The paperwork behind a nondiscrimination promise

Who this reaches, and who it does not

These rules bind entities that receive federal financial assistance for their health programs, along with insurance issuers seeking certification to participate in a marketplace and states running one.

That boundary matters on a page about a mostly cash-pay market. A seller that takes no federal health funding is outside this part, and a posted nondiscrimination statement from such a seller is a voluntary claim rather than a regulated one.

Where the rules do apply, the first step happens before any money moves. An entity applying for federal financial assistance "must, as a condition of any application for Federal financial assistance, submit an assurance", on a specified form, that its health programs will be operated in compliance.

The same condition attaches to an issuer seeking marketplace certification and to a state seeking approval to run a marketplace.

The assurance can be incorporated by reference in later applications, and it lasts as long as the equivalent assurance under the disability rules. Where assistance comes as real property, the obligation travels with the property.

What a finding of discrimination obliges

If the relevant official finds discrimination on any of the covered bases, the entity "must take such remedial action as the Director may require to overcome the effects of the discrimination."

That reaches beyond the entity that acted. Where another recipient exercises control over the one that discriminated, either or both may be required to take remedial action.

And it reaches beyond current patients, in two directions written out in the rule.

It can cover people who are no longer participants but were participants when the discrimination occurred.

And it can cover "Persons who would have been participants in the health program or activity had the discrimination not occurred."

Separately, an entity may take voluntary nondiscriminatory steps beyond what is required, to overcome the effects of conditions that led to limited participation by people on a covered basis.

The named person, and the size threshold

Compliance is given an owner, and the trigger is headcount.

"A covered entity that employs fifteen or more persons must designate and authorize at least one employee" to coordinate compliance with these responsibilities across its health programs and activities.

That role explicitly includes "including the investigation of any grievance communicated to it alleging noncompliance" or alleging conduct the rules prohibit.

Work can be delegated to designees. But the coordinator "must retain ultimate oversight" for ensuring coordination of the entity's compliance.

Six duties are listed as a minimum. Receiving, reviewing and processing grievances. Coordinating the recordkeeping. Coordinating implementation of the language access, effective communication and reasonable modification procedures. And coordinating employee training, including keeping the documentation that training requires.

For a reader, that gives a concrete question to ask of any covered organization: who holds this role, and how is that person reached.

Written policies, with an effective date

A covered entity must implement written policies and procedures designed to comply with the part, and the general requirement contains two details worth quoting.

"The policies and procedures must include an effective date and be reasonably designed, taking into account the size, complexity, and the type of health programs or activities undertaken by a covered entity".

The effective date requirement is small and useful. A policy with no date cannot be located in time, which makes it impossible to say what applied when.

The nondiscrimination policy itself has minimum content. It states that the entity does not discriminate on the covered bases, including limited English proficiency and primary language within national origin.

It states that the entity "provides language assistance services and appropriate auxiliary aids and services free of charge", where necessary for compliance.

It states that reasonable modifications will be provided for individuals with disabilities, and it gives current contact information for the coordinator where one is required.

Grievances, and a three-year record

An entity employing fifteen or more people must have written grievance procedures providing "for the prompt and equitable resolution of grievances" alleging anything the rules prohibit.

Then comes the part that produces evidence. Records of grievances alleging discrimination on the covered bases are kept "for no less than three (3) calendar years from the date the covered entity resolves the grievance."

The record has stated contents. The grievance itself, the complainant's name and contact information where provided, and the alleged discriminatory action and basis. Then the filing date, the resolution date, the resolution, and any other pertinent information.

A protection runs alongside it. The entity "must keep confidential the identity of an individual who has filed a grievance" except as required by law or as necessary to carry out the purposes of the part, including conducting an investigation.

That combination is what makes the requirement real rather than decorative: a dated, described, resolved record on every complaint, held for three years, with the complainant's identity protected.

Four more procedures, each with a minimum content list

Beyond the policy and the grievance procedure, three further written procedures are required, and each has a floor.

Language access procedures must include the coordinator's current contact information and "how an employee identifies whether an individual has limited English proficiency". They must also cover how an employee obtains qualified interpreters and translators, and the names of any qualified bilingual staff.

They must also include "a list of any electronic and written translated materials the covered entity has, the languages they are translated into, date of issuance, and how to access electronic translations."

Effective communication procedures must include the coordinator's contact information, how an employee obtains qualified interpreters for individuals with disabilities including the names of any interpreter staff, and how to access appropriate auxiliary aids and services.

Reasonable modification procedures must describe how the entity responds to requests for changes, exceptions or adjustments to a rule, policy, practice or service.

They must also include "a process for determining whether making the modification would fundamentally alter the nature of the health program or activity". That includes identifying an alternative that does not, so the person still receives the benefit or service.

These may be combined with policies written for the other civil rights statutes, provided this part is clearly addressed in them, and they must be reviewed and revised as necessary to stay current.

Training, on a clock, documented as it happens

The training requirement is where the paper turns into behavior, and it is written with deadlines rather than aspirations.

Relevant employees are trained on the required policies and procedures, as necessary and appropriate for them to carry out their functions.

The first deadline runs from implementation. Training is delivered as soon as possible and "no later than 30 days following a covered entity's implementation of the policies and procedures", with an outer date tied to the rule's own effective period.

New employees are trained within a reasonable period after joining. And retraining is triggered by change: employees "whose functions are affected by a material change" in the policies or procedures are trained within a reasonable period after the change.

The definition of who counts is broader than a front-desk role. It reaches permanent and temporary employees whose work involves interacting with patients and the public. It reaches those making decisions that directly or indirectly affect patients' health care, including executive leadership and legal counsel. And it reaches those whose decisions affect patients' financial obligations, including billing and collections.

And the proof requirement is strict about timing. A covered entity "must contemporaneously document its employees' completion of the training" in written or electronic form, and keep that documentation for not less than three calendar years.

How a reader can use this

The first use is a boundary check. These duties follow federal health funding, not the act of selling a medicine. A cash-pay seller with no such funding is not covered, and its nondiscrimination statement carries no regulatory backing.

The second use applies where an organization is covered. A compliant program leaves five artifacts: a dated written policy, a grievance procedure, three named operational procedures, three-year grievance records, and contemporaneous training documentation.

A posted statement with none of those behind it is a sentence, not a program. Asking who the coordinator is, and what the policy's effective date is, tests that quickly.

The third use is about the reach of a remedy. Remedial action can extend to people who were never participants but would have been, which is unusual and worth knowing.

One limit on this article. Only these five sections of part 92 were read in full. The definitions and application sections, the specific nondiscrimination requirements, and the enforcement provisions were not read for this piece.

Whether any particular organization is a covered entity is a question about that organization's funding, and nothing here answers it for anyone.

Sources

Each document below is named as it names itself, with the date printed on that document rather than the day it was read.

1. Title 45 Code of Federal Regulations section 92.5, Assurances required, read in full for the condition on application, certification and approval, the duration and the real property covenant — Electronic Code of Federal Regulations, Office of the Federal Register, May 2024
2. Title 45 Code of Federal Regulations section 92.6, Remedial action and voluntary action, read in full for the remedial duty, the controlling-recipient provision and the reach to former and would-be participants — Electronic Code of Federal Regulations, Office of the Federal Register, May 2024
3. Title 45 Code of Federal Regulations section 92.7, Designation and responsibilities of a Section 1557 Coordinator, read in full for the fifteen employee threshold, the oversight rule and the six minimum duties — Electronic Code of Federal Regulations, Office of the Federal Register, May 2024
4. Title 45 Code of Federal Regulations section 92.8, Policies and procedures, read in full for the effective date requirement, the nondiscrimination policy contents, the grievance procedure and three year records, and the minimum contents of the language access, effective communication and reasonable modification procedures — Electronic Code of Federal Regulations, Office of the Federal Register, May 2024
5. Title 45 Code of Federal Regulations section 92.9, Training, read in full for the thirty day deadline, the material change trigger, the definition of relevant employees and the contemporaneous documentation requirement — Electronic Code of Federal Regulations, Office of the Federal Register, May 2024