Uchicago Medicine

Vanessa Casella

Vanessa Casella is the Program Manager of Compliance where she has focused on corporate compliance for the past 11 of her 17 years in healthcare regulatory Risk & Data Service at UChicago Medicine, and compliance. Her responsibilities include conducting risk analyses of provider billing related to fraud, waste, and abuse; developing productivity metrics to secure funding for the compliance program; and overseeing the implementation of new and existing vendor software.

Through this article, Vanessa Casella, Program Manager of Compliance Risk and Data Service at UChicago Medicine, discusses key aspects of healthcare compliance, including data protection strategies in the digital age, methods for staying ahead of regulatory changes, streamlining documentation and reporting, multifaceted employee training programs, and advice for career advancement in the field, emphasizing continuous learning and collaboration.

Data Protection In The Digital Age: A Multi-Layered Approach To Patient Privacy

Managing sensitive patient data protection complexities, particularly with the growth of digital health technologies, requires a robust and adaptable strategy. At UChicago Medicine, we prioritize data security by utilizing network drives for data storage, minimizing reliance on cloud-based solutions that don't meet our stringent security standards. While this approach may seem less contemporary, it prioritizes patient safety above all else.

Recognizing the emerging challenges of AI technologies, we partner with vendors offering AI services with robust data security protocols. This ensures patients receive cutting-edge care while maintaining confidence in protecting their personal information.

Our commitment to data protection extends to comprehensive privacy standards, including mandatory annual training for all employees accessing Protected Health Information (PHI). Furthermore, dedicated teams focus on cybersecurity, patient safety, billing compliance, and HIPAA/privacy compliance, creating a multi-layered approach to safeguarding patient data.

Staying Ahead Of Regulations: Proactive Monitoring And Agile Implementation

Maintaining up-to-date compliance programs in the dynamic healthcare landscape requires proactive monitoring and agile implementation processes. At UChicago Medicine, we review the OIG's Work Plan annually and actively follow relevant projects. We also subscribe to various listservs and compliance and regulatory publications and engage with healthcarespecific compliance associations to stay informed about emerging laws and industry trends. Our staff includes members who maintain clinical licenses and healthcare compliance/coding certifications, enhancing our ability to understand and interpret regulatory changes.

We leverage established leadership groups that regularly collaborate with clinical staff to implement new requirements rapidly. This direct engagement allows us to quickly identify affected departments and develop effective educational strategies for disseminating new policies and ensuring swift compliance.

Streamlining Compliance Documentation And Reporting: A Focus On Efficiency And Data Quality

Managing healthcare compliance’s significant documentation and reporting requirements necessitates efficient tools and systems. Our Corporate Compliance program at UChicago Medicine continuously evaluates and tests reporting and documentation methods. A key focus of my role is identifying more effective strategies for meeting evolving record-keeping and educational demands. While we utilize a third-party vendor to streamline specific processes, most data retention occurs in-house on secure networks.

Reporting presents a more significant challenge, and we employ various methods to ensure the highest quality data, recognizing that accurate reporting hinges on reliable information. We leverage specialized software to analyze different facets of the business, including billing, coding, audits, risk analysis, and other compliancerelated activities, allowing us to generate comprehensive and insightful reports.

Employee Compliance Training: A Multifaceted Approach To Education And Engagement

Ensuring employee awareness and competence regarding the latest compliance requirements and data security practices requires a comprehensive training strategy. At UChicago Medicine, we utilize various methods to keep employees informed. These include online courses, dedicated office hours, individualized provider education meetings, and departmental training sessions conducted in person or via live webinars. We also offer general compliance Computer-Based Training (CBTs) and regularly convene focus groups comprised of organizational leadership to foster ongoing dialogue and reinforce best practices.

Career Advancement In Healthcare Compliance: Continuous Learning And Collaborative Relationships

Due to the field's ever-evolving nature, continuous learning is essential for professionals seeking to advance in healthcare compliance. Cultivating a thirst for knowledge and staying abreast of regulatory changes are crucial. Networking and knowledge sharing with peers in the broader community are also invaluable, as best practices can be learned and adapted from other organizations while adhering to consistent federal mandates.

Building trust and strong relationships within one's own organization is paramount. Compliance professionals often serve as a guiding compass, emphasizing the importance of upholding the practice's values and mission.