address) as provided with the claim form submitted by the provider, facility, or provider of air ambulance services to the plan or issuer, and the applicable NPI;
(2) Information sufficient to identify the plan or issuer, including the plan's or issuer's registration number, as required under § 149.530, or an attestation from the party submitting the open negotiation response notice that the plan's or issuer's registration number was not provided on any remittance advice associated with the initial payment or notice of denial of payment for the item or service, as well as the legal business name of the plan or issuer (or, in the case of a self-insured group health plan that does not have a legal business name, the legal business name of the plan sponsor), the current contact information (name, email address, phone number, and mailing address) of the plan or issuer as provided with any remittance advice associated with the initial payment or notice of denial of payment for the item or service; and if the party submitting the open negotiation response notice is a plan or issuer, the plan type (for example, self-insured or fully-insured);
(3) The name and contact information (including the legal business name, email address, phone number, and mailing address) for any third party representing the party submitting the open negotiation response notice, and an attestation that the third party has the authority to act on behalf of the party it represents in the open negotiation;
(4) Information sufficient to identify the item or service included in the open negotiation notice, including the date(s) the item or service was furnished, and if the party submitting the open negotiation response notice is a provider, facility, or provider of air ambulance services, the date(s) that the provider, facility, or provider of air ambulance services received the initial payment or notice of denial of payment for the item or service from the plan or issuer, and the claim number;
(5) If the party submitting the open negotiation response notice is a plan or issuer, a statement as to whether it agrees that the initial payment amount (including $0 if payment is denied) and the qualifying payment amount reflected in the open negotiation notice accurately reflect the initial payment amount and qualifying payment amount disclosed with the initial payment for the item or service, and if not, or if the open negotiation notice indicates that the initial payment amount or qualifying payment amount was not communicated by the plan or issuer in a remittance advice associated with the initial payment or notice of denial of payment, the initial payment amount (including $0 if payment is denied) and/or qualifying payment amount it believes to be correct, and documentation to support the statement (for example, the remittance advice confirming the qualifying payment amount);
(6) If the party submitting the open negotiation response notice is a plan or issuer, the amount of cost sharing imposed for the item or service, if any;
(7) If the party submitting the open negotiation response notice is a provider or facility, a statement that the items and services do not qualify for the notice and consent exception described at § 149.410(b) or § 149.420(c) through (i);
(8) For each item or service, either a statement and supporting documentation that explains why the item or service is not subject to the Federal IDR process or a statement agreeing that the item or service is subject to the Federal IDR process;
(9) A statement as to whether any of the information provided in the open negotiation notice is inaccurate and the basis for the statement, as well as supporting documentation; and
(10) A statement confirming that the initial payment or notice of denial of payment or other remittance advice reflected in the open negotiation notice under paragraph (b)(1)(ii)(A)(12) of this section is accurate, or, if inaccurate, a copy of the accurate remittance advice associated with the initial payment or notice of denial of payment for the item or service.
(1) Information sufficient to identify the provider, facility, or provider of air ambulance services, including the name and current contact information (including the legal business name, email address, phone number, and mailing address), and the NPI; and if the initiating party is a provider, facility, or provider of air ambulance services, the Taxpayer Identification Number (TIN);
(2) Information sufficient to identify the plan or issuer, including the plan's or issuer's registration number, as required under § 149.530, or an attestation from the initiating party that the plan's or issuer's registration number was not provided on any remittance advice associated with the initial payment or notice of denial of payment for the item or service; the legal business name of the plan or issuer (or, in the case of a self-insured group health plan that does not have a legal business name, the legal business name of the plan sponsor), as well as the current contact information (name, email address, phone number, and mailing address) of the plan or issuer as provided with any remittance advice associated with the initial payment or notice of denial of payment for the item or service; and if the initiating party is a plan or issuer, the plan type (for example, self-insured or fully-insured) and TIN (or, in the case of a plan that does not have a TIN, the TIN of the plan sponsor);
(3) The name and contact information (including the legal business name, email address, phone number, TIN, and mailing address) for any third party representing the initiating party, and an attestation that the third party has the authority to act on behalf of the party it represents in the Federal IDR process;
(4) Information sufficient to identify whether the dispute being initiated includes batched or bundled qualified IDR items or services as described in paragraph (c)(4) of this section;
(5) Information sufficient to identify the qualified IDR item or service that is the subject of the notice of IDR initiation, including the date(s) the qualified IDR item or service was furnished; if the initiating party is a provider, facility, or provider of air ambulance services, the date(s) that the provider, facility, or provider of air ambulance services received the initial payment or notice of denial of payment for such item or service from the plan or issuer; the date the open negotiation period under paragraph (b)(1) of this section began; the type of item or service (specifically, whether the item or service that meets the requirements of paragraph (a)(2)(xi)(A) of this section is an emergency service as defined in § 149.110(c)(2)(i) or (ii), a non-emergency service as described in § 149.120(b), or an air ambulance service as defined in § 149.30); whether the service is a professional service or facility-based service; the State where the item or service was furnished; the claim number; the service code; and information to identify the location the item or service was furnished (including place of service code or bill type code);
(6) The initial payment amount (including $0 if payment is denied);
(7) If the initiating party is a plan or issuer, the amount of cost sharing imposed for the item or service, if any;
(8) The qualifying payment amount, if provided with the initial payment or notice of denial of payment, or if the initiating party is a plan or issuer;
(9) If the initiating party is a provider or facility, a statement that the items and services do not qualify for the notice and consent exception described at § 149.410(b) or § 149.420(c) through (i);
(10) A statement that the provider, facility, or provider of air ambulance services was a nonparticipating provider, a nonparticipating emergency facility, or nonparticipating provider of air ambulance services on the date the item or service was furnished;
(11) Attestation that the item or service under dispute is a qualified IDR item or service as defined in paragraph (a)(2)(xi) of this section and is eligible for the Federal IDR process, and the basis for the attestation;
(12) General information listed in the standard notice of IDR initiation developed by the Secretary under paragraph (b)(3) of this section describing the Federal IDR process (including a description of the purpose of the Federal IDR process and key deadlines in the Federal IDR process);
(13) A copy of any remittance advice associated with the initial payment or notice of denial of payment for the item or service; and
(14) Preferred certified IDR entity.
(1) Information sufficient to identify the provider, facility, or provider of air ambulance services, including the name and current contact information (including the legal business name, email address, phone number, and mailing address), and the NPI; and if the non-initiating party is a provider, facility, or provider of air ambulance services, the TIN;
(2) Information sufficient to identify the plan or issuer, including the plan's or issuer's registration number, as required under § 149.530, or an attestation from the non-initiating party that the plan's or issuer's registration number was not provided on any remittance advice associated with the initial payment or notice of denial of payment for the item or service; the legal business name of the plan or issuer (or, in the case of a self-insured group health plan that does not have a legal business name, the legal business name of the plan sponsor), as well as the current contact information (name, email address, phone number, and mailing address) of the plan or issuer as provided with any remittance advice associated with the initial payment or notice of denial of payment; and if the non-initiating party is a plan or issuer, the plan type (for example, self-insured or fully-insured) and TIN (or, in the case of a plan that does not have a TIN, the TIN of the plan sponsor);
(3) The name and contact information (including the legal business name, email address, phone number, TIN, and mailing address) for any third party representing the non-initiating party, and an attestation that the third party has the authority to act on behalf of the party it represents in the Federal IDR process;
(4) Information sufficient to identify each item or service included in the notice of IDR initiation, including the date(s) the item or service was furnished and if the non-initiating party is a provider, facility, or provider of air ambulance services, the date(s) that the provider, facility, or provider of air ambulance services received the initial payment or notice of denial of payment for such item or service from the plan or issuer, and the claim number;
(5) If the non-initiating party is a plan or issuer, a statement as to whether the non-initiating party agrees that the initial payment (including $0 if payment is denied) and the qualifying payment amount reflected in the notice of IDR initiation is accurate for the item or service that is the subject of the dispute, and if not, the initial payment amount (including $0 if payment is denied) and/or qualifying payment amount it believes to be correct, and documentation to support the statement (for example, the remittance advice confirming the qualifying payment amount);
(6) If the non-initiating party is a plan or issuer, the amount of cost sharing imposed for the item or service, if any;
(7) If the non-initiating party is a provider or facility, a statement that the items and services do not qualify for the notice and consent exception described at § 149.410(b) or § 149.420(c) through (i);
(8) For each item or service that is the subject of the dispute, either an attestation that the item or service is a qualified IDR item or service as defined in paragraph (a)(2)(xi) of this section and is eligible for the Federal IDR process, or for each item or service that the non-initiating party asserts is not a qualified IDR item or service that is eligible for the Federal IDR process, an explanation and documentation to support the assertion;
(9) A statement confirming that the remittance advice associated with the initial payment or notice of denial of payment provided by the initiating party under paragraph (b)(2)(ii)(A)(13) of this section is accurate, or, if inaccurate, a copy of the accurate remittance advice associated with the initial payment or notice of denial of payment for the item or service;
(10) A statement as to whether any of the information provided in the notice of IDR initiation is inaccurate and the basis for the statement, as well as any supporting documentation; and
(11) A statement as to whether the non-initiating party agrees or objects to the initiating party's preferred certified IDR entity. If the non-initiating party objects to the initiating party's preferred certified IDR entity, the notice of IDR initiation response must include the name of an alternative preferred certified IDR entity and, if applicable, an explanation of any conflict of interest with the initiating party's preferred certified IDR entity.
(1) Name of the certified IDR entity;
(2) The certified IDR entity number; and
(3) Attestation by both parties, or by the initiating party if the non-initiating party fails to object to the selection of the certified IDR entity, that the selected certified IDR entity meets the requirements of paragraph (c)(1)(ii) of this section.
(2) Information requested by the certified IDR entity relating to the offer.
(3) The following additional information, as applicable—
(i) For providers and facilities, information on the size of the provider's practice or of the facility (if applicable). Specifically, a group of providers must specify whether the providers' practice has fewer than 20 employees, 20 to 50 employees, 51 to 100 employees, 101 to 500 employees, or more than 500 employees. For facilities, the facility must specify whether the facility has 50 or fewer employees, 51 to 100 employees, 101 to 500 employees, or more than 500 employees;
(ii) For providers and facilities, information on the practice specialty or type, respectively (if applicable);
(iii) For plans and issuers, information on the coverage area of the plan or issuer, the relevant geographic region for purposes of the qualifying payment amount, whether the coverage is fully-insured or partially or fully self-insured (or a FEHB carrier if the item or service relates to FEHB plans); and
(iv) The qualifying payment amount for the applicable year for the same or similar item or service as the qualified IDR item or service.
(1) The level of training, experience, and quality and outcomes measurements of the provider or facility that furnished the qualified IDR item or service (such as those endorsed by the consensus-based entity authorized in section 1890 of the Social Security Act).
(2) The market share held by the provider or facility or that of the plan or issuer in the geographic region in which the qualified IDR item or service was provided.
(3) The acuity of the participant, beneficiary, or enrollee receiving the qualified IDR item or service, or the complexity of furnishing the qualified IDR item or service to the participant, beneficiary, or enrollee.
(4) The teaching status, case mix, and scope of services of the facility that furnished the qualified IDR item or service, if applicable.
(5) Demonstration of good faith efforts (or lack thereof) made by the provider or facility or the plan or issuer to enter into network agreements with each other, and, if applicable, contracted rates between the provider or facility, as applicable, and the plan or issuer, as applicable, during the previous 4 plan years.
(2) Conclusion. In this paragraph (c)(4)(iv)(A) (Example 1), the certified IDR entity must consider the qualifying payment amount. The certified IDR entity then must consider the additional information submitted by the nonparticipating emergency facility, provided the information relates to circumstances described in paragraphs (c)(4)(iii)(B) through (D) of this section and relates to the offer for the payment amount for the qualified IDR item or service that is the subject of the payment determination. If the certified IDR entity determines that it is appropriate to give weight to the additional credible information submitted by the nonparticipating emergency facility and that the additional credible information submitted by the facility demonstrates that the facility's offer best represents the value of the qualified IDR item or service, the certified IDR entity should select the facility's offer.
(2) Conclusion. In this paragraph (c)(4)(iv)(B) (Example 2), the certified IDR entity must consider the qualifying payment amount. The certified IDR entity must then consider the additional information submitted by the nonparticipating provider, provided the information relates to circumstances described in paragraphs (c)(4)(iii)(B) through (D) of this section and relates to the offer for the payment amount for the qualified IDR item or service that is the subject of the payment determination. In addition, the certified IDR entity should not give weight to information to the extent it is already accounted for by the qualifying payment amount or other credible information under paragraphs (c)(4)(iii)(B) through (D) of this section. If the certified IDR entity determines that the additional information submitted by the provider is credible but does not relate to the offer for the payment amount for the qualified IDR service that is the subject of the payment determination, and determines that the issuer's offer best represents the value of the qualified IDR service, in the absence of any other credible information that relates to either party's offer, the certified IDR entity should select the issuer's offer.
(2) Conclusion. In this paragraph (c)(4)(iv)(C) (Example 3), the certified IDR entity must consider the qualifying payment amount. The certified IDR entity then must consider the additional information submitted by the parties, but the certified IDR entity should not give weight to information to the extent it is already accounted for by the qualifying payment amount or other credible information under paragraphs (c)(4)(iii)(B) through (D) of this section. If the certified IDR entity determines the additional information on the acuity of the patient and complexity of the service is already accounted for in the calculation of the qualifying payment amount, the certified IDR entity should not give weight to the additional information provided by the provider. If the certified IDR entity determines that the issuer's offer best represents the value of the qualified IDR service, the certified IDR entity should select the issuer's offer.
(2) Conclusion. In this paragraph (c)(4)(iv)(D) (Example 4), the certified IDR entity must consider the qualifying payment amount. The certified IDR entity then must consider the additional information submitted by the parties, but should not give weight to information to the extent it is already accounted for by the qualifying payment amount or other credible information under paragraphs (c)(4)(iii)(B) through (D) of this section. If the certified IDR entity determines that the information submitted by the facility regarding the case mix and scope of services available at the facility includes information that is also accounted for in the information the issuer submitted regarding prior contracted rates, then the certified IDR entity should give weight to that information only once. The certified IDR entity also should not give weight to the same information provided by the nonparticipating emergency facility in relation to any other factor. If the certified IDR entity determines that the issuer's offer best represents the value of the qualified IDR service, the certified IDR entity should select the issuer's offer.
(2) Conclusion. In this paragraph (c)(4)(iv)(E) (Example 5), the certified IDR entity must consider the qualifying payment amount, which is based on the downcoded service code. The certified IDR entity then must consider whether to give weight to additional information submitted by the parties. If the certified IDR entity determines that the additional credible information submitted by the provider demonstrates that the nonparticipating provider's offer, which is equal to the qualifying payment amount for the service code that the provider billed, best represents the value of the qualified IDR service, the certified IDR entity should select the nonparticipating provider's offer.
(1) Is binding upon the parties, in the absence of fraud or evidence of intentional misrepresentation of material facts presented to the certified IDR entity regarding the claim; and
(2) Is not subject to judicial review, except in a case described in any of paragraphs (1) through (4) of section 10(a) of title 9, United States Code.
(1) The certified IDR entity's required duties described in this section; and
(2) Functions related to carrying out additional obligations as may be required under applicable Federal or State laws or regulations.
(2) The certified IDR entity must protect against any reasonably anticipated threats or hazards to the security of this information;
(3) The certified IDR entity must ensure that IIHI is securely destroyed or disposed of in an appropriate and reasonable manner 6 years from either the date of its creation or the first date on which the certified IDR entity had access to it, whichever is earlier.
(4) The certified IDR entity must implement policies and procedures to prevent, detect, contain, and correct security violations in the event of a breach of IIHI;
(1) Breaches treated as discovered. For purposes of this paragraph (e)(2)(v)(C), a breach shall be treated as discovered by a certified IDR entity as of the first day on which the breach is known to the certified IDR entity or, by exercising reasonable diligence, would have been known to the certified IDR entity. A certified IDR entity shall be deemed to have knowledge of a breach if the breach is known, or by exercising reasonable diligence would have been known, to any person, other than the person committing the breach, who is an employee, officer, or other agent of the certified IDR entity;
(2) Timing of notification. A certified IDR entity must provide the notification required by this paragraph (e)(2)(v)(C) without unreasonable delay and in no case later than 60 calendar days after discovery of a breach.
(3) Content of notification. The notification required by this paragraph (e)(2)(v)(C) must include, to the extent possible:
(i) The identification of each individual whose unsecured IIHI has been, or is reasonably believed by the certified IDR entity to have been, subject to the breach;
(ii) A brief description of what happened, including the date of the breach and the date of the discovery of the breach, to the extent known;
(iii) A description of the types of unsecured IIHI that were involved in the breach (for example whether full name, social security number, date of birth, home address, account number, diagnosis, disability code, or other types of information were involved);
(iv) A brief description of what the certified IDR entity involved is doing to investigate the breach, to mitigate harm to the affected parties, and to protect against any further breaches; and
(v) Contact procedures for individuals to ask questions or learn additional information, which must include a toll-free telephone number, email address, website, or postal address.
(4) Method for providing notification. A certified IDR entity must submit the notification required by this paragraph (e)(2)(v)(C) in written form (in clear and understandable language) either on paper or electronically through the Federal IDR portal or electronic mail.
(1) The fixed fee the certified IDR entity or IDR entity seeking certification believes is appropriate for the certified IDR entity or IDR entity seeking certification to charge;
(2) A description of the circumstances that require the alternative fixed fee, or that require a change to the fixed fee during the calendar year, as applicable; and
(3) A detailed description that reasonably explains how the alternative fixed fee or the change to the fixed fee during the calendar year, as applicable, will be used to mitigate the effects of those circumstances.
(1) Submission of offers. The parties must submit their offers and certified IDR entity fees to the certified IDR entity not later than 10 business days after the qualified IDR items and services are determined eligible as described in paragraph (c)(2) of this section.
(2) Payment determination. The certified IDR entity must make the payment determination and provide notification of the payment determination to the parties not later than 30 business days after the qualified IDR items and services are determined eligible as described in paragraph (c)(2) of this section.
Notes, amendments, and revision history
Amendments
[86 FR 56124, Oct. 7, 2021, as amended at 87 FR 52652, Aug. 26, 2022; 88 FR 88525, Dec. 21, 2023; 89 FR 4548, Jan. 24, 2024; 91 FR 34070, June 4, 2026]
Source
Source: 86 FR 56124, Oct. 7, 2021, unless otherwise noted.
Authority
Authority: 42 U.S.C. 300gg-92 and 300gg-111 through 300gg-139, as amended.
Source
Source: 86 FR 36970, July 13, 2021, unless otherwise noted.
Amendments
[86 FR 56124, Oct. 7, 2021, as amended at 87 FR 52652, Aug. 26, 2022; 88 FR 88525, Dec. 21, 2023; 89 FR 4548, Jan. 24, 2024; 91 FR 34070, June 4, 2026]