Subpart D—Standard Unique Health Identifier for Health Care Providers
This is the current NPI standard from HIPAA which now explicitly mentions the NPI by name.
Subpart D—Standard Unique Health Identifier for Health Care Providers
This is the current NPI standard from HIPAA which now explicitly mentions the NPI by name.
Under such system, the Secretary may impose appropriate fees on such physicians to cover the costs of investigation and recertification activities with respect to the issuance of the identifiers.
Specific language in the law allowing for fees for issuing identifiers.
(b) Unique Health Identifiers.-- ``(1) In general.--The Secretary shall adopt standards providing for a standard unique health identifier for each individual, employer, health plan, and health care provider for use in the health care system. In carrying out the preceding sentence for each health plan and health care provider, the Secretary shall take into account multiple uses for identifiers and multiple locations and specialty classifications for health care providers. ``(2) Use of identifiers.--The standards adopted under paragraph (1) shall specify the purposes for which a unique health identifier may be used.
This is the specific legal basis for the enumeration of NPIs and plans.
It is the purpose of this subtitle to improve the Medicare program under title XVIII of the Social Security Act, the medicaid program under title XIX of such Act, and the efficiency and effectiveness of the health care system, by encouraging the development of a health information system through the establishment of standards and requirements for the electronic transmission of certain health information.
This is the place where the constraints for the HIPAA administrative rule is defined.
NPPES health care provider data that are required to be disclosed under the FOIA will be available as a downloadable file on a Web site.
There is an explicit requirement to have data that is FOIA available from NPPES publicly available for download.
In accordance with the requirements of the Privacy Act of 1974, CMS is proposing to modify or alter existing system of records titled “National Provider System,” System No. 09-70-0008.
This is a SORN change notice for NPPES
To an individual or organization fora research, demonstration, evaluation,or epidemiological project related to theprevention of disease or disability, therestoration or maintenance of health, orfor the purposes of determining,evaluating and/or assessing cost,effectiveness, and/or the quality ofhealth care services provided.
The research use case in the original NPPES SORN.
National Provider Identifier Standard (NPI)
The homepage for the NPI standard
NPS DATA ELEMENTS
Originally defined NPPES data elements
We agree with commentersthat it would be costly to collect,validate, and maintain certification andschool information.
Current decision not to include school-level credential data
The NPI may also be used for anyother lawful purpose requiring theunique identification of a health careprovider.
NPI can be used to uniquely identify healthcare provider for any purpose
HHS will exercise overallresponsibility for oversight andmanagement of the NPS.
At the level of the rule, HHS is responsible for NPPES
The NPS will be designed to be easyto use. The design will employ the latesttechnological advances whereverfeasible for capturing health careprovider data and making informationavailable to users.
This is a specific mandate to keep NPPES up-to-date technologically.
Communicate to the NPS anychanges to its required data elements inthe NPS within 30 days of the change.
Providers are required to provide updates to NPPES within 30 days of the change.
A strong majority ofcommenters supported our proposalthat the NPI be intelligence-free.
This is where the "intelligence-free" mandate comes from
We find the statedadvantages of a 10-position numericidentifier convincing. We have revisedproposed § 142.402 (now § 162.406(a))to provide that the NPI will be a 10position numeric identifier, with the10th position being an ISO standardcheck digit.
NPI mandated to be a 10 digit code with a check digit as per the ISO standard.
A health care provider’s NPI willnot be deactivated if that health careprovider is sanctioned or barred fromone or more health plans.
Deactivation parameters
We do not consider individuals whoare health care providers (that is, theymeet our definition of ‘‘health careprovider’’ at § 160.103) and who aremembers or employees of anorganization health care provider to be‘‘subparts’’ of those organization healthcare providers, as described earlier inthis section.
Employed individuals are not organizational sub-parts.
We define two categories of healthcare providers for enumerationpurposes. A data element, the ‘‘Entitytype code,’’ in the NPS record for eachhealth care provider will indicate theappropriate category.• NPIs with an ‘‘Entity type code’’ of1 will be issued to health care providerswho are individual human beings.Examples of health care providers withan ‘‘Entity type code’’ of 1 arephysicians, dentists, nurses,chiropractors, pharmacists, and physicaltherapists.• NPIs with an ‘‘Entity type code’’ of2 will be issued to health care providersother than individual human beings,that is, organizations. Examples ofhealth care provider organizations withan ‘‘Entity type code’’ of 2 are: hospitals;home health agencies; clinics; nursinghomes; residential treatment centers;laboratories; ambulance companies;group practices; health maintenanceorganizations; suppliers of durablemedical equipment, supplies related tohealth care, prosthetics, and orthotics;and pharmacies
Type 1 (individual) and Type 2 (organizational) are mandated here.
We decided not toestablish sub-IDs because our decisionsregarding which entities would beeligible to receive NPIs (includingseparate physical locations and subpartsof certain kinds of organization healthcare providers) obviate the need forthem. Sub-IDs may be useful as a laterimplementation feature that wouldsupport EDI routing or other purposes.We will consider an expansion at a latertime to include them, if we determinethat they would be beneficial.
Personal NPIs cannot have "sub" ids. However, they could in the future according to this rule.
For purposes of this rule, weconsider group health care providers tobe organization health care providers.
Group healthcare providers are organzations for the purpose of the NPI rule.
that the organization healthcare provider is a legal entity and is thecovered entity under HIPAA if it (or asubpart or component) transmits healthinformation in electronic form
This is the connection between an organization, legal entity, sub-parts and being a covered entity.
We accommodate this language byrequiring covered health care providersto obtain NPIs for subparts of theirorganizations that would otherwisemeet the tests for being a covered healthcare provider themselves if they wereseparate legal entities, and permittinghealth care providers to obtain NPIs forsubparts that do not meet these tests butotherwise qualify for assignment of anNPI.
Organization subparts are intended to address specific legal obligations regard organizational provider locations.
Therefore, because these kinds ofentities are not health care providers,they will not be eligible for NPIs.
A clearinghouse does not get an NPI.
Only those entitiesthat (1) meet the definition of healthcare provider at § 160.103, and (2)transmit health information inelectronic form on their own behalf, orthat use a business associate to transmithealth information in electronic form ontheir behalf, in connection with atransaction for which the Secretary hasadopted a standard (a coveredtransaction) are health care providerswho are required to comply with theHIPAA regulations.
But if you move healthcare data around, based on covered transactions, you -do- need an NPI
The fact that a healthcare provider obtains an NPI does notimpose covered entity status on thathealth care provider.
Having an NPI does not make you HIPAA covered.
Our general rule is that allhealth care providers, as we define thatterm in the regulations, will be eligibleto receive NPIs
All healthcare providers are eligible to receive NPIs assuming they have been identified as a healthcare provider in any HHS regulation
National ProviderSystem (NPS)
NPS was the original name for NPPES in the regulation.
HIPAA Administrative Simplification:Standard Unique Health Identifier forHealth Care Providers
This in the NPI Final Rule, which establishes the details of what NPPES is an how it works.
Guidance on National Provider Identifier (NPI) Enumeration; 45 Code of Federal Regulations(CFR) § 162.412(b)
This guidance details the rules for "getting additional NPIs" in order to work with non-government payers.
It emphasizes that payers may no require an individual to get an additional NPI.
It highlights the rules for payers to require organizational subpart NPIs (this is a feature of organizational NPIs)
CMS ANNOUNCES THE STANDARD UNIQUE HEALTH IDENTIFIER FOR HEALTH CARE PROVIDERS FOR USE IN STANDARD TRANSACTIONS UNDER HIPAA
This is the announcement of both NPI and NPPES
The crosswalk for NPPES and PECOS taxonomy codes
The Health Care Provider Taxonomy code
The provider taxonomy codes in NPPES
Center for Medicare and Medicaid Services (CMS) National Plan and Provider Enumeration System (NPPES)
NPPES is included in the do not pay initiative.
This project uses the NPPES API to load data into a Mongo DB.
import NPPES into MongoDB
Load NPPES and Taxonomy data into PostgreSQl and Oracle
python to Oracle/PostGreSQL importer for NPPES
NPI_Search_MSSQL_PHP
MicrosoftSQL NPPES import script
NPPES CSV Import and Sanitation Project - PHP, Symfony4, MySQL
NPPES Symfony php import script to MySQL
NPPES NPI + Postgres
NPPES to Postgress importer
Medicare Provider and Supplier Taxonomy Crosswalk
This is the crosswalk between the PECOS and NPPES provider type systems as a dataset
CROSSWALKMEDICARE PROVIDER/SUPPLIER to HEALTHCARE PROVIDER TAXONOM
This is the crosswalk between the NPPES and PECOS provider type systems.
If your taxonomy code is invalid or your taxonomy indicates you do not have the right to prescribe certain drugs, pharmacies using Express Scripts, Inc. (ESI)—our primary pharmacy network—will not fill your patients’ prescriptions.
This is a good example of how the NPPES taxonomy code is being relied on in the public.
The Complete History of the NPI Number The National Provider Identifier (NPI) is an under-appreciated marvel of the modern healthcare system.
This is a wonderful history of the NPI system.
NPI Fact SheetF o r H e a l t h C a r e P r o v i d e r sW h o A r e S o l e P r o p r i e t o r s
This is the NPI fact sheet from 2007 regarding sole-proprietors
This is the MLN Matters article that details the errors providers make as the enter data into NPPES. This version was updated in 2012
Part D plans must submit an electronic record, called a PDE record, toCMS for each covered prescription filled for their enrollees. CMSrequires that most PDE records contain an identifier for the drug’sprescriber. Acceptable prescriber identifiers include National ProviderIdentifiers (NPI), Drug Enforcement Administration (DEA) registrationnumbers, Unique Physician Identification Numbers (UPIN), and Statelicense numbers
This report calls for using NPI to correct mistaken provider identifiers in Part D programs.
US Department of Health and Human ServicesPrivacy Impact AssessmentDate Signed:12/22/2016OPDIV:CMSName:National Plan and Provider Enumeration System
The NPPES Privacy Impact Assesment.
National Standard Health CareProvider IdentifierAGENCY : Health Care FinancingAdministration (HCFA), HHS.ACTION: Proposed rule.SUMMARY : This rule proposes a standardfor a national health care provideridentifier and requirements concerningits use by health plans, health careclearinghouses, and health careproviders.
This is the proposed rule (not the final) for NPS the predecessor to NPPES.
the same name andNational Provider Identifier (NPI) (asrequired to be reported in this final rule)should be used consistently for allpayment lines and any subsequentupdates for the same individual.
Final rule from the Sunshine act details exactly how the NPI should be leveraged for reporting.
The name of the covered recipient.‘‘(ii) The business address of the covered recipientand, in the case of a covered recipient who is a physi-cian, the specialty and National Provider Identifierof the covered recipient.‘‘(iii) The amount of the payment or other transferof value.‘‘(iv) The dates on which the payment or othertransfer of value was provided to the covered recipient.‘‘(v) A description of the form of the payment orother transfer of value, indicated (as appropriate forall that apply) as—‘‘(I) cash or a cash equivalent;‘‘(II) in-kind items or services;‘‘(III) stock, a stock option, or any other owner-ship interest, dividend, profit, or other return oninvestment; or‘‘(IV) any other form of payment
This is the requirement in the Sunshine Act that reports of payments that physicians have recieved will not include the NPI of the Physician.
Department of Health and Human ServicesOFFICE OFINSPECTOR GENERALMPROVEMENTS EEDED TOE NSURE P ROVIDERE NUMERATION AND MEDICAREENROLLMENT DATA AREACCURATE , C OMPLETE , ANDONSISTENTDaniel R. LevinsonInspector GeneralMay 2013OEI-07-09-00440I NC
This is the OIG report on the failings of NPPES.
Of the 10,504 locations reviewed, providers should not have been listed at 33.14% (3,481) of thelocations (2,088 + 1,393, as shown in Table 5) either because the provider did not work at thelocation or because the provider did not accept the plan at the location. In 1,393 of theseinstances, the provider should not have been listed at any of the locations in the directory. Therewere 690 phone numbers that were wrong or disconnected and 364 incorrect addresses. Finally,there were 221 instances in which the provider was found not to be accepting new patients,although the directory indicated that the provider was accepting new patients. Table 5 provides abreakdown of deficiencies identified by CMS during the review process.
This is a review of Medicare Advantage Plans provider directories. It details multiple failings in these provider directories. NPPES is not directly mentioned, but is likely the source of the various business address problems in the data.
In accordance with the NPPES Data DisseminationNotice (CMS-6060), published May 30, 2007, certain information that you furnish will be publicly disclosed. The NPPES DataDissemination Notice can be found at https://www.cms.gov/Regulations-and-Guidance/Administrative-Simplification/NationalProvIdentStand/Downloads/NPPES_FOIA_Data-Elements_062007.pdf.
This is the link between the current NPPES paper form and the details about which data fields will be disseminated.
NATIONAL PROVIDER IDENTIFIER (NPI) APPLICATION/UPDATE FORM
This is the paper form version of NPPES. CMS-10114 is the form number. It was revised in 2021.
This is the letter to providers detailing what elements of NPPES would be disclosable.
The Centers for Medicare & Medicaid Services (CMS) is pleased to announce theavailability of a new identifier for use in the standard electronic health care transactions.The National Provider Identifier (NPI) will be the single provider identifier, replacir1g thedifferent provider identifiers you currently use for each health plan with which you dobusiness.
This is the 2005 letter to providers announcing the NPI standard.
The NCVHS has been briefed on theproposal for the National Provider Identifier(NPI), and we offer our strong support.
This is NCVHS, which is a committee that advises the HHS secretary on things, recommends the NPI standard based on briefings on the matter.
In the January 23, 2004 Federal Register (69 FR 3434), the U.S. Department of Health and Human Services (HHS) published a final rule establishing the standard for a unique health identifier for health care providers for use in the health care system and adopting the National Provider Identifier (NPI) as that standard (“2004 NPI final rule”). The rule also established the implementation specifications for obtaining and using the NPI. Since that time, pharmacies have encountered situations where they need to include the NPI of a prescribing health care provider in a pharmacy claim, but where the prescribing health care provider has been a noncovered health care provider who did not have an NPI because he or she was not required to obtain one. This situation has become particularly problematic in the Medicare Part D program. The addition to the NPI requirements addresses this issue.
This is where NPI became required for prescribing.
SORN 09-70-0555 System Name: National Plan and Provider Enumeration System" (NPPES), HHS/CMS/OFM.
This is the current SORN for NPPES. Does not appear to have changed since 2017.
Privacy Act of 1974; System of Records A Notice by the Health and Human Services Department on 02/14/2018
This is a list of SORNS that are impacted by a privacy change.. and it includes NPPES
Privacy Act of 1974; Report of a New Routine Use for Selected CMS Systems of Records A Notice by the Centers for Medicare & Medicaid Services on 05/29/2013
This is an addition of the use of NPPES to fight waste fraud and abuse. In 2013.
newsystem of records, called the ‘‘NationalProvider System (NPS),
This is the original SORN for the predecessor to NPPES: NPS.
modify or alter existing system of records titled “National Provider System,” System No. 09-70-0008
This is the first modification of the NPPES SORN. In 2010.
HIPAA Administrative Simplification: National Plan and Provider Enumeration System Data Dissemination
This is the regulations.gov version of the NPPES data dissemination notice. With this version it an be easier to see related documents and other content from the regulatory process.
HIPAA Administrative Simplification: National Plan and Provider Enumeration System Data Dissemination
The NPI Dissemination rule is what determines what is FOIA available from the NPPES data.
National Provider Identifier Standard (NPI): Educational Resources
This page makes reference to educational resources about the NPI system sent out to providers. This includes MLN Matters articles and NPI Roundtables.
Medicare NPI Implementation
This is the homepage for six different documents related to the transition between the old Medicare identifiers and the new NPI system.
National Plan and Provider Enumeration System (NPPES) Data Changes
This is the notice that caused NPPES to start to track gender identity. It also changed how individual providers could use address PO Boxes.