(215 ILCS 134/85)
    (Text of Section before amendment by P.A. 103-650 and 103-656)
    Sec. 85. Utilization review program registration.
    (a) No person may conduct a utilization review program in this State unless once every 2 years the person registers the utilization review program with the Department and certifies compliance with the Health Utilization Management Standards of the American Accreditation Healthcare Commission (URAC) sufficient to achieve American Accreditation Healthcare Commission (URAC) accreditation or submits evidence of accreditation by the American Accreditation Healthcare Commission (URAC) for its Health Utilization Management Standards. Nothing in this Act shall be construed to require a health care plan or its subcontractors to become American Accreditation Healthcare Commission (URAC) accredited.
    (b) In addition, the Director of the Department, in consultation with the Director of the Department of Public Health, may certify alternative utilization review standards of national accreditation organizations or entities in order for plans to comply with this Section. Any alternative utilization review standards shall meet or exceed those standards required under subsection (a).
    (b-5) The Department shall recognize the Accreditation Association for Ambulatory Health Care among the list of accreditors from which utilization organizations may receive accreditation and qualify for reduced registration and renewal fees.
    (c) The provisions of this Section do not apply to:
        (1) persons providing utilization review program
    
services only to the federal government;
        (2) self-insured health plans under the federal
    
Employee Retirement Income Security Act of 1974, however, this Section does apply to persons conducting a utilization review program on behalf of these health plans;
        (3) hospitals and medical groups performing
    
utilization review activities for internal purposes unless the utilization review program is conducted for another person.
    Nothing in this Act prohibits a health care plan or other entity from contractually requiring an entity designated in item (3) of this subsection to adhere to the utilization review program requirements of this Act.
    (d) This registration shall include submission of all of the following information regarding utilization review program activities:
        (1) The name, address, and telephone number of the
    
utilization review programs.
        (2) The organization and governing structure of the
    
utilization review programs.
        (3) The number of lives for which utilization review
    
is conducted by each utilization review program.
        (4) Hours of operation of each utilization review
    
program.
        (5) Description of the grievance process for each
    
utilization review program.
        (6) Number of covered lives for which utilization
    
review was conducted for the previous calendar year for each utilization review program.
        (7) Written policies and procedures for protecting
    
confidential information according to applicable State and federal laws for each utilization review program.
    (e) (1) A utilization review program shall have written procedures for assuring that patient-specific information obtained during the process of utilization review will be:
        (A) kept confidential in accordance with applicable
    
State and federal laws; and
        (B) shared only with the enrollee, the enrollee's
    
designee, the enrollee's health care provider, and those who are authorized by law to receive the information.
    Summary data shall not be considered confidential if it does not provide information to allow identification of individual patients or health care providers.
    (2) Only a health care professional may make determinations regarding the medical necessity of health care services during the course of utilization review.
    (3) When making retrospective reviews, utilization review programs shall base reviews solely on the medical information available to the attending physician or ordering provider at the time the health care services were provided.
    (4) When making prospective, concurrent, and retrospective determinations, utilization review programs shall collect only information that is necessary to make the determination and shall not routinely require health care providers to numerically code diagnoses or procedures to be considered for certification, unless required under State or federal Medicare or Medicaid rules or regulations, but may request such code if available, or routinely request copies of medical records of all enrollees reviewed. During prospective or concurrent review, copies of medical records shall only be required when necessary to verify that the health care services subject to review are medically necessary. In these cases, only the necessary or relevant sections of the medical record shall be required.
    (f) If the Department finds that a utilization review program is not in compliance with this Section, the Department shall issue a corrective action plan and allow a reasonable amount of time for compliance with the plan. If the utilization review program does not come into compliance, the Department may issue a cease and desist order. Before issuing a cease and desist order under this Section, the Department shall provide the utilization review program with a written notice of the reasons for the order and allow a reasonable amount of time to supply additional information demonstrating compliance with requirements of this Section and to request a hearing. The hearing notice shall be sent by certified mail, return receipt requested, and the hearing shall be conducted in accordance with the Illinois Administrative Procedure Act.
    (g) A utilization review program subject to a corrective action may continue to conduct business until a final decision has been issued by the Department.
    (h) Any adverse determination made by a health care plan or its subcontractors may be appealed in accordance with subsection (f) of Section 45.
    (i) The Director may by rule establish a registration fee for each person conducting a utilization review program. All fees paid to and collected by the Director under this Section shall be deposited into the Insurance Producer Administration Fund.
(Source: P.A. 99-111, eff. 1-1-16.)
 
    (Text of Section after amendment by P.A. 103-650 and 103-656)
    Sec. 85. Utilization review program registration.
    (a) No person may conduct a utilization review program in this State unless once every 2 years the person registers the utilization review program with the Department and provides proof of current accreditation for itself and its subcontractors with the Health Utilization Management Standards of the Utilization Review Accreditation Commission, the National Committee for Quality Assurance, or another accreditation entity authorized under this Section.
    (b) In addition, the Director of the Department, in consultation with the Director of the Department of Public Health, may certify alternative utilization review standards of national accreditation organizations or entities in order for plans to comply with this Section. Any alternative utilization review standards shall meet or exceed those standards required under subsection (a).
    (b-5) The Department shall recognize the Accreditation Association for Ambulatory Health Care among the list of accreditors from which utilization organizations may receive accreditation and qualify for reduced registration and renewal fees.
    (b-10) Utilization review programs that use algorithmic automated processes to decide whether to render adverse determinations based on medical necessity in the course of utilization review shall use objective, evidence-based criteria compliant with the accreditation requirements of the Health Utilization Management Standards of the Utilization Review Accreditation Commission or the National Committee for Quality Assurance (NCQA) and shall provide proof of such compliance to the Department with the registration required under subsection (a), including any renewal registrations. Nothing in this subsection supersedes paragraph (2) of subsection (e). The utilization review program shall include, with its registration materials, attachments that contain policies and procedures:
        (1) to ensure that licensed physicians with relevant
    
board certifications establish all criteria that the algorithmic automated process uses for utilization review; and
        (2) for a program integrity system that, both before
    
new or revised criteria are used for utilization review and when implementation errors in the algorithmic automated process are identified after new or revised criteria go into effect, requires licensed physicians with relevant board certifications to verify that the algorithmic automated process and corrections to it yield results consistent with the criteria for their certified field.
    (c) The provisions of this Section do not apply to:
        (1) persons providing utilization review program
    
services only to the federal government;
        (2) self-insured health plans under the federal
    
Employee Retirement Income Security Act of 1974, however, this Section does apply to persons conducting a utilization review program on behalf of these health plans;
        (3) hospitals and medical groups performing
    
utilization review activities for internal purposes unless the utilization review program is conducted for another person.
    Nothing in this Act prohibits a health care plan or other entity from contractually requiring an entity designated in item (3) of this subsection to adhere to the utilization review program requirements of this Act.
    (d) This registration shall include submission of all of the following information regarding utilization review program activities:
        (1) The name, address, and telephone number of the
    
utilization review programs.
        (2) The organization and governing structure of the
    
utilization review programs.
        (3) The number of lives for which utilization review
    
is conducted by each utilization review program.
        (4) Hours of operation of each utilization review
    
program.
        (5) Description of the grievance process for each
    
utilization review program.
        (6) Number of covered lives for which utilization
    
review was conducted for the previous calendar year for each utilization review program.
        (7) Written policies and procedures for protecting
    
confidential information according to applicable State and federal laws for each utilization review program.
    (e) (1) A utilization review program shall have written procedures for assuring that patient-specific information obtained during the process of utilization review will be:
        (A) kept confidential in accordance with applicable
    
State and federal laws; and
        (B) shared only with the enrollee, the enrollee's
    
designee, the enrollee's health care provider, and those who are authorized by law to receive the information.
    Summary data shall not be considered confidential if it does not provide information to allow identification of individual patients or health care providers.
    (2) Only a clinical peer may make adverse determinations regarding the medical necessity of health care services during the course of utilization review. Either a health care professional or an accredited algorithmic automated process, or both in combination, may certify the medical necessity of a health care service in accordance with accreditation standards. Nothing in this subsection prohibits an accredited algorithmic automated process from being used to refer a case to a clinical peer for a potential adverse determination.
    (3) When making retrospective reviews, utilization review programs shall base reviews solely on the medical information available to the attending physician or ordering provider at the time the health care services were provided. This paragraph includes billing records and diagnosis or procedure codes that substantively contain the same medical information to an equal or lesser degree of specificity as the records the attending physician or ordering provider directly consulted at the time health care services were provided.
    (4) When making prospective, concurrent, and retrospective determinations, utilization review programs shall collect only information that is necessary to make the determination and shall not routinely require health care providers to numerically code diagnoses or procedures to be considered for certification, unless required under State or federal Medicare or Medicaid rules or regulations, but may request such code if available, or routinely request copies of medical records of all enrollees reviewed. During prospective or concurrent review, copies of medical records shall only be required when necessary to verify that the health care services subject to review are medically necessary. In these cases, only the necessary or relevant sections of the medical record shall be required.
    (f) If the Department finds that a utilization review program is not in compliance with this Section, the Department shall issue a corrective action plan and allow a reasonable amount of time for compliance with the plan. If the utilization review program does not come into compliance, the Department may issue a cease and desist order. Before issuing a cease and desist order under this Section, the Department shall provide the utilization review program with a written notice of the reasons for the order and allow a reasonable amount of time to supply additional information demonstrating compliance with requirements of this Section and to request a hearing. The hearing notice shall be sent by certified mail, return receipt requested, and the hearing shall be conducted in accordance with the Illinois Administrative Procedure Act.
    (g) A utilization review program subject to a corrective action may continue to conduct business until a final decision has been issued by the Department.
    (h) Any adverse determination made by a health care plan or its subcontractors may be appealed in accordance with subsection (f) of Section 45.
    (i) The Director may by rule establish a registration fee for each person conducting a utilization review program. All fees paid to and collected by the Director under this Section shall be deposited into the Insurance Producer Administration Fund.
(Source: P.A. 103-650, eff. 1-1-25; 103-656, eff. 1-1-25.)