§ 54.9816-8T — Independent dispute resolution process (temporary).

26 CFR § 54.9816-8T

• Title: Title 26: Internal Revenue
• Part: Part 54: Pension Excise Taxes
• Source: eCFR (current through May 4, 2026)

Text

§ 54.9816-8T Independent dispute resolution process (temporary).

(a) Scope and definitions—(1) Scope. This section sets forth requirements with respect to the independent dispute resolution (IDR) process (referred to in this section as the Federal IDR process) under which a nonparticipating provider, nonparticipating emergency facility, or nonparticipating provider of air ambulance services (as applicable); and a group health plan complete a requisite open negotiation period, and at least one party submits a notification under paragraph (b) of this section to initiate the Federal IDR process under paragraph (c) of this section, and under which an IDR entity (as certified under paragraph (e) of this section) determines the amount of payment under the plan for an item or service furnished by the provider or facility.

(2) Definitions. Unless otherwise stated, the definitions in § 54.9816-3T apply to this section. Additionally, for purposes of this section, the following definitions apply:

(i) Batched items and services means multiple qualified IDR items or services that are considered jointly as part of one payment determination by a certified IDR entity for purposes of the Federal IDR process. In order for a qualified IDR item or service to be included in a batched item or service, the qualified IDR item or service must meet the criteria set forth in paragraph (c)(3) of this section.

(ii) Breach means the acquisition, access, use, or disclosure of individually identifiable health information (IIHI) in a manner not permitted under paragraph (e)(2)(v) of this section that compromises the security or privacy of the IIHI.

(A) Breach excludes:

(1) Any unintentional acquisition, access, or use of IIHI by personnel, a contractor, or a subcontractor of a certified IDR entity that is acting under the authority of that certified IDR entity, if the acquisition, access, or use was made in good faith and within the scope of that authority and that does not result in further use or disclosure in a manner not permitted under paragraph (e)(2)(v) of this section.

(2) Any inadvertent disclosure by a person who is authorized to access IIHI at a certified IDR entity to another person authorized to access IIHI at the same certified IDR entity, and the information received as a result of the disclosure is not further used or disclosed in a manner not permitted under paragraph (e)(2)(v) of this section.

(3) A disclosure of IIHI in which a certified IDR entity has a good faith belief that an unauthorized person to whom the disclosure was made would not reasonably have been able to retain such information.

(B) Except as provided in paragraph (a)(2)(ii)(A) of this section, access, use, or disclosure of IIHI in a manner not permitted under paragraph (e)(2)(v) of this section is presumed to be a breach unless the certified IDR entity demonstrates that there is a low probability that the security or privacy of the IIHI has been compromised based on a risk assessment encompassing at least the following factors:

(1) The nature and extent of the IIHI involved, including the types of identifiers and the likelihood of re-identification;

(2) The unauthorized person who used the IIHI or to whom the disclosure was made;

(3) Whether the IIHI was actually acquired or viewed; and

(4) The extent to which the risk to the IIHI has been mitigated.

(iii) Certified IDR entity means an entity responsible for conducting determinations under paragraph (c) of this section that meets the certification criteria specified in paragraph (e) of this section and that has been certified by the Secretary, jointly with the Secretaries of Health and Human Services and Labor.

(iv) Conflict of interest means, with respect to a party to a payment determination or certified IDR entity, a material relationship, status, or condition of the party or certified IDR entity that impacts the ability of the certified IDR entity to make an unbiased and impartial payment determination. For purposes of this section, a conflict of interest exists when a certified IDR entity is:

(A) A group health plan; a health insurance issuer offering group health insurance coverage, individual health insurance coverage, or short-term, limited-duration insurance; a carrier offering a health benefits plan under 5 U.S.C. 8902; or a provider, a facility or a provider of air ambulance services;

(B) An affiliate or a subsidiary of a group health plan; a health insurance issuer offering group health insurance coverage, individual health insurance coverage, or short-term, limited-duration insurance; a carrier offering a health benefits plan under 5 U.S.C. 8902; or a provider, a facility, or a provider of air ambulance services;

(C) An affiliate or subsidiary of a professional or trade association representing group health plans; health insurance issuers offering group health insurance coverage, individual health insurance coverage, or short-term, limited-duration insurance; carriers offering a health benefits plan under 5 U.S.C. 8902; or providers, facilities, or providers of air ambulance services.

(D) A certified IDR entity that has, or that has any personnel, contractors, or subcontractors assigned to a determination who have, a material familial, financial, or professional relationship with a party to the payment determination being disputed, or with any officer, director, or management employee of the plan, issuer, or carrier offering a health benefits plan under 5 U.S.C. 8902; the plan administrator, plan fiduciaries, or plan, issuer, or carrier employees; the health care provider, the health care provider's group or practice association; the provider of air ambulance services, the provider of air ambulance services' group or practice association, or the facility that is a party to the dispute.

(v) Credible information means information that upon critical analysis is worthy of belief and is trustworthy.

(vi) IDR entity means an entity that may apply or has applied for certification to conduct determinations under paragraph (c) of this section, and that currently is not certified by the Secretary, jointly with the Secretaries of Health and Human Services and Labor, pursuant to paragraph (e) of this section.

(vii) Individually identifiable health information (IIHI) means any information, including demographic data, that relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual; and

(A) That identifies the individual; or

(B) With respect to which there is a reasonable basis to believe the information can be used to identify the individual.

(viii) Material familial relationship means any relationship as a spouse, domestic partner, child, parent, sibling, spouse's or domestic partner's parent, spouse's or domestic partner's sibling, spouse's or domestic partner's child, child's parent, child's spouse or domestic partner, or sibling's spouse or domestic partner.

(ix) Material financial relationship means any financial interest of more than five percent of total annual revenue or total annual income of a certified IDR entity, or an officer, director, or manager thereof, or of a reviewer or reviewing physician employed or engaged by a certified IDR entity to conduct or participate in any review in the Federal IDR process. The terms annual revenue and annual income do not include mediation fees received by mediators who are also arbitrators, provided that the mediator acts in the capacity of a mediator and does not represent a party in the mediation.

(x) Material professional relationship means any physician-patient relationship, any partnership or employment relationship, any shareholder or similar ownership interest in a professional corporation, partnership, or other similar entity; or any independent contractor arrangement that constitutes a material financial relationship with any expert used by the certified IDR entity or any officer or director of the certified IDR entity.

(xi) Qualified IDR item or service means an item or service:

(A) That is an emergency service furnished by a nonparticipating provider or nonparticipating facility subject to the protections of § 54.9816-4T, 29 CFR 2590.716-4, or 45 CFR 149.110, as applicable, for which the conditions of 45 CFR 149.410(b) are not met, or an item or service furnished by a nonparticipating provider at a participating health care facility, subject to the requirements of § 54.9816-5T, 29 CFR 2590.716-5, or 45 CFR 149.120, as applicable, for which the conditions of 45 CFR 149.420(c) through (i) are not met, or air ambulance services furnished by a nonparticipating provider of air ambulance services subject to the protections of § 54.9817-1T, 29 CFR 2590.717-1, or 45 CFR 149.130, as applicable, and for which the out-of-network rate is not determined by reference to an All-Payer Model Agreement under section 1115A of the Social Security Act or a specified State law as defined in § 54.9816-3T;

(B) With respect to which a provider or facility (as applicable) or group health plan submits a notification under paragraph (b)(2) of this section;

(C) That is not an item or service that is the subject of an open negotiation under paragraph (b)(1) of this section; and

(D) That is not an item or service for which a notification under paragraph (b)(2) of this section is submitted during the 90-calendar-day period under paragraph (c)(4)(vi)(B) of this section, but that may include such an item or service if the notification is submitted during the subsequent 30-business-day period under paragraph (c)(4)(vi)(C) of this section.

(xii) Unsecured IIHI means IIHI that is not rendered unusable, unreadable, or indecipherable to unauthorized persons through the use of a technology or methodology specified by the Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor.

(b) Determination of payment amount through open negotiation and initiation of the Federal IDR process—(1) Determination of payment amount through open negotiation—(i) In general. With respect to an item or service that meets the requirements of paragraph (a)(2)(xii)(A) of this section, the provider, facility, or provider of air ambulance services or the group health plan may, during the 30-business-day period beginning on the day the provider, facility, or provider of air ambulance services receives an initial payment or notice of denial of payment regarding the item or service, initiate an open negotiation period for purposes of determining the out-of-network rate for such item or service. To initiate the open negotiation period, a party must send a notice to the other party (open negotiation notice) in accordance with paragraph (b)(1)(ii) of this section.

(ii) Open negotiation notice—(A) Content. The open negotiation notice must include information sufficient to identify the item(s) and service(s) (including the date(s) the item(s) or service(s) were furnished, the service code, and initial payment amount, if applicable), an offer of an out-of-network rate, and contact information for the party sending the open negotiation notice.

(B) Manner. The open negotiation notice must be provided, using the standard form developed by the Secretary, in writing within 30 business days beginning on the day the provider, facility, or provider of air ambulance services receives an initial payment or a notice of denial of payment from the plan regarding the item or service. The day on which the open negotiation notice is first sent by a party is the date the 30-business-day open negotiation period begins. This notice may be provided to the other party electronically (such as by email) if the following two conditions are satisfied:

(1) The party sending the open negotiation notice has a good faith belief that the electronic method is readily accessible by the other party; and

(2) The notice is provided in paper form free of charge upon request.

(2) Initiating the Federal IDR process—(i) In general. With respect to an item or service for which the parties do not agree upon an out-of-network rate by the last day of the open negotiation period under paragraph (b)(1) of this section, either party may initiate the Federal IDR process. To initiate the Federal IDR process, a party must submit a written notice of IDR initiation to the other party and to the Secretary, using the standard form developed by the Secretary, during the 4-business-day period beginning on the 31st business day after the start of the open negotiation period.

(ii) Exception for items and services provided by certain nonparticipating providers and facilities. A party may not initiate the Federal IDR process with respect to an item or service if, with respect to that item or service, the party knows (or reasonably should have known) that the provider or facility provided notice and received consent under 45 CFR 149.410(b) or 149.420(c) through (i).

(iii) Notice of IDR initiation—(A) Content. The notice of IDR initiation must include:

(1) Information sufficient to identify the qualified IDR items or services under dispute (and whether the qualified IDR items or services are designated as batched items and services as described in paragraph (c)(3) of this section), including the date(s) and location the item or service was furnished, the type of item or service (such as whether the qualified IDR item or service is an emergency service as defined in § 54.9816-4T(c)(2)(i), 29 CFR 2590.716-4(c)(2)(i), or 45 CFR 149.110(c)(2)(i), as applicable, an emergency service as defined in § 54.9816-4T(c)(2)(ii), 29 CFR 2590.716-4(c)(2)(ii), or 45 CFR 149.110(c)(2)(ii), as applicable, or a nonemergency service; and whether any service is a professional service or facility-based service), corresponding service codes, place of service code, the amount of cost sharing allowed, and the amount of the initial payment made for the qualified IDR item or service, if applicable;

(2) Names of the parties involved and contact information, including name, email address, phone number, and mailing address;

(3) State where the qualified IDR item or service was furnished;

(4) Commencement date of the open negotiation period under paragraph (b)(1) of this section;

(5) Preferred certified IDR entity;

(6) An attestation that the items and services under dispute are qualified IDR items or services;

(7) Qualifying payment amount;

(8) Information about the qualifying payment amount as described in § 54.9816-6T(d); and

(9) General information describing the Federal IDR process as specified by the Secretary.

(B) Manner. The initiating party must provide written notice of IDR initiation to the other party. The initiating party may satisfy this requirement by furnishing the notice of IDR initiation to the other party electronically (such as by email) if the following two conditions are satisfied—

(1) The initiating party has a good faith belief that the electronic method is readily accessible by the other party; and

(2) The notice is provided in paper form free of charge upon request.

(C) Notice to the Secretary. The initiating party must also furnish the notice of IDR initiation to the Secretary by submitting the notice through the Federal IDR portal. The initiation date of the Federal IDR process will be the date of receipt by the Secretary.

(c) Federal IDR process following initiation—(1) Selection of certified IDR entity—(i) In general. The plan or the provider, facility, or provider of air ambulance services receiving the notice of IDR initiation under paragraph (b)(2) of this section may agree or object to the preferred certified IDR entity identified in the notice of IDR initiation. If the party in receipt of the notice of IDR initiation fails to object within 3 business days, the preferred certified IDR entity identified in the notice of IDR initiation will be selected and will be treated as jointly agreed to by the parties, provided that the certified IDR entity does not have a conflict of interest. If the party in receipt of the notice of IDR initiation objects, that party must notify the initiating party of the objection and propose an alternative certified IDR entity. The initiating party must then agree or object to the alternative certified IDR entity; if the initiating party fails to agree or object to the alternative certified IDR entity, the alternative certified IDR entity will be selected and will be treated as jointly agreed to by the parties. In order to select a preferred certified IDR entity, the plan and the provider, facility, or provider of air ambulance services, must jointly agree on a certified IDR entity not later than 3 business days after the initiation date of the Federal IDR process. If the plan and the provider, facility, or provider of air ambulance services fail to agree upon a certified IDR entity within that time, the Secretary shall select a certified IDR entity in accordance with paragraph (c)(1)(iv) of this section.

(ii) Requirements for selected certified IDR entity. The certified IDR entity selected must be an IDR entity certified under paragraph (e) of this section, that:

(A) Does not have a conflict of interest as defined in paragraph (a)(2) of this section;

(B) Ensures that assignment of personnel to a payment determination and decisions regarding hiring, compensation, termination, promotion, or other similar matters related to personnel assigned to the dispute are not made based upon the likelihood that the assigned personnel will support a particular party to the determination being disputed other than as outlined under paragraph (c)(4)(iii) of this section; and

(C) Ensures that any personnel assigned to a payment determination do not have any conflicts of interests as defined in paragraph (a)(2) of this section regarding any party to the dispute within the 1 year immediately preceding an assignment of dispute determination, similar to the requirements laid out in 18 U.S.C. 207(b).

(iii) Notice of certified IDR entity selection. Upon the selection of a certified IDR entity, in accordance with paragraph (c)(1)(i) of this section, the plan or the provider or emergency facility that submitted the notice of IDR initiation under paragraph (b)(2) of this section must notify the Secretary of the selection as soon as reasonably practicable, but no later than 1 business day after such selection, through the Federal IDR portal. In addition, if the non-initiating party believes that the Federal IDR process is not applicable, the non-initiating party must also provide information regarding the Federal IDR process's inapplicability through the Federal IDR portal by the same date that the notice of certified IDR entity selection must be submitted.

(A) Content. If the parties have agreed on the selection of a certified IDR entity or the party in receipt of the notice of IDR initiation has not objected to the other party's selection, the notice of the certified IDR entity selection must include the following information:

(1) Name of the certified IDR entity;

(2) The certified IDR entity number; and

(3) Attestation by both parties, or by the initiating party if the non-initiating party fails to object to the selection of the certified IDR entity, that the selected certified IDR entity meets the requirements of paragraph (c)(1)(ii) of this section.

(B) [Reserved]

(iv) Failure to select a certified IDR entity. If the plan and the provider, facility, or provider of air ambulance services fail to select a certified IDR entity in accordance with paragraph (c)(1)(i) of this section, the initiating party must notify the Secretary of the failure no later than 1 business day after the date of such failure (or in other words, 4 business days after initiation of the Federal IDR process) by electronically submitting the notice as described in paragraph (c)(1)(iii) of this section but indicating that the parties have failed to select a certified IDR entity. In addition, if the non-initiating party believes that the Federal IDR process is not applicable, the non-initiating party must also provide information regarding the Federal IDR process's inapplicability through the Federal IDR portal by the same date that the notice of failure to select must be submitted. Upon notification of the failure of the parties to select a certified IDR entity, the Secretary will select a certified IDR entity that charges a fee within the allowed range of certified IDR entity fees through a random selection method not later than 6 business days after the date of initiation of the Federal IDR process and will notify the plan and the provider or facility of the selection. If there are insufficient certified IDR entities that charge a fee within the allowed range of certified IDR entity fees available to arbitrate the dispute, the Secretary, jointly with the Secretary of Health and Human Services and Secretary of Labor, will select a certified IDR entity that has received approval, as described in paragraph (e)(2)(vi)(B) of this section, to charge a fee outside of the allowed range of certified IDR entity fees.

(v) Review by certified IDR entity. After selection by the parties (including when the initiating party selects a certified IDR entity and the other party does not object), or by the Secretary under paragraph (c)(1)(iv) of this section, the certified IDR entity must review the selection and attest that it meets the requirements of paragraph (c)(1)(ii) of this section. If the certified IDR entity is unable to attest that it meets the requirements of paragraph (c)(1)(ii) within 3 business days of selection, the parties, upon notification, must select another certified IDR entity under paragraph (c)(1) of this section, treating the date of notification of the failure to attest to the requirements of (c)(1)(ii) of this section as the date of initiation of the Federal IDR process for purposes of the time periods in paragraphs (c)(1)(i) and (iv) of this section. Additionally, the certified IDR entity selected must review the information submitted in the notice of IDR initiation to determine whether the Federal IDR process applies. If the Federal IDR process does not apply, the certified IDR entity must notify the Secretary and the parties within 3 business days of making that determination.

(2) Authority to continue negotiations—(i) In general. If the parties to the Federal IDR process agree on an out-of-network rate for a qualified IDR item or service after providing the notice of IDR initiation to the Secretary consistent with paragraph (b)(2) of this section, but before the certified IDR entity has made its payment determination, the amount agreed to by the parties for the qualified IDR item or service will be treated as the out-of-network rate for the qualified IDR item or service. To the extent the amount exceeds the initial payment amount (or initial denial of payment) and any cost sharing paid or required to be paid by the participant or beneficiary, payment must be made directly by the plan to the nonparticipating provider, facility, or nonparticipating provider of air ambulance services not later than 30 business days after the agreement is reached. In no instance may either party seek additional payment from the participant or beneficiary, including in instances in which the out-of-network rate exceeds the qualifying payment amount. The initiating party must send a notification to the Secretary and to the certified IDR entity (if selected) electronically through the Federal IDR portal, as soon as possible, but no later than 3 business days after the date of the agreement. The notification must include the out-of-network rate for the qualified IDR item or service and signatures from authorized signatories for both parties.

(ii) Method of allocation of the certified IDR entity fee. In the case of an agreement described in paragraph (c)(2)(i) of this section, the certified IDR entity is required to return half of each parties' certified IDR entity fee, unless directed otherwise by both parties. The administrative fee under paragraph (d)(2) of this section will not be returned to the parties.

(3) Treatment of batched items and services—(i) In general. Batched items and services may be submitted and considered jointly as part of one payment determination by a certified IDR entity only if the batched items and services meet the requirements of this paragraph (c)(3). Batched items and services submitted and considered jointly as part of one payment determination under this paragraph (c)(3)(i) are treated as a batched determination and subject to the fee for batched determinations under this section.

(A) The qualified IDR items and services are billed by the same provider or group of providers, the same facility, or the same provider of air ambulance services. Items and services are billed by the same provider or group of providers, the same facility, or the same provider of air ambulance services if the items or services are billed with the same National Provider Identifier or Tax Identification Number;

(B) Payment for the qualified IDR items and services would be made by the same plan;

(C) The qualified IDR items and services are the same or similar items and services. The qualified IDR items and services are considered to be the same or similar items or services if each is billed under the same service code, or a comparable code under a different procedural code system, such as Current Procedural Terminology (CPT) codes with modifiers, if applicable, Healthcare Common Procedure Coding System (HCPCS) with modifiers, if applicable, or Diagnosis-Related Group (DRG) codes with modifiers, if applicable; and

(D) All the qualified IDR items and services were furnished within the same 30-business-day period, or the same 90-calendar-day period under paragraph (c)(4)(vi)(B) of this section, as applicable.

(ii) Treatment of bundled payment arrangements. In the case of qualified IDR items and services billed by a provider, facility, or provider of air ambulance services as part of a bundled payment arrangement, or where a plan makes or denies an initial payment as a bundled payment, the qualified IDR items and services may be submitted as part of one payment determination. Bundled payment arrangements submitted under this paragraph (c)(3)(ii) are subject to the rules for batched determinations set forth in paragraph (c)(3)(i) of this section and the certified IDR entity fee for single determinations as set forth in paragraph (e)(2)(vii) of this section.

(4) Payment determination for a qualified IDR item or service—(i) Submission of offers. Not later than 10 business days after the selection of the certified IDR entity, the plan and the provider, facility, or provider of air ambulance services:

(A) Must each submit to the certified IDR entity:

(1) An offer of an out-of-network rate expressed as both a dollar amount and the corresponding percentage of the qualifying payment amount represented by that dollar amount;

(2) Information requested by the certified IDR entity relating to the offer.

(3) The following additional information, as applicable—

(i) For providers and facilities, information on the size of the provider's practice or of the facility (if applicable). Specifically, a group of providers must specify whether the providers' practice has fewer than 20 employees, 20 to 50 employees, 51 to 100 employees, 101 to 500 employees, or more than 500 employees. For facilities, the facility must specify whether the facility has 50 or fewer employees, 51 to 100 employees, 101 to 500 employees, or more than 500 employees;

(ii) For providers and facilities, information on the practice specialty or type, respectively (if applicable);

(iii) For plans, information on the coverage area of the plan, the relevant geographic region for purposes of the qualifying payment amount, whether the coverage is fully-insured or partially or fully self-insured; and

(iv) The qualifying payment amount for the applicable year for the same or similar item or service as the qualified IDR item or service.

(B) May each submit to the certified IDR entity any information relating to the offer that was submitted by either party, except that the information may not include information on factors described in paragraph (c)(4)(v) of this section.

(ii) Payment determination and notification. Not later than 30 business days after the selection of the certified IDR entity, the certified IDR entity must:

(A) For further guidance see § 54.9816-8(c)(4)(ii)(A).

(B) Notify the plan and the provider or facility, as applicable, of the selection of the offer under paragraph (c)(4)(ii)(A) of this section, and provide the written decision required under (c)(4)(vi) of this section.

(iii) For further guidance see § 54.9816-8(c)(4)(iii).

(iv) For further guidance see § 54.9816-8(c)(4)(iv).

(v) Prohibition on consideration of certain factors. In determining which offer to select, the certified IDR entity must not consider:

(A) Usual and customary charges (including payment or reimbursement rates expressed as a proportion of usual and customary charges);

(B) The amount that would have been billed by the provider or facility with respect to the qualified IDR item or service had the provisions of 45 CFR 149.410 and 149.420 (as applicable) not applied; or

(C) The payment or reimbursement rate for items and services furnished by the provider or facility payable by a public payor, including under the Medicare program under title XVIII of the Social Security Act; the Medicaid program under title XIX of the Social Security Act; the Children's Health Insurance Program under title XXI of the Social Security Act; the TRICARE program under chapter 55 of title 10, United States Code; chapter 17 of title 38, United States Code; or demonstration projects under section 1115 of the Social Security Act.

(vi) Written decision. (A) The certified IDR entity must explain its determination in a written decision submitted to the parties and the Secretary, in a form and manner specified by the Secretary;

(B) For further guidance see § 54.9816-8(c)(4)(vi)(B).

(vii) Effects of determination—(A) Binding. A determination made by a certified IDR entity under paragraph (c)(4)(ii) of this section:

(1) Is binding upon the parties, in the absence of fraud or evidence of intentional misrepresentation of material facts presented to the certified IDR entity regarding the claim; and

(2) Is not subject to judicial review, except in a case described in any of paragraphs (1) through (4) of section 10(a) of title 9, United States Code.

(B) Suspension of certain subsequent IDR requests. In the case of a determination made by a certified IDR entity under paragraph (c)(4)(ii) of this section, the party that submitted the initial notification under paragraph (b)(2) of this section may not submit a subsequent notification involving the same other party with respect to a claim for the same or similar item or service that was the subject of the initial notification during the 90-calendar-day period following the determination.

(C) Subsequent submission of requests permitted. If the end of the open negotiation period specified in paragraph (b)(1) of this section occurs during the 90-calendar-day suspension period regarding claims for the same or similar item or service that were the subject of the initial notice of IDR determination as described in paragraph (c)(4)(vi) of this section, either party may initiate the Federal IDR process for those claims by submitting a notification as specified in paragraph (b)(2) of this section during the 30-business-day period beginning on the day after the last day of the 90-calendar-day suspension period.

(viii) Recordkeeping requirements. The certified IDR entity must maintain records of all claims and notices associated with the Federal IDR process with respect to any determination for 6 years. The certified IDR entity must make these records available for examination by the plan, provider, facility, provider of air ambulance services, or a State or Federal oversight agency upon request, except to the extent the disclosure would violate either State or Federal privacy law.

(ix) Payment. If applicable, the amount of the offer selected by the certified IDR entity (less the sum of the initial payment and any cost sharing paid or owed by the participant or beneficiary) must be paid directly to the provider, facility, or provider of air ambulance services not later than 30 calendar days after the determination by the certified IDR entity. If the offer selected by the certified IDR entity is less than the sum of the initial payment and any cost sharing paid by the participant or beneficiary, the provider, facility, or provider of air ambulance services will be liable to the plan for the difference. The provider, facility, or provider of air ambulance services must pay the difference directly to the plan not later than 30 calendar days after the determination by the certified IDR entity.

(d) Costs of IDR process—(1) Certified IDR entity fee. (i) With respect to the Federal IDR process described in paragraph (c) of this section, the party whose offer submitted to the certified IDR entity under paragraph (c)(4)(ii)(A) of this section is not selected is responsible for the payment to the certified IDR entity of the predetermined fee charged by the certified IDR entity.

(ii) Each party to a determination for which a certified IDR entity is selected under paragraph (c)(1) of this section must pay the predetermined certified IDR entity fee charged by the certified IDR entity to the certified IDR entity at the time the parties submit their offers under (c)(4)(i) of this section. The certified IDR entity fee paid by the prevailing party whose offer is selected by the certified IDR entity will be returned to that party within 30 business days following the date of the certified IDR entity's determination.

(2) Administrative fee. (i) Each party to a determination for which a certified IDR entity is selected under paragraph (c)(1) of this section must, at the time the certified IDR entity is selected under paragraph (c)(1), pay to the certified IDR entity a non-refundable administrative fee due to the Secretary for participating in the Federal IDR process described in this section.

(ii) For further guidance, see § 54.9816-8(d)(2)(ii).

(3) Severability. For further guidance, see § 54.9816-8(d)(3).

(e) Certification of IDR entity—(1) In general. In order to be selected under paragraph (c)(1) of this section—

(i) An IDR entity must meet the standards described in this paragraph (e) and be certified by the Secretary, jointly with the Secretaries of Health and Human Services and Labor, as set forth in this paragraph (e) and guidance promulgated by the Secretary. Once certified, the IDR entity will be provided with a certified IDR entity number.

(ii) An IDR entity must provide written documentation to the Secretary regarding general company information (such as contact information, Taxpayer Identification Number, and website), as well as the applicable service area in which the IDR entity intends to conduct payment determinations under the Federal IDR process. IDR entities may choose to submit their application for all States or self-limit to a particular subset of States.

(iii) An IDR entity that the Secretary, jointly with the Secretary of Labor and the Secretary of Health and Human Services, certifies must enter into an agreement as a condition of certification. The agreement shall include specified provisions encompassed by this section, including, but not limited to, the requirements applicable to certified IDR entities when making payment determinations, as well as the requirements regarding certification and revocation (such as specifications for wind-down activities and reallocation of certified IDR entity fees, where warranted).

(2) Requirements. An IDR entity must provide written documentation to the Secretary through the Federal IDR portal that demonstrates that the IDR entity satisfies the following standards to be a certified IDR entity under this paragraph (e):

(i) Possess (directly or through contracts or other arrangements) sufficient arbitration and claims administration of health care services, managed care, billing and coding, medical and legal expertise to make the payment determinations described in paragraph (c) of this section within the time prescribed in paragraph (c)(4)(ii) of this section.

(ii) Employ (directly or through contracts or other arrangements) a sufficient number of personnel to make the determinations described in paragraph (c) of this section within the time prescribed by (c)(4)(ii) of this section. To satisfy this standard, the written documentation must include a description of the IDR entity's organizational structure and capabilities, including an organizational chart and the credentials, responsibilities, and number of personnel employed to make determinations described in paragraph (c) of this section.

(iii) Maintain a current accreditation from a nationally recognized and relevant accrediting organization, such as URAC, or ensure that it otherwise possesses the requisite training to conduct payment determinations (for example, providing documentation that personnel employed by the IDR entity have completed arbitration training by the American Arbitration Association, the American Health Law Association, or a similar organization).

(iv) Have a process to ensure that no conflict of interest, as defined in paragraph (a)(2) of this section, exists between the parties and the personnel the certified IDR entity assigns to a payment determination to avoid violating paragraph (c)(1)(ii) of this section, including policies and procedures for conducting ongoing audits for conflicts of interest, to ensure that should any conflicts of interest arise, the certified IDR entity has procedures in place to inform the Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor, of the conflict of interest and to mitigate the risk by reassigning the dispute to other personnel in the event that any personnel previously assigned have a conflict of interest.

(v) Have a process to maintain the confidentiality of IIHI obtained in the course of conducting determinations. A certified IDR entity's responsibility to comply with these confidentiality requirements shall survive revocation of the IDR entity's certification for any reason, and IDR entities must comply with the record retention and disposal requirements described in this section. Under this process, once certified, the certified IDR entity must comply with the following requirements:

(A) Privacy. The certified IDR entity may create, collect, handle, disclose, transmit, access, maintain, store, and/or use IIHI, only to perform:

(1) The certified IDR entity's required duties described in this section; and

(2) Functions related to carrying out additional obligations as may be required under applicable Federal or State laws or regulations.

(B) Security. (1) The certified IDR entity must ensure the confidentiality of all IIHI it creates, obtains, maintains, stores, and transmits;

(2) The certified IDR entity must protect against any reasonably anticipated threats or hazards to the security of this information;

(3) The certified IDR entity must ensure that IIHI is securely destroyed or disposed of in an appropriate and reasonable manner 6 years from either the date of its creation or the first date on which the certified IDR entity had access to it, whichever is earlier;

(4) The certified IDR entity must implement policies and procedures to prevent, detect, contain, and correct security violations in the event of a breach of IIHI;

(C) Breach notification. The certified IDR entity must, following the discovery of a breach of unsecured IIHI, notify of the breach the provider, facility, or provider of air ambulance services; the plan; the Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor; and each individual whose unsecured IIHI has been, or is reasonably believed to have been, subject to the breach, to the extent possible.

(1) Breaches treated as discovered. For purposes of this paragraph (e)(2)(v)(C), a breach shall be treated as discovered by a certified IDR entity as of the first day on which the breach is known to the certified IDR entity or, by exercising reasonable diligence, would have been known to the certified IDR entity. A certified IDR entity shall be deemed to have knowledge of a breach if the breach is known, or by exercising reasonable diligence would have been known, to any person, other than the person committing the breach, who is an employee, officer, or other agent of the certified IDR entity;

(2) Timing of notification. A certified IDR entity must provide the notification required by this paragraph (e)(2)(v)(C) without unreasonable delay and in no case later than 60 calendar days after discovery of a breach.

(3) Content of notification. The notification required by this paragraph (e)(2)(v)(C) must include, to the extent possible:

(i) The identification of each individual whose unsecured IIHI has been, or is reasonably believed by the certified IDR entity to have been, subject to the breach;

(ii) A brief description of what happened, including the date of the breach and the date of the discovery of the breach, to the extent known;

(iii) A description of the types of unsecured IIHI that were involved in the breach (for example whether full name, social security number, date of birth, home address, account number, diagnosis, disability code, or other types of information were involved);

(iv) A brief description of what the certified IDR entity involved is doing to investigate the breach, to mitigate harm to the affected parties, and to protect against any further breaches; and

(v) Contact procedures for individuals to ask questions or learn additional information, which must include a toll-free telephone number, email address, website, or postal address.

(4) Method for providing notification. A certified IDR entity must submit the notification required by this paragraph (e)(2)(v)(C) in written form (in clear and understandable language) either on paper or electronically through the Federal IDR portal or electronic mail.

(D) Application to contractor and subcontractors. The certified IDR entity must ensure compliance with this paragraph (e)(2)(v) of this section by any contractor or subcontractor with access to IIHI performing any duties related to the Federal IDR process.

(vi) Meet appropriate indicators of fiscal integrity and stability by demonstrating that the certified IDR entity has a system of safeguards and controls in place to prevent and detect improper financial activities by its employees and agents to assure fiscal integrity and accountability for all certified IDR entity fees and administrative fees received, held, and disbursed and by submitting 3 years of financial statements or, if not available, other information to demonstrate fiscal stability of the IDR entity.

(vii) For further guidance, see § 54.9816-8(e)(2)(vii).

(viii) For further guidance, see § 54.9816-8(e)(2)(viii).

(ix) Have a procedure in place to retain the certified IDR entity fees described in paragraph (d)(1) of this section paid by both parties in a trust or escrow account and to return the certified IDR entity fee paid by the prevailing party of an IDR payment determination, or half of each party's certified IDR entity fee in the case of an agreement described in paragraph (c)(2)(i) of this section, within 30 business days following the date of the determination.

(x) Have a procedure in place to retain the administrative fees described in paragraph (d)(2) of this section and to remit the administrative fees to the Secretary in accordance with the timeframe and procedures set forth in guidance published by the Secretary.

(xi) Discharge its responsibilities in accordance with paragraph (c) of this section, including not making any determination with respect to which the certified IDR entity would not be eligible for selection pursuant to paragraph (c)(1) of this section.

(xii) Collect the information required to be reported to the Secretary under paragraph (f) of this section and report the information on a timely basis in the form and manner provided in guidance published by the Secretary.

(3) Conflict-of-interest standards. In addition to the general standards set forth in paragraph (e)(2)(iv) of this section, an IDR entity must provide written documentation that the IDR entity satisfies the standards to be a certified IDR entity under this paragraph (e)(3).

(i) The IDR entity must provide an attestation indicating that it does not have a conflict of interest as defined in paragraph (a)(2) of this section;

(ii) The IDR entity must have procedures in place to ensure that personnel assigned to a determination do not have any conflicts of interest regarding any party to the dispute within the 1 year immediately preceding an assignment of dispute determination, similar to the requirements laid out in 18 U.S.C. 207(b). In order to satisfy this requirement, if certified, the IDR entity must ensure that any personnel assigned to a determination do not have any conflicts of interest as defined in paragraph (a)(2) of this section.

(iii) Following certification under this paragraph (e), if a certified IDR entity acquires control of, becomes controlled by, or comes under common control with any entity described in paragraph (e)(3)(i) of this section, the certified IDR entity must notify the Secretary in writing no later than 3 business days after the acquisition or exercise of control and shall be subject to revocation of certification under paragraph (e)(6)(ii) of this section.

(4) Period of certification. Subject to paragraphs (e)(5) and (6) of this section, each certification (including a recertification) of a certified IDR entity under the process described in paragraph (e)(1) of this section will be effective for a 5-year period.

(5) Petition for denial or revocation—(i) In general. An individual, provider, facility, provider of air ambulance services, plan, or issuer may petition for a denial of a certification for an IDR entity or a revocation of a certification for a certified IDR entity for failure to meet a requirement of this section using the standard form and manner set forth in guidance issued by the Secretary. The petition for denial of a certification must be submitted within the timeframe set forth in guidance issued by the Secretary.

(ii) Content of petition. The individual, provider, facility, provider of air ambulance services, plan, or issuer seeking denial or revocation of certification must submit a written petition using the standard form issued by the Secretary including the following information:

(A) The identity of the IDR entity seeking certification or certified IDR entity that is the subject of the petition;

(B) The reason(s) for the petition;

(C) Whether the petition seeks denial or revocation of a certification;

(D) Documentation to support the reasons outlined in the petition; and

(E) Other information as may be required by the Secretary.

(iii) Process. (A) The Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor, will acknowledge receipt of the petition within 10 business days of receipt of the petition.

(B) If the Secretary finds that the petition adequately shows a failure of the IDR entity seeking certification or the certified IDR entity to follow the requirements of this paragraph (e), the Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor, will notify the IDR entity seeking certification or the certified IDR entity by providing a de-identified copy of the petition. Following the notification, the IDR entity seeking certification or certified IDR entity will have 10 business days to provide a response. After the time period for providing the response has passed, the Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor, will review the response (if any), determine whether a denial or revocation of a certification is warranted, and issue a notice of the decision to the IDR entity or certified IDR entity and to the petitioner. This decision will be subject to the appeal requirements of paragraph (e)(6)(v) of this section.

(C) Effect on certification under petition. Regarding a petition for revocation of a certified IDR entity's certification, if the Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor, finds that the petition adequately shows a failure to comply with the requirements of this paragraph (e), following the Secretary's notification of the failure to the certified IDR entity under paragraph (e)(5)(iii)(B) of this section, the certified IDR entity may continue to work on previously assigned determinations but may not accept new determinations until the Secretary issues a notice of the decision to the certified IDR entity finding that a revocation of certification is not warranted.

(6) Denial of IDR entity certification or revocation of certified IDR entity certification—(i) Denial of IDR entity certification. The Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor, may deny the certification of an IDR entity under paragraph (e)(1) of this section if, during the process of certification, including as a result of a petition described in paragraph (e)(5) of this section, the Secretary determines the following:

(A) The IDR entity fails to meet the applicable standards set forth under this paragraph (e);

(B) The IDR entity has committed or participated in fraudulent or abusive activities, including, during the certification process, submitting fraudulent data, or submitting information or data the IDR entity knows to be false to the Secretary, the Secretary of Health and Human Services, or the Secretary of Labor;

(C) The IDR entity has failed to comply with requests for information from the Secretary, the Secretary of Health and Human Services, or the Secretary of Labor as part of the certification process;

(D) In conducting payment determinations, including those outside the Federal IDR process, the IDR entity has failed to meet the standards that applied to those determinations or reviews, including standards of independence and impartiality; or

(E) The IDR entity is otherwise not fit or qualified to make determinations under the Federal IDR process.

(ii) Revocation of certification of a certified IDR entity. The Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor, may revoke the certification of a certified IDR entity under paragraph (e)(1) of this section if, as a result of an audit, a petition described in paragraph (e)(5) of this section, or otherwise, the Secretary determines the following:

(A) The certified IDR entity has a pattern or practice of noncompliance with any requirements of this paragraph (e);

(B) The certified IDR entity is operating in a manner that hinders the efficient and effective administration of the Federal IDR process;

(C) The certified IDR entity no longer meets the applicable standards for certification set forth under this paragraph (e);

(D) The certified IDR entity has committed or participated in fraudulent or abusive activities, including submission of false or fraudulent data to the Secretary, the Secretary of Health and Human Services, or the Secretary of Labor;

(E) The certified IDR entity lacks the financial viability to provide arbitration under the Federal IDR process;

(F) The certified IDR entity has failed to comply with requests from the Secretary, the Secretary of Health and Human Services, or the Secretary of Labor made as part of an audit, including failing to submit all records of the certified IDR entity that pertain to its activities within the Federal IDR process; or

(G) The certified IDR entity is otherwise no longer fit or qualified to make determinations.

(iii) Notice of denial or revocation. The Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor, will issue a written notice of denial to the IDR entity or revocation to the certified IDR entity within 10 business days of the Secretary's decision, including the effective date of denial or revocation, the reason(s) for denial or revocation, and the opportunity to request appeal of the denial or revocation.

(iv) Request for appeal of denial or revocation. To request an appeal, the IDR entity or certified IDR entity must submit a request for appeal to the Secretary within 30 business days of the date of the notice under paragraph (e)(6)(iii) of this section of denial or revocation and in the manner prescribed by the instructions to the notice. During this time period, the Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor, will not issue a notice of final denial or revocation and a certified IDR entity may continue to work on previously assigned determinations but may not accept new determinations. If the IDR entity or certified IDR entity does not timely submit a request for appeal of the denial or revocation, the Secretary, jointly with the Secretary of Health and Human Services and the Secretary of Labor, will issue a notice of final denial or revocation to the IDR entity or certified IDR entity (if applicable) and the petitioner.

(v) Denial or final revocation. Upon notice of denial or final revocation, the IDR entity shall not be considered a certified IDR entity and therefore shall not be eligible to accept payment determinations under the Federal IDR process. Moreover, after a notice of final revocation, the IDR entity may not re-apply to be a certified IDR entity until on or after the 181st day after the date of the notice of denial or final revocation.

(f) Reporting of information relating to the Federal IDR process—(1) Reporting of information. Within 30 business days of the close of each month, for qualified IDR items and services furnished on or after January 1, 2022, each certified IDR entity must, in a form and manner specified by the Secretary, report:

(i) The number of notices of IDR initiation submitted under paragraph (b)(2) of this section to the certified IDR entity during the immediately preceding month;

(ii) The size of the provider practices and the size of the facilities submitting notices of IDR initiation under paragraph (b)(2) of this section during the immediately preceding month, as required to be provided to the certified IDR entity under paragraph (c)(4)(i)(A)(2) of this section;

(iii) The number of such notices of IDR initiation with respect to which a determination was made under paragraph (c)(4)(ii) of this section;

(iv) The number of times during the month that the out-of-network rate determined (or agreed to) under this section has exceeded the qualifying payment amount, specified by qualified IDR items and services;

(v) With respect to each notice of IDR initiation under paragraph (b)(2) of this section for which such a determination was made, the following information:

(A) A description of the qualified IDR items and services included with respect to the notification, including the relevant billing and service codes;

(B) The relevant geographic region for purposes of the qualifying payment amount for the qualified IDR items and services with respect to which the notification was provided;

(C) The amount of the offer submitted under paragraph (c)(4)(i) of this section by the plan and by the provider or facility (as applicable) expressed as a dollar amount and as a percentage of the qualifying payment amount;

(D) Whether the offer selected by the certified IDR entity under paragraph (c)(4) of this section was the offer submitted by the plan or by the provider or facility (as applicable);

(E) The amount of the selected offer expressed as a dollar amount and as a percentage of the qualifying payment amount;

(F) For further guidance see § 54.9816-8(f)(1)(v)(F);

(G) The practice specialty or type of each provider or facility, respectively, involved in furnishing each qualified IDR item or service;

(H) The identity for each plan, and provider or facility, with respect to the notification. Specifically, each certified IDR entity must provide each party's name and address, as applicable; and

(I) For each determination, the number of business days elapsed between selection of the certified IDR entity and the determination of the out-of-network rate by the certified IDR entity.

(vi) The total amount of certified IDR entity fees paid to the certified IDR entity under paragraph (d)(1) of this section during the month.

(2) [Reserved]

(g) Extension of time periods for extenuating circumstances—(1) General. The time periods specified in this section (other than the time for payment, if applicable, under paragraph (c)(4)(ix) of this section) may be extended in extenuating circumstances at the Secretary's discretion if:

(i) An extension is necessary to address delays due to matters beyond the control of the parties or for good cause; and

(ii) The parties attest that prompt action will be taken to ensure that the determination under this section is made as soon as administratively practicable under the circumstances.

(2) Process to request an extension. The parties may request an extension by submitting a request for extension due to extenuating circumstances through the Federal IDR portal if the extension is necessary to address delays due to matters beyond the control of the parties or for good cause.

(h) Applicability date. The provisions of this section are applicable with respect to plan years beginning on or after January 1, 2022, except that the provisions regarding IDR entity certification at paragraphs (a) and (e) of this section are applicable beginning on October 7, 2021; and paragraphs (c)(4)(ii) through (iv) of this section regarding payment determinations, paragraph (c)(4)(vi)(B) of this section regarding written decisions, and paragraph (f)(1)(v)(F) of this section regarding reporting of information relating to the Federal IDR process are applicable with respect to items or services provided or furnished on or after October 25, 2022, for plan years beginning on or after January 1, 2022.

[T.D. 9955, 86 FR 56100, Oct. 7, 2021, as amended by T.D. 9965, 87 FR 52647, Aug. 26, 2022; T.D. 9985, 88 FR 88524, Dec. 21, 2023]