Healthcare

0 of 4 added

New practice location

A practice address appears on the organisation NPI that was not there before.

Details
Standard cover
Usually excluded
Needs
NPPES NPI Registry, Occupancy & build-out permits
Exposure
Premises liability and contents are scheduled per location, and a med-mal policy names the sites it covers.
Window
NPPES addresses lag opening by weeks to months
Misfires
Providers list billing addresses that are not clinical sites. Check the taxonomy at that address.

First procedural specialty

A surgical or interventional taxonomy is added where the practice held only office-based codes.

Details
Standard cover
Usually excluded
Needs
NPPES NPI Registry
Exposure
Malpractice is rated by specialty class, and office-based surgery sits several classes above consultation.
Window
At taxonomy update, usually before the first procedure
Misfires
A provider can hold a taxonomy they do not practise. Corroborate with a facility or equipment permit.

Appears on the breach portal

The entity is listed on the HHS portal for a breach of 500 or more records.

Details
Standard cover
Usually excluded
Needs
HHS Breach Portal
Exposure
The claim has already happened. What is open is the regulatory tail, and whether the cyber limit covers OCR penalties at all.
Window
Reportable within 60 days of discovery
Misfires
The listing names the covered entity, which may be a business associate rather than the practice.

Named in a breach notification

A state attorney general publishes a notification naming the company.

Details
Standard cover
Usually excluded
Needs
State Breach Notifications
Exposure
The incident is public and the claim is live. What is open is whether the cyber tower covers notification costs and regulatory defence, which is where these run up.
Window
Filed within the state's notification deadline
Misfires
The filer may be a vendor reporting on a customer's behalf.