Potential Risk and Peril Await Those Researching on the Internet

“Ghost” guidance must be identified – even on government sites.

Using the Internet is often a risky business. Phishing attacks or hacking may immediately come to mind, but there are other perils associated with being online. One often overlooked peril is outdated information. 

Internet research, while certainly a blessing, can also be a curse. The Internet makes it much easier to find and research laws. It also makes it much easier to find free advice. But sometimes, the adage “you get what you pay for” rings true. Most people know that there is inaccurate information available on the web.  But when it comes to performing your own Internet research, it is easier to miss the fact that outdated information routinely remains available on the web, even on official government websites, including that of the Centers for Medicare & Medicaid Services (CMS). Smart researchers can reach the wrong conclusion when they rely on a “ghost” document. 

Here is a real-world example:

Say you want to determine a physician’s need to certify hospital admissions. Someone conducting research on the Internet might find a Sept. 5, 2013 memo from CMS titled “Hospital Inpatient Admission Order and Certification.”

One could read that and assume he or she found the answer to a question. However, it will be far from obvious that there’s another memo dated Jan. 30, 2014 with the same title, and text that varies from that September memo. The January memo isn’t redlined and it does not make any reference to the September memo.

This is merely one example.  There are others. 

I’ve also encountered this problem when trying to conduct research about the 96-hour rule. This rule, which is actually a statute, is found in two different provisions. One is a condition of participation indicating that on average, a critical access hospital (CAHs) may not have patient stays lasting more than 96 hours. Second, there’s a provision that requires physicians to certify that they expect a patient to be discharged within 96 hours. Under the rule, that certification may be made no later than one day before the date on which the claim is submitted. Over the years, CMS interpretation of the provisions has changed and it is possible to find various documents with different approaches.

Finally, as I was preparing for a speech about gainsharing/co-management and how it is much easier to enter into legal gainsharing arrangements than many think, I went to the Social Security Administration’s website to copy and paste key statutory language. The relevant law, 42 USC section 1320a-7a(b)(1), imposes a penalty upon any hospital that makes payments to a physician if the payment is an inducement to reduce or limit “medically necessary” services. 

Browsing the official Social Security Administration website, I found that the words “medically necessary” (which were added in 2015 as part of the CHIP reauthorization act of 2015, public law 114-10) were omitted from the law. (It appears that since then, the error has been corrected at that site, but not at several other sites that provide free access to federal laws.) 

The bottom line is that when rules and polices change, the Internet will not always clearly indicate that a document you are reviewing is obsolete. 

To be clear, I am not suggesting that CMS should remove its old memos from its website. I am glad they keep the full history of advice readily available. Removing them would be misleading, and would make it difficult to accurately reconstruct the history of CMS guidance during litigation. But it would be helpful if web pages included some reference to newer guidance so you have a warning that the document you are reading is no longer valid.  

If you find a document on the Internet that appears to answer a question you have, don’t assume that the document represents the most recent guidance on the issue. Finally, remember that if what you found is a memo from CMS or a contractor, you can’t assume that that guidance is binding, even though it is issued by an “official” source, because there is still a possibility that the guidance is not consistent with the law. That is a topic for another article. 

The bottom line is that while it’s certainly worthwhile to engage in Internet research, you need to make sure your results are truly valid. It is often worth running your conclusion by legal counsel. On the Internet, nothing ever truly disappears.  

Facebook
Twitter
LinkedIn

David M. Glaser, Esq.

David M. Glaser is a shareholder in Fredrikson & Byron's Health Law Group. David assists clinics, hospitals, and other health care entities negotiate the maze of healthcare regulations, providing advice about risk management, reimbursement, and business planning issues. He has considerable experience in healthcare regulation and litigation, including compliance, criminal and civil fraud investigations, and reimbursement disputes. David's goal is to explain the government's enforcement position, and to analyze whether this position is supported by the law or represents government overreaching. David is a member of the RACmonitor editorial board and is a popular guest on Monitor Mondays.

Related Stories

Leave a Reply

Please log in to your account to comment on this article.

Featured Webcasts

Sepsis Sequencing in Focus: From Documentation to Defensible Coding

Sepsis sequencing continues to challenge even experienced coding and CDI professionals, with evolving guidelines, documentation gaps, and payer scrutiny driving denials and data inconsistencies. In this webcast, Payal Sinha, MBA, RHIA, CCDS, CDIP, CCS, CCS-P, CCDS-O, CRC, CRCR, provides clear guideline-based strategies to accurately code sepsis, severe sepsis, and septic shock, assign POA indicators, clarify the relationship between infection and organ dysfunction, and align documentation across teams. Attendees will gain practical tools to strengthen audit defensibility, improve first-pass accuracy, support appeal success, reduce denials, and ensure accurate quality reporting, empowering organizations to achieve consistent, compliant sepsis coding outcomes.

March 26, 2026
I022426_SQUARE

Fracture Care Coding: Reduce Denials Through Accurate Coding, Sequencing, and Modifier Use

Expert presenters Kathy Pride, RHIT, CPC, CCS-P, CPMA, and Brandi Russell, RHIA, CCS, COC, CPMA, break down complex fracture care coding rules, walk through correct modifier application (-25, -57, 54, 55), and clarify sequencing for initial and subsequent encounters. Attendees will gain the practical knowledge needed to submit clean claims, ensure compliance, and stay one step ahead of payer audits in 2026.

February 24, 2026
Mastering Principal Diagnosis: Coding Precision, Medical Necessity, and Quality Impact

Mastering Principal Diagnosis: Coding Precision, Medical Necessity, and Quality Impact

Accurately determining the principal diagnosis is critical for compliant billing, appropriate reimbursement, and valid quality reporting — yet it remains one of the most subjective and error-prone areas in inpatient coding. In this expert-led session, Cheryl Ericson, RN, MS, CCDS, CDIP, demystifies the complexities of principal diagnosis assignment, bridging the gap between coding rules and clinical reality. Learn how to strengthen your organization’s coding accuracy, reduce denials, and ensure your documentation supports true medical necessity.

December 3, 2025

Proactive Denial Management: Data-Driven Strategies to Prevent Revenue Loss

Denials continue to delay reimbursement, increase administrative burden, and threaten financial stability across healthcare organizations. This essential webcast tackles the root causes—rising payer scrutiny, fragmented workflows, inconsistent documentation, and underused analytics—and offers proven, data-driven strategies to prevent and overturn denials. Attendees will gain practical tools to strengthen documentation and coding accuracy, engage clinicians effectively, and leverage predictive analytics and AI to identify risks before they impact revenue. Through real-world case examples and actionable guidance, this session empowers coding, CDI, and revenue cycle professionals to shift from reactive appeals to proactive denial prevention and revenue protection.

November 25, 2025

Trending News

Featured Webcasts

Mastering MDM for Accurate Professional Fee Coding

In this timely session, Stacey Shillito, CDIP, CPMA, CCS, CCS-P, CPEDC, COPC, breaks down the complexities of Medical Decision Making (MDM) documentation so providers can confidently capture the true complexity of their care. Attendees will learn practical, efficient strategies to ensure documentation aligns with current E/M guidelines, supports accurate coding, and reduces audit risk, all without adding to charting time.

March 31, 2026

The PEPPER Returns – Risk and Opportunity at Your Fingertips

Join Ronald Hirsch, MD, FACP, CHCQM for The PEPPER Returns – Risk and Opportunity at Your Fingertips, a practical webcast that demystifies the PEPPER and shows you how to turn complex claims data into actionable insights. Dr. Hirsch will explain how to interpret key measures, identify compliance risks, uncover missed revenue opportunities, and understand new updates in the PEPPER, all to help your organization stay ahead of audits and use this powerful data proactively.

March 19, 2026

Top 10 Audit Targets for 2026-2027 for Hospitals & Physicians: Protect Your Revenue

Stay ahead of the 2026-2027 audit surge with “Top 10 Audit Targets for 2026-2027 for Hospitals & Physicians: Protect Your Revenue,” a high-impact webcast led by Michael Calahan, PA, MBA. This concise session gives hospitals and physicians clear insight into the most likely federal audit targets, such as E/M services, split/shared and critical care, observation and admissions, device credits, and Two-Midnight Rule changes, and shows how to tighten documentation, coding, and internal processes to reduce denials, recoupments, and penalties. Attendees walk away with practical best practices to protect revenue, strengthen compliance, and better prepare their teams for inevitable audits.

January 29, 2026

AI in Claims Auditing: Turning Compliance Risks into Defensible Systems

As AI reshapes healthcare compliance, the risk of biased outputs and opaque decision-making grows. This webcast, led by Frank Cohen, delivers a practical Four-Pillar Governance Framework—Transparency, Accountability, Fairness, and Explainability—to help you govern AI-driven claim auditing with confidence. Learn how to identify and mitigate bias, implement robust human oversight, and document defensible AI review processes that regulators and auditors will accept. Discover concrete remedies, from rotation protocols to uncertainty scoring, and actionable steps to evaluate vendors before contracts are signed. In a regulatory landscape that moves faster than ever, gain the tools to stay compliant, defend your processes, and reduce liability while maintaining operational effectiveness.

January 13, 2026

Trending News

Happy National Doctor’s Day! Learn how to get a complimentary webcast on ‘Decoding Social Admissions’ as a token of our heartfelt appreciation! Click here to learn more →

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 1 with code CYBER25

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24