1. (1) Persons submitting claims, verifying client eligibility or obtaining service authorizations for or on behalf of providers, except those individuals employed by providers enrolled in the medical assistance program, must enroll in the medical assistance program in accordance with this Part and must meet the appropriate additional requirements set forth in this section. However, payment may be made only to the provider of the medical care, services or supplies; or in accordance with a reassignment from a provider to a government agency or reassignment by court order; or to an employer of a practitioner, if the practitioner is required as a condition of his/her employment to turn over his/her fees to the employer; or to a facility or a foundation, plan or similar organization operating an organized health care delivery system, if the practitioner has a contract under which the facility or organization submits the claims; or to a business agent, including a service bureau, billing service, or accounting firm, if the payment is made in the name of the provider and the agent's compensation for the services is related to the cost of processing the claim, is not related on a percentage or other basis to the amount billed or collected, and is not dependent upon collection of the payment.
2. (2) Providers submitting their claims by means of electronic/magnetic media (computer tape, disks, etc.) must also meet the requirements of this section in order to be eligible to submit their claims by such media.
3. (b) Service bureaus must maintain a system approved by the department for notifying providers of the claims to be submitted on their behalf. Prior to submission to the department, claim submissions must be reviewed by the provider of the care, services or supplies in order that the provider may correct any inaccurate claims, delete improper claims or otherwise revise the intended submission to ensure that only claims for services actually provided, due and owing are submitted.
4. (c) Service bureaus must submit systems documentation to the department for the systems configuration which they will be using to process claims prior to acceptance of their enrollment application. Such documentation must be revised as necessary to assure its accuracy. The department will not disclose any proprietary software, firmware or other systems component of a proprietary nature to any person other than another governmental agency as may be required for the efficient administration of the program.
5. (d) Service bureaus must meet the processing standards established by the department and its fiscal intermediary and satisfactorily perform claims submissions based upon a test claim provided by the department or its fiscal intermediary prior to acceptance of their enrollment applications.
6. (e) Service bureaus must enter into an electronic/magnetic billing agreement with the department or its fiscal intermediary, establishing the rights and obligations of the service bureau, the provider and the department, prior to acceptance of any claims from the service bureau. Such agreements will include provisions for liability in case of errors, submission criteria, record retention requirements, data integrity, confidentiality of client data, and audit requirements.
7. (f) Client identifying data may not be used by any service bureau, provider, or any person verifying eligibility or obtaining service authorizations on behalf of a provider for any purpose other than claiming for medical care, services or supplies actually furnished to the client, or verifying client eligibility, or obtaining service authorizations or another valid purpose directly related to the administration of the medical assistance program, and may not be released or disclosed to any person or entity other than the department, the State Medicaid Fraud Control Unit or the Federal Department of Health and Human Services without express written authorization of the department.

8. (g) Any provider desiring to submit claims, verify client eligibility, or obtain service authorizations for or on behalf of any other provider must enroll as a service bureau in addition to enrolling as a provider of medical care, services or supplies.

   1. (1) A qualified health information technology entity, as defined in paragraph (2) of this subdivision, seeking access to medical assistance information must enroll in the medical assistance program in accordance with this Part and must meet the appropriate additional requirements set forth in this section.
   2. (2) Qualified health information technology entities, which may include but are not limited to regional health information organizations (RHIOs), are entities to whom recipient-specific medical assistance information is released, with the consent of the medical assistance recipient, for the purpose of sharing such information with one or more of its members that are providing medical care, services, or supplies to such recipient. The release of such information is intended to improve the quality of care delivered to medical assistance recipients, reduce the occurrence of medically adverse events, and reduce costs through better coordination of care.

   3. (3) As a condition of enrollment and of receipt of medical assistance information pursuant to this subdivision, qualified health information technology entities must develop and maintain policies and procedures:

      1. (i) to ensure that informed consent is obtained from medical assistance recipients for the release of confidential information;
      2. (ii) to handle and safeguard confidential information in compliance with all applicable Federal and State laws and regulations; and
      3. (iii) to ensure that their members comply with all applicable Federal and State laws and regulations regarding confidential information.

   (h)

(a)