THE CENTER FOR MEDICARE AND MEDICAID SERVICES (“CMS”) 2023 Program Audit Process Overview came out recently. The report is published by the Division of Audit Operations. CMS will send engagement letters to initiate routine audits beginning February 2023 through July 2023. Engagement letters for ad hoc audits may be sent at any time throughout the year. The program areas for the 2023 audits include:
- CDAG: Part D Coverage Determinations, Appeals, and Grievances
- CPE: Compliance Program Effectiveness
- FA: Part D Formulary and Benefit Administration
- MMP-SARAG: Medicare-Medicaid Plan Service Authorization Requests, Appeals, and Grievances
- MMPCC: Medicare-Medicaid Plan Care Coordination
- ODAG: Part C Organization Determinations, Appeals, and Grievances
- SNPCC: Special Needs Plans Care Coordination
The Program Audit Process document is only 13 pages. Yet, it is supposed to set forth the rules that the auditors must abide by in 2023. My question is – what if they don’t. What if the auditors fail to follow proper procedure.
For example, similarly to last year, an audit consists of 4 phases.
- Audit engagement and universe submission
- Audit field work
- Audit reporting
- Audit validation and close out
I would like to add another phase. Phase 5 is appeal.
According to the Report, and this is a quote: “the Audit Engagement and Universe Submission (which is the 1st stage) is a six-week period prior to the field work portion of the audit. During this phase, a Sponsoring organization is notified that it has been selected for a program audit and is required to submit the requested data, which is outlined in the respective Program Audit Protocol and Data Request document.” My question is: The sponsoring organization? CMS is referring to the provider who getting audited as a sponsoring organization. And why does CMS call the provider who is getting audited sponsoring? Is it because after the audit the sponsoring organization will be paying in recoupments?
It is interesting that the first phase “Audit Engagement and Universe Submission,” lasts 6 weeks. At this point, I want to know, does the provider know that the facility has been targeted for an audit? As an attorney, I get to see the process in the aftermath. Folks call me in distress because they got the results of an audit and disagree. I have never had the opportunity to be involved from the get go. So, if any of y’all receive a notice of an audit, please call me. I won’t charge you. I just would love the experience of walking through an audit from the get go. I think it would make me better at my job.
In other news, as you know, CMS may issue civil money penalties to providers for alleged noncompliance. Other penalties exist as well, which may or may not be worse that civil penalties. On January 23, 2023, CMS published a correction that Total Longterm Care, Inc. d/b/a InnovAge Colorado PACE (InnovAge CO) corrected its violations. In 2021, CMS had suspended its ability to re-enroll. Another facility was imposed with pre-payment review, which means that the facility must submit claims to an auditor prior to receiving reimbursements. Pre-payment review is probably the worse penalty in existence. A client of mine was told yesterday that pre-payment review is imminent. The only recourse for pre-payment review is a federal or State injunction Staying the suspension of reimbursements. You cannot appeal being placed on pre-payment review. But you do have a chance to Stay the suspension. The suspension makes no sense to me. It’s as if the government is saying that you are guilty before an ability to prove innocence.
Extrapolated audits are the worst.
These audits under sample and over extrapolate – almost to the point that some audits allege that you owe more than you were paid. How is that fair in our judicial system? I mean, our country was founded on “due process.” That means you have a right to life, liberty, and the pursuit of happiness. If the government attempts to pursue your reimbursements at all, much less a greater amount than what you received, you are required notice and a hearing.
Not to mention that OIG conducted a Report back in 2020 that identified numerous mistakes in the extrapolations. The Report stated: “CMS did not always provide sufficient guidance and oversight to ensure that these reviews were performed in a consistent manner.” I don’t know about you, but that is disconcerting to me. It also stated that “The test was associated with at least $42 million in extrapolated overpayments that were overturned in fiscal years 2017 and 2018. If CMS did not intend that the contractors use this procedure, these extrapolations should not have been overturned. Conversely, if CMS intended that contractors use this procedure, it is possible that other extrapolations should have been overturned but were not.“
I have undergone hundreds of Medicare and Medicaid audits with extrapolations. You defend against these audits twofold: 1) by hiring an expert statistician to debunk the extrapolation; and 2) by using the provider as an expert clinician to discredit the denials. However, I am always dismayed…maybe that’s not the right word…flabbergasted that no one ever shows up on the other side. It is as if CMS via whatever contractor conducted the extrapolated audit believes that their audit needs no one to prove its veracity. As if we attorneys and providers should just accept their findings as truth, and they get the benefit of NOT hiring a lawyer and NOT showing up to ALJ trials.
In the above picture, the side with the money is CMS. The empty side is the provider.
In normal trials, as you know, there are two opposing sides: a Plaintiff and a Defendant, although in administrative law it’s called a Petitioner and a Respondent. Medicaid provider appeals also have two opponents. However, in Medicare provider appeals, there is only one side: YOU. An ALJ will appear, but no auditor to defend the merits of the alleged overpayment that you, as a provider, are accused of owing.
In normal trials, if a party fails to appear, the Judge will almost automatically rule against the non-appearing party. Why isn’t it the same for Medicare provider appeals? If a Medicare provider appears to dispute an alleged audit, the Judge does not rule automatically in favor of the provider. Quite the opposite quite frankly. The CMS Rules, which apply to all venues under the purview of CMS, which includes the ALJ level and the Medicare Appeals Council level, are crafted against providers, it seems. Regardless the Rules create a procedure in which providers, not the auditors, are forced to retain counsel, which costs money, retain a statistician in cases of extrapolations, which costs money, go through years of appeals through 5 levels, all of which the CMS Rules apply. Real law doesn’t apply until the district court level, which is a 6th level – and 8 years later.
Any providers reading, who retain lobbyists, this Medicare appeal process needs to change legislatively.
As you know, many States have expanded Medicaid. I am not saying whether that is good or bad. Just that some have expanded and some States have not. NC is one that has not expanded Medicaid. NC’s Department for Medicaid received a Waiver from CMS to extend Medicaid and the Children’s Health Insurance Program (CHIP) coverage for 12 months after pregnancy. As a result, up to an additional 28,000 people will now be eligible for Medicaid or CHIP for a full year after pregnancy in North Carolina. CMS gave its blessing or Waiver to 24 States. An estimated 361,000 Americans annually are now eligible for 12 months of postpartum coverage. If all states adopted this option, as many as 720,000 people across the United States would be guaranteed Medicaid and CHIP coverage for 12 months after pregnancy.
CHIP piggybacks Medicaid for children. Not adults. But so does EPSDT. The Early and Periodic Screening, Diagnostic and Treatment (EPSDT) benefit provides comprehensive and preventive health care services for children under age 21 who are enrolled in Medicaid. As a hospital or any provider, if you serve children and get your claims denied, EPSDT should overturn your denials. Check your compliance department. If claims are getting denied for children 21 years of age or younger, then you should be disputing these denials based on EPSDT.
CHIP differs from Medicaid EPSDT. There can be premiums or cost sharing with CHIP. CHIP is also a pre-set amount; whereas, Medicaid EPSDT creates exceptions for those in need under 21.
CHIP was designed to cover children who fall outside of Medicaid eligibility, but who otherwise were not able to be insured through a family plan. This program vastly increased the number of children eligible for health insurance. However, CHIP is not governed by the same legislation as Medicaid and offers drastically different levels of coverage.
Certain states have different names for their Medicaid and CHIP programs. For example, in California, both programs are called Medi-Cal. In Georgia, Medicaid is called Georgia Medical Assistance, and their CHIP program is called PeachCare for Kids.
Medicaid and CHIP provide 51% of health care to our nation’s youth – more than 40 million children.
In the last few months, CMS has published numerous bulletins regarding the importance of EPSDT, especially germane to mental health.
The Centers for Medicare & Medicaid Services (“CMS”) has modified the additional documentation request (“ADR”) limits for the Medicare Fee-for-Service Recovery Audit Contractor (“RAC”) program for suppliers. Yet, one of our listeners informed me that CMS has found a “work around” from the RAC ADR limits. She said, “There is the nationwide Supplemental Medical Review Contractor (“SMRC”) audits and now nationwide Quality Improvement Organizations (“QIO”) contract audits. These contracts came about after the Congressional limits on number of audits by the RAC.” Dr. Hirsh retorted, “But SMRC and QIO are not paid contingency fee. So, they are “different” audits. RACs are evil; SMRC and QIO have a few redeeming qualities.” I completely agree with Dr. Hirsh. But her point is well taken – SMRCs and QIOs follow different rules than RACs, so of course the SMRCs and QIOs have distinct ADR limits.
This is similar to the lookback periods. The lookback period varies depending on the acronym: RAC, MAC, or UPIC. RACs’ lookback period is 3 years, yet other acronyms get longer periods. I think what Dr. Hirsh is saying is right, because RACs are paid by contingency instead of a contracted rate, we have to limit the RACs authority because they are already incentivized the find problems., plus they are allowed to extrapolate. The RACs already have too much leash.
So, what are the RAC ADR limits?
Well, interestingly they just changed in April 2022. These limits will be set by CMS on a regular basis to establish the maximum number of medical records that may be requested by a RAC, per 45-day period. Each limit will be based on a given supplier’s volume of Medicare claims paid within a previous 12-month period, in a particular Healthcare Common Procedure Coding System (HCPCS) policy group. The policy groups are available on the pricing, coding analysis, and coding (PDAC), website. Limits will be based on the supplier’s Tax Identification Number (TIN). Limits will be set at 10% of all paid claims, by policy group, paid within a previous 12-month period, divided into eight periods (45 days). Although a RAC may go more than 45 days between record requests, in no case shall a RAC make requests more frequently than every 45 days. Limits are based on paid claims, irrespective of individual lines, although credit/replacement pairs shall be considered a single claim.
I wanted to go into the SMRCs and QIOs’ ADR limits to see whether they are are following THEIR rules, but I’m out of time for today. I’ll research the SMRCs and QIOs ADR limits for next week and I will have an answer for you.
Attorney Ryan Hargrave joined the Practus Health Care Litigation team on June 1, 2022. Ryan comes from a career of litigation in the State of North Carolina. He began his career in 2016 as a Prosecutor for the State of North Carolina, Guilford County. There he gained valuable experience from which he used as he moved to defending clients. He served as the Lead Trial Attorney at Triad Legal Group before joining Graystar Legal as the Senior Associate Attorney.
Ryan obtained his undergraduate degree at Presbyterian College in Clinton, SC., where he received a B.A. in Political Science and a minor in Biology. Ryan has always had a keen interest in health care which has followed him throughout his career. He is locally known as the “Drug Lawyer” for his focus in the defense of drug-related crimes. He has a reputable proficiency in Cannabis Law, Criminal Law, and Civil Law across State and Federal Courts. Ryan has extensive trial experience that he brings to the Health Care Litigation team at Practus.
Ryan lives in North Carolina with his family, spending his time working out, making financial investments, and beginning his non-profit business, “Colored Money”. His non-profit will focus on teaching young boys and girls the value of money as a vehicle to achieve wealth, making smart investments, and how to achieve financial freedom. He is a big Georgia football fan and even has an English Bulldog that could serve as the team’s mascot.
Note from me:
I expect Ryan to dovetail and expand my Medicare and Medicaid regulatory compliance practice because his litigation experience will directly help me in litigation natters, but, also, his criminal litigation experience will also allow us to represent more White Collar Crime clients, including Medicare and Medicaid fraud accusations, False Claims Act, Stark, and Anti-Kickback alleged violations.
We are happy that he is here!
The Centers for Medicare & Medicaid Services (CMS) announced that they have modified the additional documentation request (ADR) limits for the Medicare Fee-for-Service Recovery Audit Contractor (RAC) program for suppliers. ADRs are the about of documents that a RAC auditor can demand from you. This is a win for DME providers.
Currently, the RAC’s methodology is based on a total claim number by NPI without consideration for the number of claims in a particular product category. This means that suppliers can receive large volumes of RAC audits for a product category in which they do minimal business.
These new limits will be set by CMS on a regular basis to establish the maximum number of medical records that may be requested by a RAC, per 45-day period. These changes will be effective beginning April 1, 2022.
Each limit will be based on a given supplier’s volume of Medicare claims paid within a previous 12-month period, in a particular HCPCS policy group (The policy groups are available on the PDAC website). Limits will be based on the supplier’s Tax Identification Number (TIN). Limits will be set at 10% of all paid claims, by policy group, paid within a previous 12-month period, divided into eight periods (45 days). If you get more than the allowed ADRs, call them out. These limits are created to lessen the burden on providers.
Although a RAC may go more than 45 days between record requests, in no case shall a RAC make requests more frequently than every 45 days. Limits are based on paid claims, irrespective of individual lines, although credit/replacement pairs shall be considered a single claim.
- Supplier A had 1,253 claims paid with HCPCS codes in the “surgical dressings” policy group, within a previous 12-month period. The supplier’s ADR limit would be (1,253 * 0.1) / 8 = 15.6625, or 16 ADRs, per 45 days, for claims with HCPCS codes in the “surgical dressings” policy group.
- Supplier B had 955 claims paid with HCPCS codes in the “glucose monitor” policy group, within a previous 12-month period. The supplier’s ADR limit would be (955 * 0.1) / 8 = 11.9375 or 12 ADRs, per 45 days, for claims with HCPCS codes in the “glucose monitor” policy group.
CMS reserves the right to give a RAC permission to exceed these ADR limits. But that would be in instances of potential fraud.
Today I want to discuss the Medicare appeal process and its faults. Upon undergoing a Medicare audit by Safeguard or whichever auditor contracted by CMS, a provider usually receives a notice of overpayment. The 5-level appeal process is flawed as the first two levels rubber-stamp the findings. After the second level of appeal – the QIC level to the ALJ – recoupment occurs unless the provider set up an extended repayment schedule (ERS) or files for an injunction in federal court based on a taking of a property right; i.e., the right to reimbursement for services rendered.
Everyone deserves to be paid for medically necessary services rendered. The conundrum here is that the circuit courts are split as to the protections a provider deserves.
Whenever a federal injunction is filed, the Defendant auditor files a Motion to Dismiss based on (1) failure to exhaust administrative remedies and that the Medicare Act requires the administrative process; therefore, the federal court has no jurisdiction. The provider will argue that the federal action is ancillary to the substantive issue of whether the overpayment was in error and that its protected property right is being taken without due process.
A new case rendered October 1, 2021, Integrity Social Work Services, LCSW, LLC. V. Azar, 2021 WL 4502620 (E.D.N.Y 2021) straddles the fence on the issues. The EDNY falls within the 2nd circuit, which is undecidedly split. The 5th Circuit is, as well, split. District courts across the country are split on whether Medicare providers have a protected property interest in Medicare payments subject to recoupment. Several courts have found that the Medicare Act does create such a property right, including NC, 4th Circuit, Texas, Florida, Ohio, and Illinois, to name a few.
This provider was accused of an alleged overpayment of about 1 million. It argued that because it will not receive a prompt ALJ hearing that it will be driven out of business. This is a harsh and unacceptable outcome that readily occurs in about half the states. Providers should be aware of which State in which it resides and whether that State upholds a providers’ property interest in reimbursements for services rendered.
The Integrity Social Work Court found that, yes, jurisdiction in federal court was proper because the claims were ancillary to the substantive claims that would be heard by the ALJ. The provider was asking for a temporary stay of the recoupments until an ALJ hearing was concluded. As you read the case, you get false hope on the ruling. In the end, Judge Peggy Kuo found “Nor is the process to contest an overpayment or a recoupment decision arbitrary, outrageous, or even inadequate.”
Respectfully, I disagree. As does half the other courts. See, e.g., Accident, Injury & Rehab., PC v. Azar, No. 4:18-CV-2173 (DCC), 2018 WL 4625791, at *7 (D.S.C. Sept. 27, 2018); Adams EMS, Inc. v. Azar, No. H-18-1443, 2018 WL 3377787, at *4 (S.D. Tex. July 11, 2018); Family Rehab., Inc. v. Azar, No. 3:17-CV-3008-K, 2018 WL 3155911, at *4-5 (N.D. Tex. June 28, 2018). Juxtapose other courts have found that no such property interest exists. See, e.g., Alpha Home Health Solutions, LLC v. Sec’y of United States Dep’t of Health & Human Servs., 340 F. Supp. 3d 1291, 1303 (M.D. Fla. 2018); Sahara Health Care, Inc. v. Azar, 349 F. Supp. 3d 555, 572 (S.D. Tex. 2018); PHHC, LLC v. Azar, No. 1:18-CV-1824, 2018 WL 5754393, at *10 (N.D. Ohio Nov. 2, 2018); In Touch Home Health Agency, Inc. v. Azar, 414 F. Supp. 3d 1177, 1189-90 (N.D. Ill. 2019).
Providers – If you bring a claim to cease the recoupment, also sue on behalf of your Medicare beneficiaries’ property rights to freedom of choice of provider and access to care. Their rights are even stronger than the providers’ rights. I did this in Bader in Indiana and won based on the recipients’ rights.
A ZPIC audited a client of mine a few years ago and found an alleged overpayment of over $7 million. Prior to them hiring my team, they obtained a preliminary injunction in federal court – like I always preach to do – remember, that between the levels 2 and 3 of a Medicare provider appeal, CMS can recoup the alleged overpayment. This is sheer balderdash; the government should not be able to recoup funds that the provider, most likely, doesn’t owe. But this is the law. I guess we need to petition Congress to change this tomfoolery.
Going back to the case, an injunction stops the premature recoupments, but it does nothing regarding the actual alleged overpayments. In fact, the very reason that you can go to federal court based on an administrative action is because the injunction is ancillary to the merits of the contested case. Otherwise, you would have to exhaust your administrative remedies.
Here, we asserted, the premature recoupments (1) violated its rights to procedural due process, (2) infringed its substantive due-process rights, (3) established an “ultra vires” cause of action, and (4) entitled it to a “preservation of rights” injunction under the Administrative Procedure Act, 5 U.S.C. §§ 704–05. We won the battle, but not the war. To date, we have no date for an administrative law judge (“ALJ”) – or level 3 – hearing on the merits.
For those of you who have participated in a third-level, Medicare provider appeal will know that, many times, no one shows for the other side. The other side being the entity claiming that you owe $7million. For such an outlandish claim of $7 million, would you not think that the side protesting that you owe $7 million would appear and try to prove it? At my most recent ALJ hearing, no one appeared for the government. Literally, my client – a facility in NJ that serves the MS population – me and the ALJ were the only participants. Are the auditors so falsely confident that they believe their audits speaks for itself?
In this particular case, the questionable issue was whether the MS provider’s consumers met the qualifications for the skilled rehabilitation due to no exacerbated physical issues. However, we all know from the Jimmo settlement, that having exacerbated issues or improvement is not a requirement to requiring skilled rehab versus exercising with your spouse. The ALJ actually said – “I cannot believe this issue has gotten this far.” I agree.
Today I want to discuss EHR – electronic health records and RAC audits. We all remember the government pushing providers into purchasing EHR. It’s known as the meaningful use (MU) program, which is now known as the Promoting Interoperability Programs. CMS initially provided 10 incentives to accelerate the adoption of EHRs to meet program requirements. Now, physicians who fail to participate in MU will receive a penalty in the form of reduced Medicare reimbursements, at a minimum. Multiple audits at a maximum. Physicians must use certified electronic health records technology (CEHRT) and demonstrate meaningful use through an attestation process at the end of each MU reporting period to avoid the penalty.
Audits for MU can equal tens of thousands of dollars. The monetary amount is not as high as other RAC audits for medical records. One of my clients is a pediatric facility in Georgia. His facility received an alleged overpayment of $34,000 for two of his physicians not meeting the meaningful use criteria 8 and 9. We were going to fight it, but the two physicians who were dinged had quit and would not testify positively on behalf of my client. Plus, attorneys’ fees would surpass the penalty. Criteria 8 and 9 constitute proving your consumer have email and actually open their emails to check their health care internet folders, which are ridiculous criteria.
On September 2, 2020, CMS published the Fiscal Year (FY) 2021 Medicare Hospital Inpatient Prospective Payment System (IPPS) for Acute Care Hospitals and Long-Term Care Hospital (LTCH) Prospective Payment System (PPS) Final Rule which included program requirements for calendar year (CY) 2021. In this final rule, CMS continued its advancement of EHR utilization, focusing on burden reduction, and improving interoperability, and patient access to health information.
Meaningful use’s not anticipated consequence is ramping up RAC audits. Many RAC auditors are using EHR to claim “copy and paste.” Obviously, the point of EHR is to morph all service notes into a certain standard-looking note. But standard-looking notes scream copy and paste to RAC auditors. Maybe RAC auditors haven’t digested meaningful use yet.
On August 2, 2021 CMS released the Fiscal Year (FY) 2022 Medicare Hospital Inpatient Prospective Payment System for Acute Care Hospitals and Long-term Care Hospital Prospective Payment System Final Rule. For more information on the proposed changes, visit the Federal Register.
COVID affected EHR audits too.
The deadline for eligible hospitals and critical access to submit a hardship exception application is September 1, 2021.