Virginia Law

The General Assembly finds that the establishment of effective health care data analysis and reporting initiatives is essential to improving the quality and efficiency of health care, fostering competition among health care providers, and increasing consumer choice with regard to health care services in the Commonwealth, and that accurate and valuable health care data can best be identified by representatives of state government and the consumer, provider, insurance, and business communities. For this reason, the State Board of Health and the State Health Commissioner, assisted by the State Department of Health and the Bureau of Insurance, shall administer the health care data reporting initiatives established by this chapter.

1996, c. 902; 2010, c. 416; 2012, cc. 693, 709.

As used in this chapter:

"Actual reimbursement amount" means reimbursement information included in the claims data submitted by data suppliers to the Virginia All-Payer Claims Database, whether such information is referred to in the claims data as "paid amounts," "allowed amounts," or another term having the same or similar meaning and whether in reference to the payer who paid the actual reimbursement amount or the provider who received the actual reimbursement amount.

"Board" means the Board of Health.

"Common data layout" means the national data collection standard adopted and maintained by the APCD Council.

"Consumer" means any person (i) whose occupation is other than the administration of health activities or the provision of health services, (ii) who has no fiduciary obligation to a health care institution or other health agency or to any organization, public or private, whose principal activity is an adjunct to the provision of health services, or (iii) who has no material financial interest in the rendering of health services.

"Covered lives" means subscribers, policyholders, members, enrollees, or dependents, as the case may be, under a policy or contract issued or issued for delivery in Virginia by a managed care health insurance plan licensee, insurer, health services plan, or preferred provider organization.

"ERISA plan" means any self-funded employee welfare benefit plan governed by the requirements of the Employee Retirement Income Security Act of 1974, 29 U.S.C. § 1002(1).

"Health care provider" means (i) a general hospital, ordinary hospital, outpatient surgical hospital, nursing home or certified nursing facility licensed or certified pursuant to Article 1 (§ 32.1-123 et seq.) of Chapter 5 of this title; (ii) a mental or psychiatric hospital licensed pursuant to Article 2 (§ 37.2-403 et seq.) of Chapter 4 of Title 37.2; (iii) a hospital operated by the Department of Behavioral Health and Developmental Services; (iv) a hospital operated by the University of Virginia or the Virginia Commonwealth University Health System Authority; (v) any person licensed to practice medicine or osteopathy in the Commonwealth pursuant to Chapter 29 (§ 54.1-2900 et seq.) of Title 54.1; (vi) any person licensed to furnish health care policies or plans pursuant to Chapter 34 (§ 38.2-3400 et seq.), Chapter 42 (§ 38.2-4200), or Chapter 43 (§ 38.2-4300) of Title 38.2; or (vii) any person licensed to practice dentistry pursuant to Chapter 27 (§ 54.1-2700 et seq.) of Title 54.1 who is registered with the Board of Dentistry as an oral and maxillofacial surgeon and certified by the Board of Dentistry to perform certain procedures pursuant to § 54.1-2709.1. In no event shall such term be construed to include continuing care retirement communities which file annual financial reports with the State Corporation Commission pursuant to Chapter 49 (§ 38.2-4900 et seq.) of Title 38.2 or any nursing care facility of a religious body which depends upon prayer alone for healing.

"Health maintenance organization" means any person who undertakes to provide or to arrange for one or more health care plans pursuant to Chapter 43 (§ 38.2-4300 et seq.) of Title 38.2.

"Inpatient hospital" means a hospital providing inpatient care and licensed pursuant to Article 1 (§ 32.1-123 et seq.) of Chapter 5, a hospital licensed pursuant to Article 2 (§ 37.2-403 et seq.) of Chapter 4 of Title 37.2, a hospital operated by the Department of Behavioral Health and Developmental Services for the care and treatment of individuals with mental illness, or a hospital operated by the University of Virginia or the Virginia Commonwealth University Health System Authority.

"Nonprofit organization" means a nonprofit, tax-exempt health data organization with the characteristics, expertise, and capacity to execute the powers and duties set forth for such entity in this chapter.

"Oral and maxillofacial surgeon" means, for the purposes of this chapter, a person who is licensed to practice dentistry in Virginia, registered with the Board of Dentistry as an oral and maxillofacial surgeon, and certified to perform certain procedures pursuant to § 54.1-2709.1.

"Oral and maxillofacial surgeon's office" means a place (i) owned or operated by a licensed and registered oral and maxillofacial surgeon who is certified to perform certain procedures pursuant to § 54.1-2709.1 or by a group of oral and maxillofacial surgeons, at least one of whom is so certified, practicing in any legal form whatsoever or by a corporation, partnership, limited liability company or other entity that employs or engages at least one oral and maxillofacial surgeon who is so certified, and (ii) designed and equipped for the provision of oral and maxillofacial surgery services to ambulatory patients.

"Outpatient surgery" means all surgical procedures performed on an outpatient basis in a general hospital, ordinary hospital, outpatient surgical hospital or other facility licensed or certified pursuant to Article 1 (§ 32.1-123 et seq.) of Chapter 5 of this title or in a physician's office or oral and maxillofacial surgeon's office, as defined above. Outpatient surgery refers only to those surgical procedure groups on which data are collected by the nonprofit organization as a part of a pilot study.

"Physician" means a person licensed to practice medicine or osteopathy in the Commonwealth pursuant to Chapter 29 (§ 54.1-2900 et seq.) of Title 54.1.

"Physician's office" means a place (i) owned or operated by a licensed physician or group of physicians practicing in any legal form whatsoever or by a corporation, partnership, limited liability company or other entity that employs or engages physicians and (ii) designed and equipped solely for the provision of fundamental medical care, whether diagnostic, therapeutic, rehabilitative, preventive or palliative, to ambulatory patients.

"Surgical procedure group" means at least five procedure groups, identified by the nonprofit organization designated pursuant to § 32.1-276.4 in compliance with regulations adopted by the Board, based on criteria that include, but are not limited to, the frequency with which the procedure is performed, the clinical severity or intensity, and the perception or probability of risk. The nonprofit organization shall form a technical advisory group consisting of members nominated by its Board of Directors' nominating organizations to assist in selecting surgical procedure groups to recommend to the Board for adoption.

"System" means the Virginia Patient Level Data System.

1996, cc. 902, 905, 1046; 1999, c. 764; 2000, cc. 720, 897; 2001, c. 341; 2003, c. 466; 2009, cc. 813, 840; 2019, cc. 672, 673.

A. The Commissioner shall negotiate and enter into contracts or agreements with a nonprofit organization for the compilation, storage, analysis, and evaluation of data submitted by health care providers pursuant to this chapter; for the operation of the All-Payer Claims Database pursuant to § 32.1-276.7:1; and for the development and administration of a methodology for the measurement and review of the efficiency and productivity of health care providers. Such nonprofit organization shall be governed by a board of directors composed of representatives of state government, including the Commissioner, representatives of the Department of Medical Assistance Services and the Bureau of Insurance, health plans and health insurance issuers, and the consumer, health care provider, and business communities. Of the health care provider representatives, there shall be an equal number of hospital, nursing home, physician, and health plan representatives. The articles of incorporation of such nonprofit organization shall require the nomination of such board members by organizations and associations representing those categories of persons specified for representation on the board of directors.

B. In addition to providing for the compilation, storage, analysis, and evaluation services described in subsection A, any contract or agreement with a nonprofit, tax-exempt health data organization made pursuant to this section shall require the board of directors of such organization to:

1. Develop and disseminate other health care quality and efficiency information designed to assist businesses and consumers in purchasing health care and long-term care services;

2. Prepare and make public summaries, compilations, or other supplementary reports based on the data provided pursuant to this chapter;

3. Collect, compile, and publish Health Employer Data and Information Set (HEDIS) information or reports or other quality of care or performance information sets approved by the Board, pursuant to § 32.1-276.5, and submitted by health maintenance organizations or other health care plans;

4. Jointly determine with the Board of Medicine any data concerning safety services and quality health care services rendered by physicians to Medicaid recipients that should be identified, collected, and disseminated. The board of directors shall further determine jointly with the Board of Medicine the costs of requiring physicians to identify, submit, or collect such information and identify sufficient funding sources to appropriate to physicians for the collection of the same. No physician shall be required to collect or submit safety and quality of health care services information that is already identified, collected, or submitted under this chapter; or for which funds for collection are not appropriated;

5. Maintain the confidentiality and security of data as set forth in §§ 32.1-276.7:1 and 32.1-276.9;

6. Submit a report to the Board, the Governor, and the General Assembly no later than October 1 of each year for the preceding fiscal year. Such report shall include a certified audit, including an analysis of the efficacy and value of the All-Payer Claims Database, and provide information on the accomplishments, priorities, and current and planned activities of the nonprofit organization;

7. Submit, as appropriate, strategic plans to the Board, the Governor, and the General Assembly recommending specific data projects to be undertaken and specifying data elements for collection under this chapter. In developing strategic plans, the nonprofit organization shall incorporate similar activities of other public and private entities to maximize the quality of data projects and to minimize the cost and duplication of data projects. In its strategic plans, the nonprofit organization shall also evaluate the continued need for and efficacy of current data initiatives, including the use of patient level data for public health purposes. The approval of the General Assembly shall be required prior to the implementation of any recommendations set forth in a strategic plan submitted pursuant to this section;

8. Competitively bid or competitively negotiate all aspects of all data projects, if feasible; and

9. Fulfill all funded requirements set forth for the nonprofit organization in this chapter.

C. The Department shall take steps to increase public awareness of the data and information available through the nonprofit organization's website and how consumers can use the data and information when making decisions about health care providers and services.

D. Except as provided in subdivision A 2 of § 2.2-4345, the provisions of the Virginia Public Procurement Act (§ 2.2-4300 et seq.) shall not apply to the activities of the Commissioner authorized by this section. Funding for services provided pursuant to any such contract or agreement shall come from general appropriations and from fees determined pursuant to § 32.1-276.8 and from such fees and other public and private funding sources as may be authorized by this chapter.

1996, c. 902; 2000, c. 897; 2006, c. 426; 2010, c. 416; 2012, cc. 693, 709.

A. Every health care provider shall submit data as required pursuant to regulations of the Board, consistent with the recommendations of the nonprofit organization in its strategic plans submitted and approved pursuant to § 32.1-276.4, and as required by this section. Such data shall include relevant data and information for any parent or subsidiary company of the health care provider that operates in the Commonwealth. Notwithstanding the provisions of Chapter 38 (§ 2.2-3800 et seq.) of Title 2.2, it shall be lawful to provide information in compliance with the provisions of this chapter.

B. In addition, health maintenance organizations shall annually submit to the Commissioner, to make available to consumers who make health benefit enrollment decisions, audited data consistent with the latest version of the Health Employer Data and Information Set (HEDIS), as required by the National Committee for Quality Assurance, or any other quality of care or performance information set as approved by the Board. The Commissioner, at his discretion, may grant a waiver of the HEDIS or other approved quality of care or performance information set upon a determination by the Commissioner that the health maintenance organization has met Board-approved exemption criteria. The Board shall promulgate regulations to implement the provisions of this section.

The Commissioner shall also negotiate and contract with a nonprofit organization authorized under § 32.1-276.4 for compiling, storing, and making available to consumers the data submitted by health maintenance organizations pursuant to this section. The nonprofit organization shall assist the Board in developing a quality of care or performance information set for such health maintenance organizations and shall, at the Commissioner's discretion, periodically review this information set for its effectiveness.

C. Every medical care facility as that term is defined in § 32.1-3 that furnishes, conducts, operates, or offers any reviewable service shall report data on utilization of such service to the Commissioner, who shall contract with the nonprofit organization authorized under this chapter to collect and disseminate such data. For purposes of this section, "reviewable service" shall mean inpatient beds, operating rooms, nursing home services, cardiac catheterization, computed tomographic (CT) scanning, stereotactic radiosurgery, lithotripsy, magnetic resonance imaging (MRI), magnetic source imaging, medical rehabilitation, neonatal special care, obstetrical services, open heart surgery, positron emission tomographic (PET) scanning, psychiatric services, organ and tissue transplant services, radiation therapy, stereotactic radiotherapy, proton beam therapy, nuclear medicine imaging except for the purpose of nuclear cardiac imaging, and substance abuse treatment.

Every medical care facility for which a certificate of public need with conditions imposed pursuant to § 32.1-102.4 is issued shall report to the Commissioner data on charity care, as that term is defined in § 32.1-102.1, provided to satisfy a condition of a certificate of public need, including (i) the total amount of such charity care the facility provided to indigent persons; (ii) the number of patients to whom such charity care was provided; (iii) the specific services delivered to patients that are reported as charity care recipients; and (iv) the portion of the total amount of such charity care provided that each service represents. The value of charity care reported shall be based on the medical care facility's submission of applicable Diagnosis Related Group codes and Current Procedural Terminology codes aligned with methodology utilized by the Centers for Medicare and Medicaid Services for reimbursement under Title XVIII of the Social Security Act, 42 U.S.C. § 1395 et seq. Notwithstanding the foregoing, every nursing home as defined in § 32.1-123 for which a certificate of public need with conditions imposed pursuant to § 32.1-102.4 is issued shall report data on utilization and other data in accordance with regulations of the Board.

A medical care facility that fails to report data required by this subsection shall be subject to a civil penalty of up to $100 per day per violation, which shall be collected by the Commissioner and paid into the Literary Fund.

D. Every continuing care retirement community established pursuant to Chapter 49 (§ 38.2-4900 et seq.) of Title 38.2 that includes nursing home beds shall report data on utilization of such nursing home beds to the Commissioner, who shall contract with the nonprofit organization authorized under this chapter to collect and disseminate such data.

E. Every hospital that receives a disproportionate share hospital adjustment pursuant to § 1886(d)(5)(F) of the Social Security Act shall report, in accordance with regulations of the Board consistent with recommendations of the nonprofit organization in its strategic plan submitted and provided pursuant to § 32.1-276.4, the number of inpatient days attributed to patients eligible for Medicaid but not Medicare Part A and the total amount of the disproportionate share hospital adjustment received.

F. Every hospital shall annually report, in accordance with regulations of the Board consistent with recommendations of the nonprofit organization in its strategic plan submitted and provided pursuant to § 32.1-276.4, data and information regarding (i) the amount of charity care, discounted care, or other financial assistance provided by the hospital under its financial assistance policy pursuant to § 32.1-137.09 and (ii) the amount of uncollected bad debt, including any uncollected bad debt from payment plans entered into in accordance with subsection C of § 32.1-137.09.

G. The Board shall evaluate biennially the impact and effectiveness of such data collection.

1996, c. 902; 2000, c. 897; 2006, c. 426; 2009, c. 175; 2013, c. 515; 2017, c. 791; 2018, c. 596; 2020, c. 1271; 2022, cc. 678, 679.

Repealed by Acts 2012, cc. 693 and 709, cl. 2, effective May 11, 2017.

A. The Virginia Patient Level Data System is hereby continued, hereinafter referred to as the "System." Its purpose shall be to establish and administer an integrated system for collection and analysis of data which shall be used by consumers, employers, providers, and purchasers of health care and by state government to continuously assess and improve the quality, appropriateness, and accessibility of health care in the Commonwealth and to enhance their ability to make effective health care decisions.

B. Every inpatient hospital shall submit to the Board patient level data as set forth in this subsection. Every general hospital, ordinary hospital, outpatient surgical hospital or other facility licensed or certified pursuant to Article 1 (§ 32.1-123 et seq.) of Chapter 5 of this title and every physician and every oral and maxillofacial surgeon certified to perform certain procedures pursuant to § 54.1-2709.1 performing surgical procedures in his office shall also submit to the board outpatient surgical data as set forth in this subsection. Every oral and maxillofacial surgeon certified to perform certain procedures pursuant to § 54.1-2709 shall submit to the Board outpatient surgical data as set forth in this subsection for only those procedures for which certification is required pursuant to § 54.1-2709.1.

Any such hospital, facility, physician or oral and maxillofacial surgeon, as defined in § 32.1-276.3, may report the required data directly to the nonprofit organization cited in § 32.1-276.4. Unless otherwise noted, patient level data elements for hospital inpatients and patients having outpatient surgery shall include, where applicable and included on standard claim forms:

1. Hospital identifier;

2. Attending physician identifier (inpatient only);

3. Operating physician or oral and maxillofacial surgeon identifier;

4. Payor identifier;

5. Employer identifier as required on standard claims forms;

6. Patient identifier (all submissions);

7. Patient sex, race (inpatient only), date of birth (including century indicator), street address, city or county, zip code, employment status code, status at discharge, and birth weight for infants (inpatient only);

8. Admission type, source (inpatient only), date and hour, and diagnosis;

9. Discharge date (inpatient only) and status;

10. Principal and secondary diagnoses;

11. External cause of injury;

12. Co-morbid conditions existing but not treated;

13. Procedures and procedure dates;

14. Revenue center codes, units, and charges as required on standard claims forms; and

15. Total charges.

C. State agencies providing coverage for outpatient services shall submit to the Board patient level data regarding paid outpatient claims. Information to be submitted shall be extracted from standard claims forms and, where available, shall include:

1. Provider identifier;

2. Patient identifier;

3. Physician or oral and maxillofacial surgeon identifier;

4. Dates of service and diagnostic, procedural, demographic, pharmaceutical, and financial information; and

5. Other related information.

The Board shall promulgate regulations specifying the format for submission of such outpatient data. State agencies may submit this data directly to the nonprofit organization cited in § 32.1-276.4.

1996, c. 902; 2001, c. 341; 2003, c. 466; 2009, c. 652.

A. Pursuant to the contract identified in § 32.1-276.4, and consistent with recommendations set forth in strategic plans submitted and approved pursuant to § 32.1-276.4, the nonprofit organization shall administer and modify, as appropriate, the methodology to review and measure the efficiency and productivity of health care providers. The methodology shall provide for, but not be limited to, comparisons of a health care provider's performance to national and regional data, where available, and may include different methodologies and reporting requirements for the assessment of the various types of health care providers which report to it. Health care providers shall submit the data necessary for implementation of the requirements of this section pursuant to regulations of the Board. Individual health care provider filings shall be open to public inspection once they have been received pursuant to the methodology adopted by the Board as required by this section.

B. The data reporting requirements of this section shall not apply to those health care providers enumerated in (iv) and (v) of the definition of health care providers set forth in § 32.1-276.3 until a strategic plan submitted pursuant to § 32.1-276.4 is approved requiring such reporting and any implementing laws and regulations take effect.

1996, c. 902.

A. The Virginia All-Payer Claims Database is hereby created to facilitate data-driven, evidence-based improvements in access, quality, and cost of health care and to promote and improve the public health through the understanding of health care expenditure patterns and operation and performance of the health care system.

B. The Commissioner shall ensure that the Department meets the requirements to be a health oversight agency as defined in 45 C.F.R. § 164.501.

C. The Commissioner, in cooperation with the Bureau of Insurance, shall collect paid claims data for covered benefits from data suppliers, which shall include:

1. Issuers of individual or group accident and sickness insurance policies providing hospital, medical and surgical, or major medical coverage on an expense-incurred basis; corporations providing individual or group accident and sickness subscription contracts; and health maintenance organizations providing a health care plan for health care services, for at least 1,000 covered lives in the most recent calendar year;

2. Third-party administrators and any other entities that receive or collect charges, contributions, or premiums for, or adjust or settle health care claims for, at least 1,000 Virginia covered lives on behalf of group health plans other than ERISA plans;

3. Third-party administrators, and any other entities, that receive or collect charges, contributions, or premiums for, or adjust or settle health care claims for, an employer that maintains an ERISA plan that has opted-in to data submission to the All-Payer Claims Database pursuant to subsection P;

4. The Department of Medical Assistance Services with respect to services provided under programs administered pursuant to Titles XIX and XXI of the Social Security Act;

5. State government health insurance plans;

6. Local government health insurance plans, subject to their ability to provide such data and to the extent permitted by state and federal law; and

7. Federal health insurance plans, to the extent permitted by federal law, including Medicare, TRICARE, and the Federal Employees Health Benefits Plan.

Such collection of paid claims data for covered benefits shall not include data related to Medigap, disability income, workers' compensation claims, standard benefits provided by long-term care insurance, disease specific health insurance, dental or vision claims, or other supplemental health insurance products;

D. The Commissioner shall ensure that the nonprofit organization executes a standard data submission and use agreement with each entity listed in subsection B that submits paid claims data to the All-Payer Claims Database and each entity that subscribes to data products and reports. Such agreements shall include procedures for submission, collection, aggregation, and distribution of specified data. Additionally, the Commissioner shall ensure that the nonprofit organization:

1. Protects patient privacy and data security pursuant to provisions of this chapter and state and federal privacy laws, including the federal Health Insurance Portability and Accountability Act (42 U.S.C. § 1320d et seq., as amended); Titles XIX and XXI of the Social Security Act; § 32.1-127.1:03; Chapter 6 (§ 38.2-600 et seq.) of Title 38.2; and the Health Information Technology for Economic and Clinical Health (HITECH) Act, as included in the American Recovery and Reinvestment Act (P.L. 111-5, 123 Stat. 115) as if the nonprofit organization were covered by such laws;

2. Identifies the type of paid claims to be collected by the All-Payer Claims Database and the entities that are subject to the submission of such claims as well as identification of specific data elements from existing claims systems to be submitted and collected, including but not limited to patient demographics, diagnosis and procedure codes, provider information, plan payments, member payment responsibility, and service dates;

3. Administers the All-Payer Claims Database in a manner to allow for geographic, demographic, economic, and peer group comparisons;

4. Develops public analyses identifying and comparing health plans by public and private health care purchasers, providers, employers, consumers, health plans, health insurers, and data analysts, health insurers, and providers with regard to their provision of safe, cost-effective, and high-quality health care services;

5. Uses common data layout or other national data collection standards and methods that utilize a standard set of core data elements for data submissions, as adopted or endorsed by the APCD Council, to establish and maintain the database in a cost-effective manner and to facilitate uniformity among various all-payer claims databases of other states and specification of data fields to be included in the submitted claims, consistent with such national standards, allowing for exemptions when submitting entities do not collect the specified data or pay on a per-claim basis, such exemption process to be managed by the advisory committee created pursuant to subsection E;

6. Does not disclose or report provider-specific, facility-specific, or carrier-specific reimbursement information, or information capable of being reverse-engineered, combined, or otherwise used to calculate or derive such reimbursement information, from the All-Payer Claims Database;

7. Promotes the responsible use of claims data to improve health care value and preserve the integrity and utility of the All-Payer Claims Database; and

8. Requires that all public reports and analyses comparing providers or health plans using data from the All-Payer Claims Database use national standards or, when such national standards are unavailable, provide full transparency to providers or health plans of the alternative methodology used.

E. The Commissioner shall establish an advisory committee to assist in the formation and operation of the All-Payer Claims Database. Such committee shall consist of (i) a representative from each of the following: a statewide hospital association, a statewide association of health plans, a professional organization representing physicians, a professional organization representing pharmacists, an organization that processes insurance claims or certain aspects of employee benefits plans for a separate entity, a community mental health center who has experience in behavioral health data collection, a nursing home health care provider who has experience with medical claims data, a nonprofit health insurer, and a for-profit health insurer; (ii) up to two representatives with a demonstrated record of advocating health care issues on behalf of consumers; (iii) two representatives of hospitals or health systems; (iv) an individual with academic experience in health care data and cost-efficiency research; (v) a representative who is not a supplier or broker of health insurance from small employers that purchase group health insurance for employees; (vi) a representative who is not a supplier or broker of health insurance from large employers that purchase health insurance for employees, and (vii) a representative who is not a supplier or broker of health insurance from self-insured employers, all of whom shall be appointed by the Commissioner. The Commissioner, the chairman of the board of directors of the nonprofit organization, the Commissioner of Insurance, the Director of the Department of Medical Assistance Services, the Director of the Department of Human Resource Management, or their designees, shall serve ex officio.

In appointing members to the advisory committee, the Commissioner shall adopt reasonable measures to select representatives in a manner that provides balanced representation within and among the appointments and that any representative appointed is without any actual or apparent conflict of interest, including conflicts of interest created by virtue of the individual's employer's corporate affiliations or ownership interests.

The nonprofit organization shall provide the advisory committee with details at least annually on the use and disclosure of All-Payer Claims Database data, including reports developed by the nonprofit organization; details on methods used to extract, transform, and load data; and efforts to protect patient privacy and data security.

The meetings of the advisory committee shall be open to the public.

F. The Commissioner shall establish a data release committee to review and approve requests for access to data. The data release committee shall consist of the Commissioner or his designee, and upon recommendation of the advisory committee, the Commissioner shall appoint an individual with academic experience in health care data and cost-efficiency research; a representative of a health insurer; a health care practitioner; a representative from a hospital with a background in administration, analytics, or research; and a representative with a demonstrated record of advocating health care issues on behalf of consumers. In making its recommendations, the advisory committee shall adopt reasonable measures to select representatives in a manner that provides balanced representation within and among the appointments and that any representative appointed is without any actual or apparent conflict of interest, including conflicts of interest created by virtue of the individual's employer's corporate affiliations or ownership interests. The data release committee shall ensure that (i) all data approvals are consistent with the purposes of the All-Payer Claims Database as provided in subsection A; (ii) all data approvals comply with applicable state and federal privacy laws and state and federal laws regarding the exchange of price and cost information to protect the confidentiality of the data and encourage a competitive marketplace for health care services; and (iii) the level of detail, as provided in subsection H, is appropriate for each request and is accompanied by a standardized data use agreement.

G. The nonprofit organization shall implement the All-Payer Claims Database, consistent with the provisions of this chapter, to include:

1. The reporting of data that can be used to improve public health surveillance and population health, including reports on (i) injuries; (ii) chronic diseases, including but not limited to asthma, diabetes, cardiovascular disease, hypertension, arthritis, and cancer; (iii) health conditions of pregnant women, infants, and children; and (iv) geographic and demographic information for use in community health assessment, prevention education, and public health improvement. This data shall be developed in a format that allows comparison of information in the All-Payer Claims Database with other nationwide data programs and that allows employers to compare their employee health plans statewide and between and among regions of the Commonwealth and nationally.

2. The reporting of data that payers, providers, and health care purchasers, including employers and consumers, may use to compare quality and efficiency of health care, including development of information on utilization patterns and information that permits comparison of health plans and providers statewide between and among regions of the Commonwealth. The advisory committee created pursuant to subsection E shall make recommendations to the nonprofit organization on the appropriate level of specificity of reported data in order to protect patient privacy and to accurately attribute services and resource utilization rates to providers.

3. The reporting of data that permits design and evaluation of alternative delivery and payment models.

4. The reporting and release of data consistent with the purposes of the All-Payer Claims Database as set forth in subsection A as determined to be appropriate by the data release committee created pursuant to subsection F.

H. Except as provided in subsection O, the nonprofit organization shall not provide data or access to data without the approval of the data release committee. Upon approval, the nonprofit organization may provide data or access to data at levels of detail that may include (i) aggregate reports, which are defined as data releases with all observation counts greater than 10; (ii) de-identified data sets that meet the standard set forth in 45 C.F.R. § 164.514(a); and (iii) limited data sets that comply with the National Institutes of Health guidelines for release of personal health information.

I. Reporting of data shall not commence until such data has been processed and verified at levels of accuracy consistent with existing nonprofit organization data standards. Prior to public release of any report specifically naming any provider or payer, or public reports in which an individual provider or payers represents 60 percent or more of the data, the nonprofit organization shall provide affected entities with notice of the pending report and allow for a 30-day period of review to ensure accuracy. During this period, affected entities may seek explanations of results and correction of data that they prove to be inaccurate. The nonprofit organization shall make these corrections prior to any public release of the report. At the end of the review period, upon completion of all necessary corrections, the report may be released. For the purposes of this subsection, "public release" means the release of any report to the general public and does not include the preparation of reports for, or use of the All-Payer Claims Database by, organizations that have been approved for access by the data release committee and have entered into written agreements with the nonprofit organization.

J. The Commissioner and the nonprofit organization shall consider and recommend, as appropriate, integration of new data sources into the All-Payer Claims Database, based on the findings and recommendations of the advisory committee.

K. Information acquired pursuant to this section shall be confidential and shall be exempt from disclosure by the Virginia Freedom of Information Act (§ 2.2-3700 et seq.). The reporting and release of data pursuant to this section shall comply with all state and federal privacy laws and state and federal laws regarding the exchange of price and cost information to protect the confidentiality of the data and encourage a competitive marketplace for health care services.

L. No person shall assess costs or charge a fee to any health care practitioner related to formation or operation of the All-Payer Claims Database. However, a reasonable fee may be charged to health care practitioners who voluntarily access the All-Payer Claims Database for purposes other than data verification.

M. As used in this section, "provider" means a hospital or physician as defined in this chapter or any other health care practitioner licensed, certified, or authorized under state law to provide covered services represented in claims reported pursuant to this section.

N. The Commissioner, in consultation with the board of directors of the nonprofit organization, shall develop short-term and long-term funding strategies for the operation of the All-Payer Claims Database to provide necessary funding in excess of any budget appropriation by the Commonwealth.

O. The nonprofit organization, the Department of Health, the Department of Medical Assistance Services, and the Bureau of Insurance shall have access to data reported by the All-Payer Claims Database pursuant to this section at no cost for the purposes of public health improvement research and activities.

P. Each employer that maintains an ERISA plan may opt-in to allow a third-party administer or other entity to submit data to the All-Payer Claims Database. For any such employer that opts-in, the third-party administrator or other entity shall (i) submit data for the next reporting period after the opt-in and all future reporting periods until the employer opts-out and (ii) include data from any such employer as part of its data submission, if any, otherwise required by this section. Such an employer may opt-out at any time but shall provide written notice to the third-party administrator or other entity of its decision at least 30 days prior to the start of the next reporting period. No employer that maintains an ERISA plan shall be required to opt-in to data submission to the All-Payer Claims Database, and no third-party administrator or other entity shall be required to submit claims processed before it was contracted to provide services. Each third-party administrator or other entity providing claim administration services for an employer shall submit annually to the nonprofit organization by January 31 of each year a list of the ERISA plans whose employer has opted-in to data submission to the All-Payer Claims Database and a list identifying all employers that maintain an ERISA plan with Virginia employees for which it provides claim administration services. Such information submitted shall be considered proprietary and shall be exempt from disclosure by the Virginia Freedom of Information Act (§ 2.2-3700 et seq.).

Q. Any data release shall make use of a masked proxy reimbursement amount, for which the methodology is publicly available and approved by the data release committee except that the Department may request that the nonprofit organization generate the following reports based on actual reimbursement amounts: (i) the total cost burden of a disease, chronic disease, injury, or health condition across the state, health planning region, health planning district, county, or city, provided that the total cost shall be an aggregate amount encompassing costs attributable to all data suppliers and not identifying or attributable to any individual provider, and (ii) any analyses to determine the average reimbursement that is paid for health care services that may include inpatient and outpatient diagnostic services, surgical services or the treatment of certain conditions or diseases. Any additional report of analysis based on actual reimbursement amounts shall require the approval of the data release committee.

R. The nonprofit organization shall ensure the timely reporting of information by private data suppliers to meet the requirements of this section. The nonprofit organization shall notify private data suppliers of any applicable reporting deadlines. The nonprofit shall notify, in writing, a private data supplier of a failure to meet a reporting deadline, and that failure to respond within two weeks following receipt of the written notice may result in a penalty. The Board may assess a civil penalty of up to $1,000 per week per violation, not to exceed a total of $50,000 per violation, against a private data supplier that fails, within its determination, to make a good faith effort to provide the requested information within two weeks following receipt of the written notice required by this subsection. Civil penalties assessed under this subsection shall be maintained by the Department and used for the ongoing improvement of the All-Payer Claims Database.

2012, cc. 693, 709; 2019, cc. 672, 673.

A. The Board shall prescribe a reasonable fee for each affected health care provider to cover the costs of the reasonable expenses of establishing and administering the methodology developed pursuant to § 32.1-276.7. The payment of such fees shall be at such time as the Board designates. The Board may assess a late charge on any fees paid after their due date.

In addition, the Board shall prescribe a tiered-fee structure based on the number of enrollees for each health maintenance organization to cover the costs of collecting and making available such data. Such fees shall not exceed $3,000 for each health maintenance organization required to provide information pursuant to this chapter. The payment of such fees shall also be at such time as the Board designates. The Board may also assess a late charge on any fees paid by health maintenance organizations after their due dates.

B. Except for the fees assessed pursuant to subsection A, the nonprofit organization providing services pursuant to an agreement or contract as provided in § 32.1-276.4 shall not assess any fee against any health care provider that submits data under this chapter that is processed, verified, and timely in accordance with standards established by the Board. The Board shall establish penalties for submission of data in a manner that is inconsistent with such standards.

C. State agencies shall not be assessed fees for the submission of patient level data required by subsection C of § 32.1-276.6. Individual employers, insurers, and other organizations may voluntarily provide the nonprofit organization with outpatient data for processing, storage, and comparative analysis and shall be subject to fees negotiated with and charged by the nonprofit organization for services provided.

D. The nonprofit organization providing services pursuant to an agreement or contract with the Commissioner of Health shall be authorized to charge and collect reasonable fees for the dissemination of patient level data and Health Employer Data and Information Set (HEDIS) data or other approved quality of care or performance information set data; however, the Commissioner of Health, the State Corporation Commission, and the Commissioner of Behavioral Health and Developmental Services shall be entitled to receive relevant and appropriate data from the nonprofit organization at no charge.

E. The Board shall (i) maintain records of its activities; (ii) collect and account for all fees and deposit the moneys so collected into a special fund from which the expenses attributed to this chapter shall be paid; and (iii) enforce all regulations promulgated by it pursuant to this chapter.

1996, c. 902; 1999, c. 764; 2000, c. 897; 2001, c. 341; 2003, c. 472; 2009, cc. 813, 840.

A. Patient level data collected pursuant to this chapter shall be exempt from the provisions of the Virginia Freedom of Information Act (§ 2.2-3700 et seq.), shall be considered confidential, and shall not be disclosed other than as specifically authorized by this chapter; however, upon processing and verification by the nonprofit organization, all patient level data shall be publicly available, except patient, physician, and employer identifier elements, which may be released solely for research purposes if otherwise permitted by law and only if such identifier is encrypted and cannot be reasonably expected to reveal patient identities. No report published by the nonprofit organization, the Commissioner, or other person may present information that reasonably could be expected to reveal the identity of any patient. Publicly available information shall be designed to prevent persons from being able to gain access to combinations of patient characteristic data elements that reasonably could be expected to reveal the identity of any patient. The nonprofit organization, in its discretion, may release physician and employer identifier information. Outpatient surgical charge data shall be made publicly available only pursuant to a review by the Joint Commission on Health Care.

B. No person or entity, including the nonprofit organization contracting with the Commissioner, shall be held liable in any civil action with respect to any report or disclosure of information made under this article unless such person or entity has knowledge of any falsity of the information reported or disclosed.

C. Any disclosure of information made in violation of this chapter shall be subject to a civil penalty of not more than $5,000 per violation. This provision shall be enforceable upon petition to the appropriate circuit court by the Attorney General, any attorney for the Commonwealth, or any attorney for the county, city or town in which the violation occurred. Any penalty imposed shall be payable to the Literary Fund. In addition, any person or entity who is the subject of any disclosure in violation of this article shall be entitled to initiate an action to recover actual damages, if any, or $500, whichever is greater, together with reasonable attorney's fees and court costs.

1996, c. 902; 2001, c. 341.

A. The Commissioner shall direct the nonprofit organization to establish a work group to study continuing health information needs and to develop recommendations for design, development, and operation of systems and strategies to meet those needs. The work group shall include representatives of the Department of Health, the Department of Medical Assistance Services, the Department of Health Professions, the State Corporation Commission's Bureau of Insurance, the Virginia Health Reform Initiative, the Virginia Hospital and Healthcare Association, the Virginia Association of Health Plans, the Medical Society of Virginia, health care providers, and other stakeholders and shall:

1. Identify various health information needs related to implementation of health care reform initiatives, including those associated with development and operation of an all-payer claims database, the Virginia Health Information Exchange, the Virginia Health Benefit Exchange, and any other health reform initiatives. In doing so, the work group shall identify the clinical and paid claims information required and the purposes for which such information will be used; and

2. Identify opportunities for maximizing efficiency and effectiveness of health information systems, reducing duplication of effort related to collection of health information, and minimizing costs and risks associated with collection and use of health information.

B. The Commissioner shall report on activities, findings, and recommendations of the work group annually to the Governor and the General Assembly no later than December 1 of each year, beginning in 2014.

2012, cc. 693, 709.

Nothing in this chapter or the actions taken by the Board pursuant to any of its provisions shall be construed as constituting approval by the Commonwealth or any of its agencies or officers of the reasonableness of any charges made or costs incurred by any health care provider.

1996, c. 902.

Any person violating the provisions of this chapter may be enjoined from continuing such violation by application by the Board for relief to a circuit court having jurisdiction over the offending party.

1996, c. 902.