Restraint and Seclusion is a hot spot with both CMS and an area where hospitals are frequently cited non-compliance. This program will discuss this most problematic standard.

CMS has fifty pages of interpretive guidelines on restraint and seclusions for hospitals. Every hospital that accepts Medicare patients will have to comply with the regulations even if accredited by an accreditation organization, such as Joint Commission, HFAP, CIHQ, or DNV Healthcare.

Any physician or provider who orders restraint must be trained in the hospital’s policy. CMS requires hospital staff to be educated on restraint and seclusion interpretive guidelines on an annual basis. CMS also requires training must occur before a staff member/provider can apply or remove restraints and must be on-going so it cannot occur at orientation only. There are ten pages of training requirements.

Objectives

  • Recall that CMS requires that all physicians and others who order restraints be educated on the hospital policy.
  • Describe that CMS has restraint education requirements for staff.
  • Discuss that CMS has specific things that need to be documented in the medical record for the one-hour face to face evaluation on patients who are violent and or self-destructive.
  • Define the CMS restraint requirement of what a hospital must document in the internal log if a patient dies within 24 hours with having two soft wrist restraints on.

Agenda

  • Restraints in the news
  • Introduction to CoP Manual
  • Restraint and seclusion deficiencies
  • Complaint manual and process
  • Conditions of Participation
  • Seclusion – what it is and is not
  • Medical restraints
  • Behavioral health restraints
  • Definition of restraint and seclusion
  • Reasons to restrain
  • Leadership responsibilities
  • Falls and use of restraints
  • Drugs used as a restraint
  • What restraints do not include
  • Side rails, forensic restraints, freedom splints, immobilizers
  • Patient assessment
  • Need order ASAP
  • Order from LP and notification to attending physician
  • Documentation requirements
  • Plan of care
  • Least restrictive requirements
  • RNs and One-hour face to face assessment
  • Training for RN doing one-hour face to face assessment
  • Training requirements
  • Ending at earliest time
  • Revisions to the plan of care
  • Time limited orders
  • Renewing orders
  • Provider training
  • Staff education
  • First aid training required
  • Monitoring of patient in both restraint and seclusion
  • Death reporting requirements

Who Should Attend

  • All nurses with direct patient care
  • Compliance officer
  • Chief nursing officer
  • Chief of medical staff
  • COO
  • Nurse Educator
  • ED nurses
  • ED physicians
  • Medical staff coordinator
  • Risk manager
  • Patient safety officer
  • Chief Risk Officer
  • PI director
  • Nurse managers
  • Quality director
  • Chief medical officer
  • Security guards
  • Accreditation and regulation staff and others responsible for compliance with hospital regulations
  • Anyone involved in the restraint or seclusion of patients.
  • Any staff that could remove/apply restraints as part of care

Venue: Recorded Webinar

Enrollment option

Speaker

Laura A. Dixon
(BS, JD, RN, CPHRM) Laura A. Dixon recently served as the Regional Director of Risk Management and Patient Safety for Kaiser Permanente Colorado where she provided consultation and resources to clinical staff. Prior to joining Kaiser, she served as the Director, Facility Patient Safety and Risk Management and Operations for COPIC from 2014 to 2020.…

Related Events

The Future of Telehealth
Compliance Webinars
Live Webinar

The Future of Telehealth

Telehealth completely changed in 2020 when the Public Health Emergency was put into effect. Now in 2025, many of those temporary changes are expiring and the telehealth business has exploded. These methods of communication between provider and patient are loved by many, and the convenience of telehealth in healthcare has become a common occurrence. This webinar will be reviewing the current parts of telehealth that are being considered permanent in the 2026 Physicians Fee Schedule Final Rule and the new evaluation and management services that are new codes for CPT in 2025 related to telehealth. We will find out what the do’s and don’ts of telehealth that are here to stay, as well as implementing these new codes and regulations into your practice. These new rules and codes are important to any one currently offering telehealth as well all who are considering it to add it to their practice in order to be compliant and maximize reimbursement for the services performed. Areas Covered in this Webinar The CMS Telehealth List and how to use it Medicare’s rules G codes for Medicare telehealth CPT addition of 17 codes to the E/M section for Telehealth Education for office staff Implementation on your software programs Who Will Benefit Physicians Advanced Nurses Physicians Assistant Billers Coders Compliance Managers Administrators Case Managers Claims Processors

HIPAA Breach Risk Assessment for Ransomware Attacks
Compliance Webinars
Live Webinar

HIPAA Breach Risk Assessment for Ransomware Attacks

HIPAA Breach Risk Assessments determine whether a Ransomware attack constitutes a HIPAA Breach that triggers Breach Notification Rule reports and notifications. A Ransomware attack is automatically presumed to be a HIPAA Breach unless you do a HIPAA Breach Risk Assessment that demonstrates the attack resulted in only a low probability of compromise to the affected protected health information (PHI). This webinar explains how to do a Ransomware HIPAA Breach Risk Assessment. The Problem Solved by this Webinar The HHS Office for Civil Rights (OCR) declared that a breach of unsecured PHI is presumed to have occurred when electronic protected health information (ePHI) is encrypted as the result of a ransomware attack on a HIPAA-regulated entity (health care provider, health plan, health care clearinghouse, or business associate). The entity must then comply with the applicable breach notification provisions, including notifying affected individuals without unreasonable delay, the Secretary of HHS, and the media (for breaches affecting over 500 individuals), in accordance with HIPAA breach notification requirements. However, it is not a breach if the ransomware-victimized entity can demonstrate that there is a low probability that the encrypted ePHI has been compromised. This webinar explains how to do that. Areas Covered in the Webinar A Breach Risk Assessment can determine whether a ransomware attack is a breach of unsecured ePHI, triggering embarrassing reports and notifications. Factors that can be applied in performing a Breach Risk Assessment. OCR’s guidance about specific factors that can demonstrate a low probability of compromise to ePHI encrypted by a ransomware attack. How to perform a Breach Risk Assessment step-by-step. How to document a Breach Risk Assessment and why you must document it. What to do if you cannot demonstrate a low probability of compromise to ePHI. Why You Should Attend This Webinar Attend this webinar to learn how to perform a Breach Risk Assessment with a special emphasis on ransomware attacks. Ransomware attacks may have only a low probability of compromising ePHI. A Breach Risk Assessment can determine whether a ransomware attack resulted only in a low probability of compromise to ePHI and provide Covered Entities and Business Associates with Documentation to overcome the presumption that the ransomware attack was a Breach.. Who Will Benefit Health Care Covered Entities HIPAA Compliance Officials – Privacy and Security Officers Chief Compliance Officer Practice Managers Health Information Technology Supervisors Risk Managers Group Health Plan Administrators Third Party Group Health Plan Administrators Covered Entity Senior Management and Owners Health Care Providers practicing as individuals or in small groups Attorneys for Covered Entities – In-house and Outside Counsel Business Associates HIPAA Compliance Officials – Privacy and Security Officers Chief Compliance Officer Business Associate Senior Management and Owners Risk Managers Attorneys for Business Associates – In-house and Outside Counsel

HIPAA in 2026: What Changed, What’s Coming, and What It Means for Your Organization
Compliance Webinars
Live Webinar

HIPAA in 2026: What Changed, What’s Coming, and What It Means for Your Organization

Over the last few years, the U.S. Department of Health and Human Services, Office for Civil Rights has made modifications to patient privacy requirements. The agency is on track for enhancing care coordination, empowering patients, and reducing administrative burden. In addition, on the Security Rule side, the agency released a proposed rule to overhaul significant requirements and make cybersecurity safeguards a priority. Knowing what an organization must do to meet these new regulatory requirements can be challenging. The webinar will address what has already changed in privacy, cover proposed Privacy Rule modifications, and cover the Security Rule overhaul proposals. Timeline and compliance implications will be covered. After completing this webinar, a Covered Entity or Business Associate will have a clear understanding of what has changed and what will change. Objectives Who Must Comply with HIPAA Requirements? What are the HIPAA Security and Privacy Rules? What Has Already Changed in Privacy? What are the Proposed Privacy Rule Modifications? What are the proposed Security Rule modifications? What is the Timeline & Compliance Implications? What recommendations should be followed now? Q&A Webinar Highlights Learn from an expert on the implementation of the HIPAA rules Understand what the HIPAA management process currently requires Learn how to implement these changes for your organization Who Should Attend Compliance Officer HIPAA Privacy Officer HIPAA Security Officer Medical/Dental Office Managers Practice Managers Information Systems Manager Chief Information Officer General Counsel/lawyer Practice Management Consultants Any Business Associates that access protected health information

Pros & Cons of Outsourcing Revenue Cycle Functions: What You Need to Consider
Compliance Webinars
Live Webinar

Pros & Cons of Outsourcing Revenue Cycle Functions: What You Need to Consider

Many providers have considered outsourcing functions in the revenue cycle. Like all businesses, some third-party companies do excellent work for providers, but there may be others that look for ways to take advantage of their provider. Outsourcing has its own pros & cons that must be carefully considered. We will review major common areas that providers must weigh strategically before making a decision whether to outsource and selecting the best partner for your needs. It is vital providers know exactly who is handling their claims and what they are doing with their information. Definitions of third-party vendors Legal responsibilities of the provider Common industry trends Important questions to ask vendors & contractors Who Will Benefit Physicians Practice managers Medical assistants Nurses Compliance staff Billers Coders Revenue Cycle Risk Management Mid level providers