The letter states that Rawlings is “a fully compliant HIPPA business associate retained under contract by Aetna”, but do I need to do some sort of due diligence to ensure Rawlings is actually contracted with Aetna?
I would def check with your client's legal counsel however MY take on this is that anyone could be a BA to any Covered Entity, but you have a BA with your client as well (also a covered entity) and disclosure of PHI without proper authorization FROM the patient WOULD violate HIPAA II M H O)
If i could just make a point though.. This question would and should be answered first from your clients compliance manual, remember they are going to be mandatory for covered entities, if there is a compliance plan in place that would be the first spot you would go to and then follow protocol. I also think rather than play guessing games too it wouldn't be bad idea to notify the patient and get a release.
It basically concerns the same old story about Medicare being primary, but since Medicare doesn’t recognize the specialty, the secondary (in this case, Aetna) should pay as if they are primary. The substance within the letter seems an easy fix How old is the claim? In order for a collection service to get involved Aetna would have had to attempt a right of recovery first can you locate that and see if it was followed up on. Was an appeal filed? this might also NOT be as cut and dry. If the plan is an ERISA based plan, the secondary has no obligation to pay what Medicare doesn't pay. Same would apply to certain Medicare carve out plans. I would try Aetna first and make them pull the microfilm if it's really old,. Bypass Rawlings all together.