Contractor Agreements in Healthcare Settings

The Complexity of Healthcare Contractor Relationships

Healthcare is one of the most heavily regulated industries for contractor relationships. Between HIPAA compliance, state licensing requirements, credentialing processes, malpractice insurance, and scope of practice limitations, healthcare contractor agreements need provisions that go far beyond standard contracts.

Healthcare organizations regularly engage independent contractors including physicians, nurse practitioners, therapists, medical coders, IT specialists, billing professionals, and administrative consultants. Each role brings unique regulatory considerations.

HIPAA Compliance

Business Associate Agreements

If an independent contractor will access, create, receive, maintain, or transmit protected health information (PHI), HIPAA requires a Business Associate Agreement (BAA) between the healthcare organization (covered entity) and the contractor (business associate).

A BAA must include:

• The permitted and required uses of PHI
• An obligation not to use or disclose PHI other than as permitted
• Requirements to implement appropriate safeguards
• Reporting obligations for breaches or security incidents
• Requirements to ensure subcontractors agree to the same restrictions
• Obligations to make PHI available to the covered entity and individuals
• Return or destruction of PHI upon termination

Integration With the Contractor Agreement

The BAA can be a standalone document or integrated into the contractor agreement as a section or exhibit. Either way, the contractor agreement should reference the BAA and tie compliance to the overall agreement's terms (including termination for breach).

Security Requirements

For contractors with access to electronic PHI (ePHI), specify:

• Minimum security standards for devices used to access ePHI
• Encryption requirements for data at rest and in transit
• Access control requirements (unique user IDs, automatic logoff)
• Audit trail and logging requirements
• Physical security requirements for workstations and devices
• Incident response procedures

Credentialing and Privileging

Credentialing Requirements

Healthcare contractors, particularly those providing clinical services, must undergo credentialing:

• Verification of professional licenses (medical license, nursing license, etc.)
• Verification of board certification
• Education verification
• Work history verification
• Malpractice claims history
• National Practitioner Data Bank (NPDB) query
• OIG exclusion list and SAM database checks
• DEA registration (for prescribers)

Privileging

If the contractor will provide clinical services at a healthcare facility, they may need clinical privileges specifying the procedures they're authorized to perform. The agreement should:

• Reference the privileging process
• Require the contractor to maintain privileges throughout the engagement
• Address what happens if privileges are suspended, limited, or revoked
• Specify notification obligations for any changes in privilege status

Ongoing Monitoring

Healthcare credentialing isn't a one-time event. Specify requirements for:

• Periodic re-credentialing (typically every 2-3 years)
• Ongoing monitoring for license sanctions, exclusions, and malpractice actions
• Self-reporting obligations for any changes in licensure, certification, or legal status
• Continuous exclusion list monitoring

Malpractice Insurance

Coverage Requirements

Healthcare contractor agreements should specify:

• Minimum limits: Industry-standard minimums vary by specialty (commonly $1 million per occurrence / $3 million aggregate)
• Type of policy: Occurrence-based (covers incidents during the policy period) vs. claims-made (covers claims filed during the policy period)
• Tail coverage: If a claims-made policy is used, specify who is responsible for purchasing tail coverage after the engagement ends
• Additional insured: Whether the healthcare organization must be named as an additional insured

Claims Reporting

The agreement should require the contractor to:

• Immediately report any malpractice claims or potential claims
• Cooperate in the defense of claims arising from services provided under the agreement
• Not settle claims related to the engagement without the organization's consent

Scope of Practice

Defining Clinical Services

For clinical contractors, specify:

• Exact services the contractor is authorized to provide
• Patient populations the contractor will serve
• Settings where services will be provided (inpatient, outpatient, telemedicine)
• Procedures the contractor is authorized to perform
• Prescriptive authority limitations

Supervision Requirements

Some healthcare professionals must work under physician supervision. Address:

• Required supervision ratio and availability
• Protocols for when the supervising physician is unavailable
• Documentation requirements for supervised activities
• Who provides the supervision and their obligations

Compliance With Standards of Care

Require the contractor to:

• Comply with applicable standards of care for their profession
• Follow the organization's clinical protocols and policies
• Maintain current knowledge of best practices and guidelines
• Document patient encounters according to organization standards

Regulatory Compliance

Anti-Kickback Statute

The federal Anti-Kickback Statute prohibits offering, paying, soliciting, or receiving anything of value to induce or reward referrals of patients covered by federal healthcare programs. Healthcare contractor agreements must be structured to comply:

• Compensation must be at fair market value
• Compensation cannot be based on the volume or value of referrals
• The agreement should be in writing and signed by both parties
• The arrangement should not require the contractor to refer patients to the organization
• The term should be for at least one year

Stark Law (Self-Referral)

For physician contractors, the Stark Law prohibits physicians from referring patients to entities with which they have a financial relationship for certain designated health services. Contractor compensation arrangements must fit within a Stark Law exception:

• Written agreement signed by both parties
• At least one-year term
• Fair market value compensation
• Compensation not determined by volume or value of referrals

State-Specific Regulations

Many states have their own anti-referral and anti-kickback laws that may be stricter than federal requirements. The agreement should specify compliance with both federal and applicable state regulations.

Contractor vs Employee in Healthcare

Healthcare is a high-scrutiny industry for worker classification. The IRS, DOL, and state agencies pay particular attention to healthcare contractor relationships. Factors that strengthen contractor status in healthcare:

• The contractor sets their own schedule within general availability parameters
• The contractor provides services at multiple facilities or has their own practice
• The contractor uses their own malpractice insurance
• The contractor doesn't receive employee benefits
• The engagement is for a defined term, not indefinite

Create Your Healthcare Contractor Agreement

Healthcare contractor agreements require specialized provisions that standard templates don't cover. PactDraft generates independent contractor agreements that can be customized for healthcare settings, including HIPAA compliance provisions, credentialing requirements, and malpractice insurance specifications. Build your agreement today and ensure your healthcare contractor relationships meet regulatory standards.