Author: Clix Webmaster

← Back to All Podcasts

Highlights of this episode include:

• What is this webinar about?
• Who will be joining Kristin on the webinar
• Key takeaways
• What this series about
• Who can benefit from this webinar

Kelly Wisness: Hi, this is Kelly Wisness. We’re pleased to welcome back Kristin DeGroat, Besler Holdings’ Chief Legal Officer. In this episode, Kristin will provide us with a glimpse into Besler Holdings’ next webinar in its Medicare Cost Report Appeals & Reopenings Series, Medicare Cost Report Appeals and Reopenings: Commonly Appealed Issues: A Deep Dive, live on Wednesday, June 17, at 1 PM Eastern Time. Welcome back and thank you for joining us, Kristin.

Kristin DeGroat: Thank you for having me again. I appreciate it.

Kelly: All right. Well, let’s go ahead and jump in. So would you please tell us a little bit about this webinar?

Kristin: Well, as you mentioned, it is the second webinar in the series on cost report appeals and reopenings. And we’re really going to focus on the appeals side and the commonly appealed issues before the Provider Reimbursement Review Board. So hopefully, we kind of gave a little bit of a glimpse into what we were going to talk about in the other webinar. So hopefully, everyone coming will be ready to take that deep dive.

Kelly: Awesome. Yeah. Sounds like it’s going to be a great webinar. And you have some guests joining you on this webinar. Can you tell us a little bit about the people that will be joining you?

Kristin: I do. I have Leslie Goldsmith and Page Smith from Bass, Berry & Sims joining me. And we have done some webinars in the past together. We complement each other really well. Both Page and Leslie have an extensive background in appeals, both at the Provider Reimbursement Review Board level, the administrative level, and the court level. So, they are ready to help me kind of dive into the issues. And where they have more expertise in the area, they’ll be able to lend you their thoughts as to the status of those issues and kind of where we approach it from a legal standpoint and more of a cost reporting standpoint. So, I think together, it’s going to be a great webinar.

Kelly: I agree. I’m really looking forward to hearing you all kind of come together and complementing one another. Please share what you think some of the key takeaways will be from this webinar.

Kristin: Greatest thing will be not only an insight into what exactly the issue is that’s been appealed and determining, “Well, is this something that would apply to me, to my hospital? Are there others out there with the same issue?” and then also where it is today. Where is the issue? Are we still waiting on a decision at the Provider Reimbursement Review Board, or are we waiting on a hearing decision? And where we are in court, are these issues there? Are we expanding the ideas behind these appeals? All those insights that a provider who may not have an outside consultant or an outside lawyer that’s privy to the ongoings– I think it’s going to be a great webinar to dive into that.

Kelly: Right. I totally agree. Can you tell us a little bit more about this webinar series? The first one that we had, last month. We’re going to have another one in July. Can you just tell us a little bit about why the series came about?

Kristin: The series is really focusing on the cost report and more an appeals focus, although a lot of the issues that we appeal can also be reopening issues. And kind of the goal is once we appeal it, if we get a favorable decision, it tends to lead to the issue being more of a reopening issue and getting providers that reimbursement a little bit quicker than the appeals process tends to take. But we’re looking at it high level. We started with, “Well, what is the board? And why do we appeal? And what are the processes behind filing those appeals? And how they differ from reopenings.” But then we’re now going to move into really the meat: not only the why, but here’s what we appeal. And the status of that leading to providers having a better understanding of what might be available to them out there that are– maybe there’s other groups, they’re not comfortable doing it on their own and they want to join a group. Well, then they can see, “Okay, well, where do I fall in that? Is there opportunities for me to join that?” I think that’s really the biggest thing. And then we’re going to end kind of on a best practices from all parts and parcels, not only from the board itself, but maybe how to file the issue. Maybe there’s ways to tailor it a little bit better. So, the best practices, I think, is a great way to end the webinar. And I’m hoping that all of them together, that the people attending will be able to avail themselves of all three together, because I just think it’s a great series to help figure out, again, what do I appeal and where am I at in this process?

Kelly: Right. No, I think it’s going to be a great webinar series. Looking forward to this one and the next one. And you mentioned the people who are going to be watching this. What is the target audience for this webinar series?

Kristin: So, it really is what I call on the front lines. Those people preparing the cost reports, attending the audits, and whether it be a desk review, and then there’s a final review, final review meeting, that’s probably the front line. But we also have to have those who make the decisions, who decide, “Okay, my reimbursement manager has told me, this is an issue I need to tackle, something I need to handle. Why?” So those decision makers, the CFOs, maybe even the corporate reimbursement directors, maybe even up to the CEO, whoever’s making those decisions and really needing to understand why we have the process. And then, of course, the what. So, I think at all aspects. And then maybe if there’s documentation required – which, quite frankly, there is – maybe getting the patient financial or accounting, or whoever does the data, who would handle the data requests and the data needed to pursue these appeals. So, I think it really spreads across the organization. And so, I think those people attending really would have the best full, complete picture of the process.

Kelly: Right. No, that makes a lot of sense. Well, thank you so much for joining us, Kristin, and for giving us this glimpse into Besler Holdings’ free webinar, Medicare Cost Report Appeals and Reopenings: Commonly Appealed Issues–A Deep Dive. Join us live on Wednesday, June 17, at 1 PM Eastern Time. And as a bonus, you can also earn CPE. Thanks again, Kristin.

Kristin: Thank you.

Kelly: And thank you all for joining us for this episode of The Hospital Finance Podcast. Until next time…

[music] This concludes today’s episode of The Hospital Finance Podcast. For show notes and additional resources to help you protect and enhance revenue at your hospital, visit besler.holdings/podcasts. The Hospital Finance Podcast is a production of Besler Holdings.

If you have a topic that you’d like us to discuss on The Hospital Finance Podcast or if you’d like to be a guest, drop us a line at update@besler.com.

---

---

← Back to All Podcasts

Highlights of this episode include:

• What is this webinar about?
• Who would benefit most from this webinar and why?
• Key takeaways
• Best practices

Kelly Wisness: Hi, this is Kelly Wisness. We’re pleased to welcome back Kristin DeGroat, Besler Holdings’ Chief Legal Officer. In this episode, Kristin will provide us with a glimpse into Besler Holdings’ first webinar, Medicare Cost Report Appeals and Reopenings: What You Need to Know, live on Wednesday, May 13, at 1 PM Eastern Time. This is our first in our Medicare Cost Report Appeals and Reopenings Series.

Welcome back and thank you for joining us, Kristin.

Kristin DeGroat: Well, thank you for having me back.

Kelly: Well, let’s go ahead and jump in today. So can you tell us what’s this webinar about?

Kristin: So, we’re going to talk about the Provider Reimbursement Review Board, at least a background of that. And then we’re really going to focus on what you need to do to preserve your appeal rights as well as your reopening rights, which are different and are handled differently. And we’ll get into a little bit of the differences and provide some best practices.

Kelly: Awesome. Sounds like it’s going to be a great webinar. So, who would benefit most from this webinar and why?

Kristin: So, most people immediately think, “Oh, this is just for reimbursement people.” But actually, people in patient financial services, even executives that maybe don’t deal with the cost report and appeals and reopenings and really don’t get into the depth. But there are data elements that we need, which usually come from patient financial services. There are cost report elements needed. And again, you need the buy-in at the top so that they understand what it takes and maybe the costs associated with filing appeals and/or reopenings.

Kelly: Well, that makes a lot of sense. So, what will be some of the key takeaways from the webinar?

Kristin: So, the key takeaway, I think, really will be, “I can have an appeal that preserves my rights, and I can have a reopening at the same time.” Most people don’t realize that. And so, I think that’s beneficial where it’s an issue that can be settled. So, the problem we’ve got with the board, right, in filing appeals is that they often take a number of years. And so, the reopening may be the faster route, not always, but maybe the faster route to getting the dollars.

Kelly: That makes sense. And yeah, I didn’t know that you could do an appeal and a reopening at the same time, so I’m sure others don’t know that as well. So, what best practices do you have for those going through an appeal or reopening?

Kristin: So don’t take any chances. Don’t just assume you’re going to be able to appeal or reopen. You need to understand the specifics of those rules and how they apply to your cost report. Protest, protest, protest, protest, that is the key. And again, file your reopenings, even if you have an appeal.

Kelly: Those are some great best practices. Thanks for sharing those with us. So why is having an external partner important for this very complex and often long process?

Kristin: The change in rules between the cost report rules, the reopening rules, the board’s rules. There are many pitfalls. And if you don’t understand how they fit together, you could lose your right to appeal or reopen. So, you’ve got to understand how that comes together. And having an external partner that focuses on the rules, the changes, ensuring that everything is filed properly, that you have the right tools to ensure that your appeal rights are protected.

Kelly: No, that makes a lot of sense. Sounds like finding the right partner is important for this process. Well, thank you–

Kristin: Definitely.

Kelly: Yeah, so thank you so much for joining us, Kristin, and for giving us this glimpse into Besler Holdings’ free webinar, Medicare Cost Report Appeals and Reopenings: What You Need to Know.  Join us live on Wednesday, May 13^th, at 1 PM Eastern Time. And as a bonus, you can also earn CPE. Thanks again, Kristen.

Kristin: You’re welcome. Looking forward to seeing everyone Wednesday.

Kelly: Sounds great. And thank you all for joining us for this episode of the Hospital Finance Podcast. Until next time…

[music] This concludes today’s episode of The Hospital Finance Podcast. For show notes and additional resources to help you protect and enhance revenue at your hospital, visit besler.holdings/podcasts. The Hospital Finance Podcast is a production of Besler Holdings.

If you have a topic that you’d like us to discuss on The Hospital Finance Podcast or if you’d like to be a guest, drop us a line at update@besler.com.

---

---

← Back to All Podcasts

Highlights of this episode include:

• What is a medical virtual assistant?
• Where do hospitals typically see the most meaningful cost savings or efficiency gains when using the medical VAs?
• How GMVA ensures medical virtual assistance remain fully HIPAA-compliant and safeguard patient information while working remotely
• How the virtual assistant model scale for larger hospital systems or multi-facility organizations compared to smaller practices
• Where’s the best place to start to ensure long-term ROI?
• What other hospital departments are a good fit for medical virtual assistance?

Kelly Wisness: Hi, this is Kelly Wisness. Welcome back to the award-winning Hospital Finance Podcast. We’re pleased to welcome Beth Raboin. Beth is leading GMVA in vision in the day-to-day business operations securing the functionality of the business to drive extensive and sustainable growth. Combining her strong leadership and determination with over 22 years of corporate experience in the private and public sector of surgical device, pharmaceutical, and specialty pharmacy industries, she keeps the company moving forward with high-level strategy while understanding the details of day-to-day execution to ensure steadfast success.

Prior to Beth’s corporate and entrepreneur experience, she competed as a full athletic scholarship athlete as a Division 1 gymnast at the University of Florida, where she graduated with a Bachelor of Science in Health Sciences.

In this episode, we’re discussing using tech to boost patient care and streamline operations. Welcome, and thank you for joining us, Beth.

Beth Raboin: Oh, thank you so much for having me, Kelly. I’m so excited to be here.

Kelly: We’re excited to have you. So, let’s go ahead and jump in. So, for listeners who may be newer to the concept, what exactly is a medical virtual assistant? And how do they differ from traditional outsourcing models?

Beth: Yeah, oh thank you so much. Starting with a big question there, Kelly. So, first of all, medical virtual assistants are additional staff that you can bring into your hospital or medical practice to help facilitate some of the back office work that needs to happen. So, we do not do clinical care. Medical virtual assistants do all of the clerical and/or administrative patient care that happens behind the scenes. So that’s the differentiator between your typical in-hospital setting versus bringing in a medical virtual assistant. And how we’re different from other models is you’re not outsourcing. You’re not sending and outsourcing all of the work elsewhere. That’s not how it works. We are actually more like an insource. We’re additional staffing that’s brought into your medical practice and/or hospital to do the work that needs to get done within your tools, within your systems, within your workflows. And so, we’re actually integrated as part of the team.

Kelly: I love that. It’s so intriguing. From a financial standpoint, where do hospitals typically see the most meaningful cost savings or efficiency gains when using the medical VAs?

Beth: Oh, gosh. Well, so we’re a fraction of the cost of what it would be to hire someone here in– within the hospital system within the United States. We are outside of the United States, so we’re mainly in the Philippines where the cost of living is lower. So therefore, the cost structure for our business model is also lower. And where they can utilize our services is just, it’s endless. Where we’re seeing where we’re a huge asset– for example, we just were onboarded this past year with a huge healthcare hospital system on the West Coast. They brought us just in to do patient access to fill in some open appointments, making sure patients are going to show up to their appointments, and then backfilling the appointments within the schedule that those patients were not going to show up to. And they saw an immediate, an immediate, I think it was like $2 or $3 million difference in their bottom line just within two quarters. So that’s just one simple example. We’ve also been brought in heavily within the hospital systems, within revenue cycle management. Collecting dollars is critical for hospital systems, making sure that denied claims are in fact paid. And so the resubmittal of claims, following up on denied claims, making sure that patient balances are paid, all of that. So that also is a really big– a really great place to be able to bring in our staff to help and augment the way things are being done within that hospital.

Kelly: Wow, I mean, so some significant savings there. That’s awesome. So how does GMVA ensure medical virtual assistance remain fully HIPAA-compliant and safeguard patient information while working remotely?

Beth: Yeah, well, so there’s a few different ways we do that. Number one, we’re hiring professionals, right? We’re hiring people who have a bachelor’s degree, a bachelor’s degree, typically in nursing. They understand healthcare. They understand HIPAA and PHI. And so, they’re put through obviously a HIPAA certification class, so they’re HIPAA-certified, but that’s not enough. That’s just not enough to ensure patient information is– it’s just not enough to make sure patient information is protected, right? So, we put in additional safeguards and everyone works remotely, they’re not working within a call center, they’re working from their home. So, we’ve put additional software security on their computer systems to make sure that they’ve got a closed network that they’re working within. So, they’re logging directly into the client’s EMRs, directly into the client’s tools, and we need to make sure that there’s no nefarious actors or viruses are able to penetrate the system. So, we’ve got a pretty substantial, what we call a blue box on their computer, and they’re working within the safeguards of that system. It’s amazing. It’s been one of the things that we heavily invested in just to ensure that we’re protecting patient information. But beyond that, we’re also protecting the tools of our clients because we all know that viruses and/or nefarious actors are working consistently to try to break into hospital systems, break into hospitality, break into banks, and any possible way that they can try to penetrate a closed off system. So, we do everything within our power to make sure that we’re keeping patient information protected.

Kelly: Yeah, I know HIPAA compliance is so important. And for lack of a better term, it’s an epidemic that we’re just kind of hitting. We’re being hit with all these bad actors all the time. So, it’s just a constant issue, isn’t it?

Beth: Oh, constantly. So, I mean, we’re all getting them even into our private email addresses, work email addresses, people sending over what you think looks like a real invoice, but it’s not a real invoice. You click on it, before you know, you’re in trouble. So yeah, we’re trying to do the absolute best we can to keep up to date on protecting any and all software that we’re logging into.

Kelly: Definitely, yeah. So how does the virtual assistant model scale for larger hospital systems or multi-facility organizations compared to smaller practices?

Beth: Yeah, I mean, the scaling is one of the things that we’ve really become a specialist in. What we do is the onboarding of our services can be– that’s where you have more skin in the game, and there’s a good six to eight weeks of training us on your tools, your systems, your strategies, your service level agreements that we work out with you. That’s where really that’s some of the hurdles you need to get over in the beginning. Once we do that, we have all the training materials necessary to then scale with you, so your team is no longer having to do the training, right? So, scaling has really been one of the wonderful things that we can do really quickly and efficiently. And hospital systems for sure– like I said, I had mentioned one particular hospital system. We had another hospital system we also started with last year that just wanted to start with 10 medical virtual assistants. And within a month’s time, they were like, “Wow, this is really working out amazing.” And they’ve already scaled up over 75. And so we’re able to be able to do that for them and really kind of keep up with the pace of what’s necessary and intending to bring in really great talent to be able to do and meet the service level agreements that we’ve come up with along with our client to make sure that we’re bringing nothing but the best in terms of patient service. So yeah, it’s been an interesting, fun business model. I love the scaling piece of it. It’s one of the things that we’ve I’m really great at. And it is different for a large practice or a large medical system versus a smaller practice. Smaller practices, they just don’t see the huge patient volume that a large system would see. And so, but we can still manage and handhold them through bringing on one, two, three virtual assistants. But in a hospital system, we can bring in 25, 50, 75, 150 virtual assistants and scale and keep them and manage them.

Kelly: Yeah, that sounds pretty awesome. I mean, I love what you said about scaling with you. That seems like something that you got that is very valuable. So, for a CFO or revenue cycle leader considering medical virtual assistance for the first time, where’s the best place to start to ensure long-term ROI?

Beth: Yeah. I mean, of course, one of the first places you would want to start– any one of us would want to start is where we can make an immediate impact to the bottom line, so whether that’s patient balances, whether that’s following up on denied claims, whether it’s submittal of claims. As we become more and more infiltrated into some of the hospital systems, we’re learning that there’s large amounts of balances that are still not on the balance sheet, that just have not been paid to the bottom line yet. That’s where we can make an immediate impact. How we are different than other outsourced companies is we don’t take a fee for that. That’s not how we function. We don’t get a percentage of what is collected. That’s just not what we do. We are additional staffing. We are butts in seats to do the actual work. And so that also is a really great benefit to the hospital or medical system because then they’re not losing part of that revenue to an outside source. And so that also is an additional part of the way we function in terms of bringing an additional asset to the team without getting a part of what those payouts would look like or a percentage of those fees.

Kelly: That sounds pretty awesome. Beyond those revenue cycle teams, what other hospital departments are a good fit for medical virtual assistance?

Beth: Most definitely anything within specialties. Specialties are really where we shine. We have extensive training internally for particular specialties. So, our medical virtual assistants are very well versed in the types of procedures that they’re going through, whether it’s in neurology or it’s the cardiac unit or it’s in the fertility space. We become quite versed in being able to have those conversations with patients or internally with the existing staff, knowing the medical terminology is there. We understand the patient journey. We understand the procedures that are taking place. We understand the medications that the patients are being given. So, when it comes to be doing prior authorizations for patient medication or prior authorizations for getting diagnostic care or getting the procedures done, we can do all of that. So, we really fit really nicely in every piece of the model within revenue cycle management, if you include prior auths and insurance verification as part of that journey. We can do all of that. But patient facing, patient access is also something we’re really, really fantastic, and we have a great fit within models of the patient access.

Kelly: Yeah, that makes a lot of sense. Well, thank you so much, Beth, for sharing your insights with us on using tech to boost patient care and streamline operations. If a listener wants to learn more or contact you to discuss this topic further, how best can they do that?

Beth: Yeah, we’d love you. Just go right to our website. You can find so much information. So, it’s https://gmva.com/, and that’s Global Medical Virtual Assistants dot com. And we’ve got voice recordings there of what our virtual assistants sound like. We have podcasts like yours, Kelly, will be on there kind of listening to hear what we’ve done or what we do, as well as a whole host of other resources, and also a way to be able to quickly schedule a strategy session to have a meeting with us and have a Zoom call with us to get a better understanding of how we can fit into your model.

Kelly: Great. Well, thank you for providing that for us, Beth. And thank you all for joining us for this episode of The Hospital Finance Podcast. Until next time…

[music] This concludes today’s episode of The Hospital Finance Podcast. For show notes and additional resources to help you protect and enhance revenue at your hospital, visit besler.holdings/podcasts. The Hospital Finance Podcast is a production of Besler Holdings.

If you have a topic that you’d like us to discuss on The Hospital Finance Podcast or if you’d like to be a guest, drop us a line at update@besler.com.

---

---

← Back to All Podcasts

Highlights of this episode include:

• How the reduction in ACA enrollment numbers are affecting out-of-pocket payments
• How should providers prepare for this change in coverage
• Long-term projections

Kelly Wisness: Hi, this is Kelly Wisness. Welcome back to the award-winning Hospital Finance Podcast. We’re pleased to welcome Vrajesh Bhavsar. VJ is an engineer with a Master’s in Computer Science from USC and over 20 years of experience building hardware and software products. VJ built core technologies for iOS and Mac OS, including dynamic tracing, data protection, and secure enclave at Apple. He holds eight patents in distributed systems, data, and security. He is passionate about building technology-first businesses that drive positive human impact at scale.

In this episode, we’re discussing the AI security blind spot that healthcare can’t afford to ignore. Welcome, and thank you for joining us, VJ.

Vrajesh Bhavsar: Hey, thank you for having me.

Kelly: Well, let’s go ahead and jump in. So, AI is being deployed across healthcare at a remarkable pace. From a cybersecurity standpoint, what’s the risk that most hospital leaders still don’t fully appreciate?

VJ: That’s a great question. And it’s such an exciting time that we are living in. There are so many new innovations coming to the entire space. And the impact of AI in so many different areas gets really exciting for a lot of industries where this kind of innovation is needed. And, of course, healthcare has so many different areas where AI can be applied, but also there are a lot of risks that come in when you are exposing this kind of critical area of safety and care to this kind of new innovation. And so the big risks that we see in a lot of interactions we are having is how when you have a lot of kind of new innovation getting sprinkled across use cases and areas where you didn’t really understand the full scope and things are operating without a lot of visibility, especially in the deep areas where sensitive data is in question and you have patient information as well as ways that a lot of the third party systems are going to interface with these things. That’s where there are so many risks that it’s not fully understood and appreciated.

And the thing that really gets people is that we are used to kind of operating with these innovative systems in kind of traditional systematic ways, that A plus B results in something. But in the world of non-determinism, where there are a lot of new attacks coming in, the level of risk really, really goes to the roof. And the kind of attacks that have come through in terms of prompt injection or zero-click, and a lot of things that have been reported across the industry, and we have done some of the work ourselves. It really throws people back into like, “Oh, wow, I didn’t realize that this can really exfiltrate the data at such scale and such speed.” And the level of protections and defenses that people had through traditional tools are now out of question.

Kelly: Yeah, it’s definitely an interesting time in healthcare and AI, and there’s a lot to consider there. You recently discovered a zero-click vulnerability that can silently extract complete patient records without leaving a trace. What does that mean in plain terms, and why is it a signal of a much larger industry problem?

VJ: That’s a very interesting question. And I think as an industry, we have been trying to get everyone to kind of understand that, “Hey, don’t respond to random emails, don’t share credentials, don’t go chase random links and all that, right? But what’s happening in the world of AI is that without users taking any of such risky actions, now you can have a massive exposure and that’s what zero click refers to. And what we discovered is that a lot of these AI systems as they are interfacing with so many different data sources and all the records and all that, they can actually go take the credentials and access that you have given them and try to be helpful in ways that can actually result in data exfiltration and leakage at a massive scale. And so, what we are finding is there are the kind of attacks that come through in AI systems that are prompt injection or jailbreak attempts. And those things are getting embedded in documents, in ways that are invisible to the human eye, but those instructions mean a lot to what an AI system or an agent bot is going to do.

And that’s where, now, you are bringing– you have so many, so much intelligence baked into these AI stacks that they are trying to be super helpful and trying to kind of take all these instructions that are embedded and the users didn’t do anything wrong, but this is where some of the attacks that are coming through. Some of the ones that we have discovered and the industry has discovered, even Anthropic reported several different types of attacks. And there is a lot of education needed in the industry to really kind of understand the scale and scope of what these intelligent, non-deterministic systems bring in these critical environments.

Kelly: Completely agree. There’s definitely a lot of education required for us. VJ, HIPAA was built for predictable human-reviewed workflows. How does autonomous AI fundamentally challenge the compliance model healthcare has spent decades building?

VJ: I know. This is where we are really passionate about like there is so much to be done, and I know HIPAA is trying to catch up on a lot of the new innovation. But at the end of the day, there is kind of like an inert way in which HIPAA assumes there are human accountability layers behind all the different decisions that are getting made. And I think that’s the thing that gets thrown out the window when you bring in agentic AI. And in these environments where you are passing responsibility, you’re passing autonomy, you’re passing decision-making capabilities to agents and at a speed of machine speed at which you can access so many different systems all at once and try to be helpful. That’s where there is no mechanism in place to even understand what these systems are trying to do. And beyond understanding, you need to actually govern and bring controls into these environments, right? And I think that’s kind of the core to a lot of the challenges and what we refer to it as runtime visibility and runtime controls.

And when these agents are getting born and they are trying to figure out, like, “Okay, what are the instructions given to me?” And I’m going to try to make sense of that. I’m trying to access the systems that are available to me, and sometimes they overreach. And that’s when these breaches happen. That’s when, kind of, unexpected consequences happen. That’s when you end up with a non-compliant system. So, I think there is a lot to be done. I think the industry was still just catching up on what was happening in the world of microservices and all the API ecosystem. And now we have leaped directly into agentic environments. And I think that requires a full depth understanding of what all things are happening to stay compliant.

Kelly: Yeah, there’s definitely a lot of things happening right now, and I know HIPAA complicates things as well. So why do traditional security tools struggle to keep pace with the way AI actually moves data inside a health system?

VJ: Yeah, this is where we have gone through such massive waves in the last 30, 40, 50 years, right? And AI agents, and that’s a big, big one, that is going to completely change how security tooling and security requirements would work. But as you think about when cloud came about, there was a very bare bones kind of understanding of, okay, how am I protecting different network systems and databases? And this is very, very early on when you had your data centers, and firewalls came about to actually stop access to different parts of the data system, where different parts of the data center where you might have databases or critical data that you want to protect from different attacks. And over the years, we had usage of mobile and now usage of APIs, and there are so many different technologies have come into play, and you need a different approach for all these different technology adoptions that are going on.

And so, as you think about what is happening in the layers of APIs, in the layers of AI, in the layers of agent, you kind of need a very different AI layer firewall, right? The traditional things that used to be at the network layer, just trying to make sure that computer A doesn’t talk to computer B, it now needs to translate in the way that, hey, agent A cannot talk to agent B or agent A cannot talk to the patient record systems, or it needs to get permission from a human before it does that. And all those things are happening at such scale. We see so many stats about thousands of agents running and doing all these things every day in every enterprise. And so, when such speed and scale is at play, you’re going to need a different tool, a different system to tackle these systems, and it cannot be just a manual process. That’s kind of where a lot of the traditional tools fall apart because they relied on kind of checking the external boundaries, but they don’t know what is going on inside these environments. The tools used to be, oh, I’m going to scan code and try to make sure there is no threat lurking inside.

But when the code is being generated in real time by these agents, they’re coming up with new API endpoints on their own. They’re coming up with MCP servers on their own. And so, what do you do when this new code is getting generated on the fly? What do you do when intent and instructions can drift and can change over time? And that’s where you need something that is understanding what kind of actions are going on and make sure that you’re going to stay compliant as well as not bring more threats and risks into your system.

Kelly: Makes a lot of sense. Thanks for explaining all that for us. Beyond regulatory exposure, what’s the real financial and reputational cost when a healthcare AI deployment goes wrong? And is the industry pricing that risk correctly?

VJ: Look, there are a lot of people trying to understand a lot around pricing the risk and what to do in care of the benefits and kind of threats that come through. And I feel like we’ll learn a lot over the coming couple of years that how this translates in practical life, but definitely there’s a big shift needed, right? With the scale at which these agents can access the number of records, that’s really scary to be honest. There are different types of compliance rules and regulations around like, “Hey, XYZ number of records breached results in XYZ kind of fine.” Well, but also when you have the loss of trust, let’s say patients were trusting some EHR system or some hospitals and other systems with their private information that now suddenly when you have a massive scale breach, that trust is lost, there will be a lot of questions around like, well, do I want to be passing on all my data to the system that has a lot of security risks. But beyond that, there were a year or two ago, a couple of years ago now, where there was a massive outage at airports and airlines where some cybersecurity vendor was not able to deploy things properly.

And those type of operational risks that come in that can really bring down some of these systems and healthcare being such a critical infrastructure requires a level of kind of risk analysis before you put in AI into these environments where if something goes wrong, it can terribly, terribly bring down the entire infrastructure. And I mean, I think those things are obviously questions that a lot of the leaders are thinking through. A lot of the security teams that we talk to, the legal, financial teams that we interface with. And so those are things that are still kind of in flux and hopefully we’ll find ways to keep bringing innovation while also kind of bringing in the right guardrails and safety measures along the way.

Kelly: Yeah, no, definitely agree with all that. And what you were talking about, the lost trust really resonated with me because it seems like once that trust is lost, it’s hard to regain. VJ, for a CCO or Chief Compliance Officer who has already deployed AI across their organization, what are the first steps they should take to understand their actual exposure?

VJ: There’s a classic saying: You can’t secure what you can’t see, right? And I think in the world of AI and agents and APIs, I think a lot of leaders are realizing that discovery means a completely different thing at this point. A lot of teams have had engineering observability tools or some form of access visibility and all that. But I think what we are seeing is that as teams try to understand like, “What is going on? Okay. My teams have already deployed all this AI. They are using all these AI tools, or they have deployed agents in certain ways. Just getting visibility into what’s going on. That’s where everyone has to start.”

And being able to do that in all these different use cases and areas, so whether it’s employees using AI clients and talking to different AI systems and trying to, whether it’s private or public kind of exposure, there is a lot to be done in just understanding that exposure. When you have your EHR information or EHR systems as well as your other cloud environments, whether they are running on hybrid, private, there are a lot of different systems. People have to start with what are the AI models running? What are the agents running? And we’ve come across teams that feel like, “Oh, yeah, I have XYZ tool that gives me AI, SPM, and I know the five models that I’m running.” And when we actually go show them like, well, actually it’s not five. It’s like 97.

That really shocks people. And that type of sprawl has happened so fast in the last year or two that getting access to the telemetry that gives you that type of visibility, it’s something that is actually available, right? It’s such a daunting task to know what is going to come through. With kind of full visibility, we call it discovery. We talk about getting the right telemetry from the layers at which AI operates, layers at which agents talk to different agents and systems over APIs and MCPs. And if the leaders are uncomfortable kind of knowing like, “Do I really know how many things are running?” and that’s kind of the big gap that you have to start closing, and from there, you can set up the right processes around detecting the risks and then defending and controlling and governing all these different systems that are in your purview.

Kelly: Well, thank you so much for providing all that great information and for sharing your insights with us, VJ, on the AI security blind spot that healthcare can’t afford to ignore. If a listener wants to learn more, contact you to discuss this topic further, how best can they do that?

VJ: You can reach us on our website, operant.ai, and I’m also reachable on email directly, vrajesh@operant.ai. Thank you so much.

Kelly: Awesome. Thank you for providing that. And thank you all for joining us for this episode of The Hospital Finance Podcast. Until next time…

[music] This concludes today’s episode of The Hospital Finance Podcast. For show notes and additional resources to help you protect and enhance revenue at your hospital, visit besler.holdings/podcasts. The Hospital Finance Podcast is a production of Besler Holdings.

If you have a topic that you’d like us to discuss on The Hospital Finance Podcast or if you’d like to be a guest, drop us a line at update@besler.com.

---

---

← Back to All Podcasts

Highlights of this episode include:

• Current challenges impacting prior authorization workflows today
• What impact data quality has on prior authorization
• How the CMS Interoperability and Prior Authorization Final Rule will impact how teams exchange and structure data
• How data quality impacts a hospital’s bottom line

Kelly Wisness: Hi, this is Kelly Wisness. Welcome back to the award-winning Hospital Finance Podcast.  We’re pleased to welcome Shobha Phansalkar, PhD, FAMIA. Shobha is the Vice President of Client Solutions and Innovation for Wolters Kluwer Health Language, where she leverages her extensive expertise in medical informatics to drive impactful solutions that address challenges in semantic interoperability and enhance healthcare data quality. Shobha has been in the healthcare information technology field in industry and academia for more than 20 years. She is an internationally recognized thought leader in the field of clinical decision support and a fellow of the American Medical Informatics Association. In addition to her roles in the industry, she has published more than 50 peer-reviewed articles and book chapters on CDS and led research for the Agency for Healthcare Research and Quality, the U.S. Department of Veterans Affairs, and the Office of the National Coordinator for HIT. She also serves on the editorial board of BMC Informatics and Decision Making. Welcome, and thank you so much for joining us, Shobha.

Shobha Phansalkar: Thanks, Kelly. Pleasure to be here.

Kelly: Great. Well, let’s go ahead and jump in. So, Shobha, please tell us about yourself and your background.

Shobha: For sure. First, thank you for the opportunity, Kelly. Appreciate that. Thank you for that introduction as well. A bit more context on who I am and Health Language, which is a part of Wolters Kluwer Health. So, I’m a clinical informaticist and a pharmacist by background. Over 20 years in the healthcare IT space. I lead Client Solutions and Innovation at Health Language and our customers span the healthcare ecosystem, where we serve payers, providers, life sciences with the ability to improve data quality. And that really is the foundation of the value proposition that we provide our customers with, where we serve as a single source of truth for industry standards, your reference terminologies, but also help them improve the quality of their data by standardizing and normalizing it.

In addition, we serve as the providers of knowledge assets, code groups, value sets that help them power their business rules, as well as their clinical decision support processes.

Kelly: Wonderful. Thank you for sharing that with us. So, Shobha, what are the current challenges impacting prior authorization workflows today?

Shobha: Oh, huge ramifications. And a key time for us to be talking about this. As you know, prior authorization has been front and center in the news this year. It’s unfortunate from many perspectives. But I think because your audience is hospital finance focused, it might make sense for me to share some staggering numbers associated with prior authorization. So just to give you a sense of the magnitude of the problem, right? $11 billion, that’s billion with a B, is spent by providers in prior authorization transactions, purely from an administrative perspective. And if you think about it, that’s time taken away from clinical care. Now, 37% of these transactions are manual, and the cost per transaction is at an average of about $11.

If we were to make that transaction electronic, it actually halves the amount spent, which is at about $5.70. Now, the kicker here is that irrespective of whether it’s a manual or an electronic transaction, a large part of the burden of that cost is taken up by providers. About 70% of that cost is taken up by providers and about 30% by payers. That’s a huge burden on providers. And granted the numbers are large, but the impact that that has in terms of provider burden, a recent survey by the American Medical Association actually showed that 88% of providers felt that PA requirements posed a high or extremely high burden on them. And if you take that thread and think about what that means to patient care, 30% of them said they didn’t even think that the PA requirements were evidence-based. And another third thought that they might actually abandon the care of their patient because of the administrative overhead associated with prior authorization.

So, the reason I’m mentioning this, Kelly, is there is the financial or the cost aspect for it. But there’s also a huge burden that it poses on denied, delayed care for patients, as well as huge burden on providers resulting in provider burnout.

Kelly: Wow. Yeah, those are some significant challenges, Shobha. Thanks for sharing those with us. So, what impact does data quality have on prior authorization and ensuring patients receive coverage for appropriate care?

Shobha: Yeah, great question. I mean, there’s so much that we see in the news about the frustration that members and patients have when they have to deal with prior authorization denials or just the burden of going through the process of requesting prior authorization. But if you think about it, a study shows 30% of these requests get denied. 40% of those are actually related to poor data quality. And that’s where the opportunity is. I mean, I think with all of the huge numbers that we have come to recognize, I think it’s important to recognize where can we make a difference. I think the difference is in making these electronic, in standardizing the data that’s being shared between payers and providers, as well as making sure that the data is of high quality so that patients are able to get their requests approved or receive a reason for what the next step is quickly.

That’s going to fundamentally be made possible by having good data quality that’s exchanged between these systems and making sure that there’s interoperability within that data exchange. What that means, Kelly, is that fundamentally when two systems are talking to each other, they need to use the same language. And a lot of the regulations that are coming through are actually focusing on that. They’re making sure that not only are we exchanging the data in standardized FHIR APIs, but we’re making sure that we call out the terminologies that will populate these FHIR APIs. And that standardization rings right home to what we do at Health Language because we are making sure that we can take that data, we can serve it up as good quality data, not just from validating the terminologies that are used for this data exchange, but also making sure that we are supporting our payer customers in being able to represent that data as high quality data that can then reduce the amount of time for prior authorization requests.

Kelly: Wow. I mean, thank you so much for sharing that. That’s quite the significant impact. So how will the CMS Interoperability and Prior Authorization Final Rule impact how teams exchange and structure data?

Shobha: Yeah. No. Like I said earlier in this conversation, I think our conversation is so timely, right? A lot of good information as well as conversation has happened to support this prior authorization rule. The CMS Final Rule, which is 0057-F, basically mandates the use of FHIR-based APIs and produces transparency around prior authorization. And that’s fundamental, right? Because not only are you imposing deadlines for implementing the FHIR APIs, but you’re also calling for the decision timeframes to be expedited. You’re calling for transparency requirements so that both providers and patients are aware as to whether their request was denied for a certain reason and how they can ameliorate that. So, all of this, I think we’re in a very good place in terms of serving the needs of the problem, which is making sure that we are standardizing the exchange of information, but also accountability so that providers as well as payers can have expedited decision-making for this process.

Kelly: Most definitely. Thank you for sharing that. And how does data quality impact a hospital’s bottom line, especially around prior authorization?

Shobha: Yeah. That’s– it all comes down to making sure that we are making sound financial decisions. I mean, given the market and given that where we are economically as different parts of the healthcare system strive for better bottom lines, I mean, I think data quality directly impacts financial performance. So let me give you an example of that. Recently, we collaborated with MCG Health, a big player in the space of utilization management. And what we were able to show is by creating knowledge assets, which we call value sets in order to power their utilization management engine, they were able to bring down the average amount of time that a utilization management nurse spent in reviewing a request from 20 minutes to 3 minutes. Just think about that. That’s staggering, right?

Just by making sure that we are exchanging data in a standardized way, they were able to bring back the right information about that patient from the EHR, extract it, summarize it, present it back to the utilization management nurse, and that three minutes is 85% faster than the national average. So, think about everything we talked about in terms of the financial burden. That itself was reduced. A $42 million savings annually that MCG Health now has because it’s able to power their rules for decision-making better. And so I tie that back to your question, which is if we can standardize the way we are exchanging information between payers and providers, just like MCG Health example, we would be able to get better data between these entities, whether it’s the provider sending the prior authorization request and knowing at the point of care, “What are the documents or what is the information that I need to provide in order to make sure that I have a successful request submitted to the payer?” And also for the payer to then know, “What’s the documentation that I need in order to make sure that I’m providing the right decision back to the provider?”

So, all of this rings or resonates very closely to what we do at Health Language, and we are very excited for the Prior Authorization Final Rule because it aligns very much with what we consider as the data quality journey for our customers. There’s sort of that threefold impact. You’re making sure that the terminologies that are powering these fire APIs are containing valid codes. You’re making sure that the data quality that’s exchanged between the provider and the payer is good quality data. And then last but not the least is making sure that the rules or the benefits that the payers are sending back to their providers are represented as standard value sets that can then be used to make streamlined decisions on what that prior authorization request should be.

Kelly: Yeah. I mean, data quality is so very important, and I think you kind of proved it with what you just said. Well, thank you so much, Shobha, for sharing your insights with us on where data quality can make or break prior authorization accuracy. We appreciate all your insights.

And if a listener wants to learn more or contact you to discuss this topic further, how best can they do that?

Shobha: Oh, thank you for asking that, Kelly. We are always excited at Health Language to talk to people about what we do. Our website carries a wealth of information, our value proposition, and our offerings to the market. In addition, when you go on the website, you can see that there’s the option to speak to an expert. That’s another way that we can have a conversation. Would love to learn about where we can help.

Kelly: Great, thank you for providing that. And thank you all for joining us for this episode of The Hospital Finance Podcast. Until next time…

[music] This concludes today’s episode of The Hospital Finance Podcast. For show notes and additional resources to help you protect and enhance revenue at your hospital, visit besler.holdings/podcasts. The Hospital Finance Podcast is a production of Besler Holdings.

Given the significant impact quick fixes in data quality infrastructure can have on an organization’s prior authorization infrastructure, Shobha and her team of informatics experts are happy to meet with any of our listeners to review your current data supply chain and evaluate quick wins to accelerate your path to compliance with the prior authorization rule. Schedule a meeting with her. 

Additional Resource: https://www.wolterskluwer.com/en/expert-insights/bridging-the-data-divide-between-payers-and-providers?utm_campaign=core-thought-leadership&utm_medium=referral&utm_source=beslers

If you have a topic that you’d like us to discuss on The Hospital Finance Podcast or if you’d like to be a guest, drop us a line at update@besler.com.

---

---