Blog Archives

In Medicare Provider Audits, the Best Defense Is a Good Offense

Today I want to discuss upcoming 2024 audits. It has been almost four years since the world shut down due to COVID. Life has been divided into “before COVID” and “after COVID.” Before COVID, the Centers for Medicare and Medicaid Services (CMS) aggressively pursued audits against durable medical equipment suppliers, home health, hospice, behavioral health, long term care facilities and hospitals. When COVID hit, most audits were paused. But not for long. As you know, CMS resumed its audit activities as early as August 2020. However, in the world of COVID, there were exceptions to every rule, many of which were state specific. Even exceptions had exceptions. It is imperative that you maintain for your type of health care service every policy, exceptions, bulletins, advisory opinions from 2020 through the present. If you have not assigned this task to someone in your facility, do it today.

We have seen an uptick in increased audit activity with pneumonic compression devices (PCDs). PCDs were not listed in the top error rates for the 2021 Improper Payment Report, but in the 2023 report, PCD’s have the second highest error rate behind oral cancer drugs at 78.9%. With an error rate that high, PCD’s will be a focal point of audits. Other items identified in the 2023 improper payment report for having high error rates include urological supplies, parenteral and enteral nutrition, manual wheelchairs, and various orthoses. These items will all see increased audit activity in the upcoming year. Basically, as long as the error rates remain high, audit activity will continue.

Surgical dressings have also been consistently audited. Surgical dressings are relatively a complex product to bill. DME suppliers of surgical dressings and physicians who order surgical dressings are seeing an uptick in denials. The 2021 Medicare fee for service supplemental improper payment report covering claims from July 1st, 2019, through June 30th 2020, listed surgical dressings as having the highest improper payment rate at 69.7%, followed closely by therapeutic shoes with an error rate of 67.9%. Since then, there has not been much improvement. The 2023 Improper Payment Report covering claims submitted between July 1st, 2021, and June 30th, 2022, shows the improper payment rate for surgical dressings is still at 62.1%. Therapeutic shoes did show some improvement with an improper payment rate of 51.4%, but this is still significant. For the 2023 reporting period, insufficient documentation accounted for 82.4% of improper payments for surgical dressings. Other types of errors for surgical dressings were no documentation at 1.9%, medical necessity at 1.7%, incorrect coding at 1.9% and other at 12.2%.

Targeted Probe and Educate (TPE) were some of the first audits resumed by CMS. Recovery Audit Contractor (RAC) audits are also increasing. I consider RACs to be the bounty-hunters of Medicare and Medicaid. Audits of skilled nursing providers are going to see a hike this year, with a growing number of federal and state recovery audits adding to specialized compliance reviews announced last year. In 2023, regulators instituted audits of facilities using potentially inappropriate diagnosis of schizophrenia as well as a new, 5-claim audit of every US nursing home that was specifically meant to root out improper payments. CMS came under additional pressure this past summer. That’s when the Government Accountability Office said the agency needs to do a better job of recouping overpayments. What do we think CMS will do in light of the GAO instructing the agency to do a better job recouping? The answer is: audit more. But, as they say in football, the defense is a good offense. The same is true in Medicare and Medicaid provider appeals. Be prepared.

Medicare Can Force a Whistleblower to Dismiss When Smoking Gun is Smoke and Mirrors

2024 has already proven to be audit heavy. It seems that the repercussions of COVID are beginning to appear. Actions related to COVID, such as audits of dates of service (“DOS”) during COVID are commonplace now. Whistleblower actions also seem to be on the rise.

We have even seen a few qui tam actions going forward even though the government did not intervene, which is rare, to say the least. In most cases, if the government does not intervene, usually, the whistleblower dismisses the case. The last qui tam action that I was worried was going to forward even though the government refused to intervene was a cardiologist practice. The number one reason that these super educated cardiologists were even on the metaphoric chopping block was because English was not the first language of any doctor employed by the practice. Imagine how smart you have to be to not only become a doctor, but to become a doctor in a country where you do not even speak the native language – to me – this is remarkable. The facility at issue employed 9 remarkable cardiologists, and, no surprise, the practice was the best and most desirable in the area. Plus, the practice was undergoing a possible acquisition by a nearby hospital, which was in the best interest of the doctors. The cardiologists were less than stellar business owners, but excellent doctors.

What happened was one of the senior cardiologists wrote an email that the whistleblower and the government, at first, took as a smoking gun. The doctor disseminated the email to everyone. Including the staff. This is what it said,

“…going forward, bill everything at a 99215; no matter what.”

The Feds believed that they had a smoking gun.  Wouldn’t you?

99215 is Procedure Code 99215: Evaluation and Management Description for 40 minutes.

What the good doctor meant was this…COVID is upon us.  Remember that? The times were so crazy and hectic in the health care world, which is why I am infuriated that the government is conducting audits of DOS during COVID. Sorry. Can we not give a “GET OUT OF JAIL FREE card” to all those providers who continued services in the midst of COVID?

What the misunderstood cardiologist meant by saying, “bill everything at a 99215 no matter what” was … we are in midst of COVID; this is worldwide pandemic. We are specialists. We are cardiologists. Anytime someone comes to us, it’s at least a 99214. During COVID, OF COURSE EVERY VISIT IS A 99215.

But that’s not what the government read. Which is why defense lawyers exist.

In this instance, I was afraid that the whistleblower would go forward regardless what the government decided. But I was wrong. Apparently, we were so convincing to the government that the government actually demanded the whistleblower to dismiss.

I did not know this until this case, which was only about 7 years ago, that in rare circumstances, the government can force a whistleblower to dismiss even if the whistleblower is gung ho.

In this case, the whistleblower was “gung ho.” But the government was adamant that there was no fraud since the “smoking gun” was, in reality, neither a gun nor was it smoking.

Since January of 2021, CMS and OIG accept anonymous and confidential whistleblower disclosures. Can you imagine your competitor accusing you of fraud in order to get your consumers? It happens. In fact, next blog, I will tell you a story of two specialized dental practices in Minnesota. And how one practice purposefully and nefariously accuses the other of fraud. That accusation resulted in a two-year reimbursement suspension for the accused practice which resulted in the business closing. The accuser facility is thriving and opened up three new offices. Is this really what are fraud laws are intended to do. The laws are being used to put competitors out of business, not finding fraud.

Knicole Emanuel Presents Webinar January 25, 2024!

A Guide to the RAT-STATS Statistical Software in Medicare and Medicaid

Hosted by: Lorman

Click here to register for the webinar on January 25, 2024, from 1:00pm-2:30pm!

Join Nelson Mullins Raleigh partner Knicole Emanuel for a webinar hosted by Lorman on Jan. 25., 2024. Emanuel will be a speaker at the session entitled “A Guide to the RAT-STATS Statistical Software,” where attendees will learn about key considerations in interpreting sample size results for how to interpret and critically assess key factors influencing the extrapolation process, how to apply theoretical knowledge through practical exercises using RAT-STATS, how to develop a critical mindset for evaluating the reliability and replicability of results; and informed decision-making.

This webinar is available to attend live with available credits for ACHE, HFMA, AHIMA, and NASBA. There will also be an OnDemand Course for this presentation available.

There Is No Law to Be Perfect in Medicare; Just Self-Disclose!

We all know that there is no law, regulation or statute that medical records supporting payment by Medicare or Medicaid must be perfect. There is no mandatory 100% compliant standard. Because humans err. In light of the ongoing financial strain brought about by the pandemic and the constraints imposed by Congress on Medicaid coverage disenrollments, State Medicaid agencies are poised to explore additional audits to manage increasing Medicaid expenditures. Recent developments, such as additional flexibilities granted by CMS, suggest a shifting landscape in how States respond to these challenges.

Anticipating a more assertive approach by States in dealing with service providers, potential measures could include rate cuts and enhanced scrutiny through service audits. This prompts a crucial examination of States’ and providers’ rights under federal Medicaid law to audit service provisions and recover overpayments, a legally intricate and noteworthy domain.

Medicaid RAC Audits are governed by 42 CFR 455 Subpart F—Medicaid Recovery Audit Contractors Program. Other Medicaid alleged overpayments are dictated by 42 CFR Chapter 433.

To establish a foundational understanding, it’s essential to consider the mandate imposed by Congress in section 1902(a)(30)(A) of the Social Security Act. States are required to incorporate provisions in their Medicaid plans to “safeguard against unnecessary utilization of … care and services.” This underscores the federal interest in ensuring responsible use of matching funds, given the federal government’s financial contribution to the program.

A landmark case illustrating the complexities of this mandate is the 1999 decision by the Supreme Judicial Court of Massachusetts in Massachusetts Eye and Ear Infirmary v. Commissioner of Medical Assistance. The court evaluated Massachusetts Medicaid’s retrospective utilization review policy, emphasizing the need for meaningful definitions of terms like “inpatient” and “outpatient” to avoid arbitrary penalties on providers.

Moving to the realm of overpayments, CMS regulations, specifically at 42 C.F.R. § 433.316, provide guidance on how States should proceed when identifying overpayments. The regulations recommend written notification to providers, with states having the discretion to choose whether to notify in cases of suspected fraud. Furthermore, States are required to take “reasonable actions” based on state collections law to recoup overpayments, with a one-year timeframe to return the federal share of identified overpayments to CMS.

Determining when a State “discovers” an overpayment is a critical aspect outlined in the regulations. The discovery is pegged to specific events, such as the state contacting the provider, the provider notifying the state, formal initiation of recoupment, or a federal official identifying the overpayment. Significantly, the regulations focus more on CMS’s relationship with the state than on the state’s relationship with providers.

Recent legal precedents, such as the Wisconsin Supreme Court’s decision in Professional Home Care Providers v. Wisconsin Department of Health Services, underscore the need for states to operate within the bounds of their granted authority. In this case, the court rejected a Medicaid agency’s “perfection” policy, emphasizing that state law must align with CMS regulations in overseeing overpayment recovery.

As States grapple with revenue shortfalls exacerbated by the pandemic, the potential for increased efforts to recoup overpayments from providers looms large. Legal challenges, exemplified by recent decisions in Massachusetts and Wisconsin, underscore the delicate balance States must strike in these endeavors, emphasizing the limits within which they must operate as they navigate the complex terrain of Medicaid law and financial constraints.

Expect audits. Be ready to defend yourself. Self audits are so important. If you self audit and find a problem and self-disclose, you will not receive penalties. Self-disclosures are key. When I told a group of law students this key information, one asked, has you told a client to self-disclose and they refused? To which I said yes. One time. A female doctor informed me that she falsified 7 medical records, I said that she should disclose. She screamed at me in her language, fired me, and hired a new attorney and withheld the information about falsifying records.

She is jail currently.

Laboratories Are Under Scrutiny by OIG and State Medicaid!

Laboratories are under scrutiny by the OIG and State Medicaid Departments. Labs get urine samples from behavioral health care companies, substance abuse companies, hospitals, and primary care facilities, who don’t have their own labs. Owners of labs entrust their lab executives to follow procedure on a federal and/or state level for Medicare or Medicaid. Well, what if they don’t. For example, one client paid a urine collector/courier by the mile. That courier service collected urine from Medicaid consumers in NC, sometimes in excess of 90 times a year, when Medicaid only allows 24 per year. I have about 10-15 laboratory clients at the present.

Another laboratory’s urine collector collected the urine, but never brought the urine back to get tested. To which I ponder, where did all those urine specimens go?

Another laboratory had a standing order for over 6 years to test presumptive and definitive testing on 100% of urine samples.

OIG has smelled fraud within laboratories and is widening its search for fraudsters. Several laboratories are undergoing the most serious audits in existence. Not RAC, MAC, or UPIC audits, but audits of even more importance. They received CIDs or civil investigative demands from their State Medicaid Divisions. These requests, like RAC, MAC, or UPIC audits, request lots of documents. In fact, CIDs are legally allowed to request documents for a much longer period of time than RACs, which can only request 3 years back. Most CIDs are fishing for false claims under the False Claims Act (FCA). Stark and Anti-Kickback violations are also included in these investigations. While civil penalties can result in high monetary penalties, criminal violations result in jail time.

As everyone knows, labs must follow CLIA or be CLIA certified, which is the federal standard for which labs. The Clinical Laboratory Improvement Amendments (CLIA) of 1988 (42 USC 263a) and the associated regulations (42 CFR 493) provide the authority for certification and oversight of clinical laboratories and laboratory testing.  Under the CLIA program, clinical laboratories are required to have the appropriate certificate before they can accept human samples for testing. There are different types of CLIA certificates, as well as different regulatory requirements, based on the types and complexity of clinical laboratory tests a laboratory conducts. CLIA, like CMS, has its own set of rules. When entities like CLIA or CMS have their own rules, sometimes those rules juxtapose law, which creates a conundrum for providers. If you own a lab, do you follow CLIA rules or CMS rules or the law? Let me give you an example. According to CLIA, you must maintain documentation regarding samples and testing for two years. So, if CLIA audits a laboratory, the audits requests will only go back for two years. Well, that’s all fine and dandy. Except according to the law, you have to maintain medical documents for 5 or 6 years, depending on the service type.

Recently, one of my labs received a CID for records going back to 2017. That is a 6-year lookback. Had the lab followed CLIA’s rules, the lab would only have documentation going back to 2021. Had the lab followed CLIA’s rules, when OIG knocked on its door, it would have NOT had four years of OIG’s request. Now I do not know, because I have never been in the position that my lab client only retained records for two years…thank goodness. If I were in the position, I would argue that the lab was following CLIA’s rules. But that’s the thing, rules are not laws. When in doubt, follow laws, not rules.

However, that takes me to Medicare provider appeals of RAC, MAC, and UPIC audits. Everything under the umbrella of CMS must follow CMS rules. Remember how I said that rules are not laws? CMS rules, sometimes, contradict law. Yet when a Medicare provider appeals an overpayment or termination, the first four levels of appeal are mandated to follow CMS rules. It is not until the 5th level, which is the federal district court that law prevails. In other words, the RAC, MAC, or UPIC, the 2nd level QIC, the 3rd level ALJ, and the 4th level Medicare Appeal Council, all must follow CMS rules. It is not until you appear before the federal district judge that law prevails.

Receiving a CID does not mean that your investigation will remain civil. Most investigations begin civilly. If the evidence uncovered demonstrates any criminal activity, your civil investigation can quickly turn criminal. I co-defend with a federal criminal attorney if the case has a chance to turn criminal. Believe me, there is a huge difference between federal and state criminal lawyers! Even with the best federal criminal lawyers, you want a Medicare and Medicaid expert lawyer on the team to dispute the regulatory accusations that a criminal attorney may not be as well-versed. I am so thankful that I moved my practice to Nelson Mullins, because we have a huge, yet highly-specialized health care practice. While we have a large number of lawyers, each partner specializes in slightly different aspects of health care. So, when I need a federal criminal attorney to partner-up with me, I just walk down the hall.

Laboratories: Beware! Be ready! Be prepared! Be lawyered up!

Ding Dong! PHE Is Dead!!!

The federal Public Health Emergency (PHE) for COVID-19, declared under Section 319 of the Public Health Service (PHS) Act, is expiring at the end of the day on May 11, 2023, today! This is huge. There have been thousands of exceptions and waivers due to COVID throughout the last 2 1/2 years. But on the end of the day on May 11, 2023…POOF….

Most exceptions or waivers will immediately cease.

The Department claims it has been working closely with partners—including Governors; state, local, Tribal, and territorial agencies; industry; and advocates—to ensure an orderly transition out of the COVID PHE.

Yesterday, HHS released a Fact Sheet. It is quite extensive, as it should be considering the amount of regulatory compliance changes that will happen overnight!

Since January 2021, COVID deaths have declined by 95% and hospitalizations are down nearly 91%.

There are some flexibilities and actions that will not be affected on May 11.

Access to COVID vaccinations and certain treatments, such as Paxlovid and Lagevrio, will generally not be affected. 

At the end of the PHE on May 11, Americans will continue to be able to access COVID vaccines at no cost, just as they have during the COVID PHE. People will also continue to be able to access COVID treatments just as they have during the COVID PHE.

At some point, the federal government will no longer purchase or distribute COVID vaccines and treatments, payment, coverage, and access may change.

On April 18, 2023, HHS announced the “HHS Bridge Access Program for COVID-19 Vaccines and Treatments.” to maintain broad access to vaccines and treatments for uninsured Americans after the transition to the traditional health care market. For those with most types of private insurance, COVID vaccines recommended by the Advisory Committee on Immunization Practices (ACIP) are a preventive health service and will be fully covered without a co-pay when provided by an in-network provider. Currently, COVID vaccinations are covered under Medicare Part B without cost sharing, and this will continue. Medicare Advantage plans must also cover COVID vaccinations in-network without cost sharing, and this will continue. Medicaid will continue to cover COVID vaccinations without a co-pay or cost sharing through September 30, 2024, and will generally cover ACIP-recommended vaccines for most beneficiaries thereafter.

After the transition to the traditional health care market, out-of-pocket expenses for certain treatments, such as Paxlovid and Lagevrio, may change, depending on an individual’s health care coverage, similar to costs that one may experience for other covered drugs. Medicaid programs will continue to cover COVID treatments without cost sharing through September 30, 2024. After that, coverage and cost sharing may vary by state.

Major telehealth flexibilities will not be affected. The vast majority of current Medicare telehealth flexibilities that people with Medicare—particularly those in rural areas and others who struggle to find access to care—have come to rely upon throughout the PHE, will remain in place through December 2024. Plus, States already have significant flexibility with respect to covering and paying for Medicaid services delivered via telehealth. This flexibility was available prior to the COVID PHE and will continue to be available after the COVID PHE ends.

What will be affected by the end of the COVID-19 PHE:

Many COVID PHE flexibilities and policies have already been made permanent or otherwise extended for some time, with others expiring after May 11.

Certain Medicare and Medicaid waivers and broad flexibilities for health care providers are no longer necessary and will end. During the COVID PHE, CMS used a combination of emergency authority waivers, regulations, and sub-regulatory guidance to ensure and expand access to care and to give health care providers the flexibilities needed to help keep people safe. States, hospitals, nursing homes, and others are currently operating under hundreds of these waivers that affect care delivery and payment and that are integrated into patient care and provider systems. Many of these waivers and flexibilities were necessary to expand facility capacity for the health care system and to allow the health care system to weather the heightened strain created by COVID-19; given the current state of COVID-19, this excess capacity is no longer necessary.

For Medicaid, some additional COVID PHE waivers and flexibilities will end on May 11, while others will remain in place for six months following the end of the COVID PHE. But many of the Medicaid waivers and flexibilities, including those that support home and community-based services, are available for states to continue beyond the COVID PHE, if they choose to do so. For example, States have used COVID PHE-related flexibilities to increase the number of individuals served under a waiver, expand provider qualifications, and other flexibilities. Many of these options may be extended beyond the PHE.

Coverage for COVID-19 testing will change.

State Medicaid programs must provide coverage without cost sharing for COVID testing until the last day of the first calendar quarter that begins one year after the last day of the PHE. That means with the PHE ending on May 11, 2023, this mandatory coverage will end on September 30, 2024, after which coverage may vary by state.

The requirement for private insurance companies to cover COVID tests without cost sharing, both for OTC and laboratory tests, will end at the expiration of the PHE.

Certain COVID data reporting and surveillance will change. CDC COVID data surveillance has been a cornerstone of our response, and during the PHE, HHS had the authority to require lab test reporting for COVID. At the end of the COVID-19 PHE, HHS will no longer have this express authority to require this data from labs, which will affect the reporting of negative test results and impact the ability to calculate percent positivity for COVID tests in some jurisdictions. Hospital data reporting will continue as required by the CMS conditions of participation through April 30, 2024, but reporting will be reduced from the current daily reporting to weekly.

FDA’s ability to detect shortages of critical devices related to COVID-19 will be more limited. While FDA will still maintain its authority to detect and address other potential medical product shortages, it is seeking congressional authorization to extend the requirement for device manufacturers to notify FDA of interruptions and discontinuances of critical devices outside of a PHE which will strengthen the ability of FDA to help prevent or mitigate device shortages.

Public Readiness and Emergency Preparedness (PREP) Act liability protections will be amended. On April 14, 2023, HHS Secretary Becerra mailed all the governors announcing his intention to amend the PREP Act declaration to extend certain important protections that will continue to facilitate access to convenient and timely COVID vaccines, treatments, and tests for individuals.

More changes are occurring than what I can write in one, little blogpost. Know that auditors will be knocking on your doors, asking for dates of service during the PHE. Be sure to research the policies and exceptions that were pertinent during those DOS. This is imperative for defending yourself against auditors knocking on your doors.

And, as always, lawyer-up fast!

And just like the Wicked With of the West, DING DONG! The PHE is dead.

Preparing for Post-PHE Medicare and Medicaid Audits

Hello and happy RACMonitor Monday! As the nation forges ahead in the wake of the COVID-19 pandemic, the audits continue after that brief hiatus in March 2020. Recovery Audit Contractors (RACs), UPICs, and other auditors are dutifully reviewing claims on a post-payment basis. However, since COVID, there is a staffing shortage, which have many provider facilities scrambling on a normal basis. Throw in an audit of 150 claims and you’ve got serious souff-laying.

Yes, audit preparation has changed since COVID. Now you have more to do to prepare. Audits create more work when you have less staff. Well, suck it up sippy-cup because post-PHE audits are here.

The most important pre-audit preparation is knowing the COVID exceptions germane to your health care services. During PHE over the last two years, there has been a firehose of regulatory exceptions. You need to use these exceptions to your advantage because, let’s face it, the exceptions made regulatory compliance easier. For the period of time during which the exceptions applied, you didn’t have to get some signatures, meet face-to-face, have supervision, or what not. The dates during which these exceptions apply is also pertinent. I suggest creating a folder for all the COVID exceptions that apply to your facility. While I would like to assume that whatever lawyer that you hire, because, yes, you need to hire a lawyer, would know all the COVID exceptions – or, at least, know to research them, you never know. It only benefits you to be prepared.

Any medical provider that submits claims to a government program may be subject to a Medicare or Medicaid audit. Just because you have been audited in the past, doesn’t change the fact that you may be audited again in the future. RAC audits are not one-time or intermittent reviews and can be triggered by anything from an innocent documentation error to outright fraud. I get that questions a lot: This is my 3rd audit. At what point is this harassment. I’ve never researched the answer to that question, but I would venture that auditors get tons of latitude. So, don’t be that provider that is low-hanging fruit and simply pays post-payment reviews.

While reduced staff, high patient loads or other challenges may be bogging down your team, it’s important to remember that timeliness is crucial for CMS audit responses.

Locating the corresponding medical records and information can be a hassle at the best of times, but there are a few key things your organization can do to better prepare for a RAC Audit:

According to CMS, if selected for review, providers should discuss with their contractor any COVID-19-related hardships they are experiencing that could affect audit response timeliness. CMS notes that all reviews will be conducted in accordance with statutory and regulatory provisions, as well as related billing and coding requirements. Waivers and flexibilities will also be applied if they were in place on the dates of service for any claims potentially selected for review.

Ensure that the auditor has the appropriate contact information for requesting audit-related documentation. With so many changes to hospitals teams, it’s important to make sure that auditors’ requests for medical records are actually making it to the correct person or team in a timely manner.

Provide your internal audit review teams with proper access to data and other software tools like those used to ensure timely electronic audit responses. With a mix of teams working from home and in the office, it’s a good idea to make sure that teams handling Additional Documentation Requests (ADRs) and audit responses have the necessary access to the data they will need to respond to requests.

Review and document any changes to your audit review team processes.

Meet with your teams to ensure they fully understand the processes and are poised to respond within the required timeframes.

Successfully completing these audits in a timely manner is made much easier when the above processes and steps are in place.

The Horror Story of 99214 and Insurance to Assist

99214. Is that Jean Valjean’s number? No. It is an E/M code of moderate complexity. Few CPT codes cause goosebumps, chilly air, and a pit in your stomach besides 99214. As I said, 99214 is an E/M code of moderate level of complexity. For a low complexity visit, the code decreases to 99213. Even lower is a 99212, which is considered a straightforward visit. The code goes as high as a 99215, which denotes high complexity. Generally, physicians are good at spotting the 99215s and 99212s; the lowest and highest complexities seem simple to spot. However, the middle complexity codes are a bit subjective. Auditors frequently find 99214s that the auditor thinks should have been a 99213. I am talking about the RACs, MACs, TPEs, UPICs, and other contractors paid with our tax dollars on behalf of CMS. I recently had a BCBS audit, which found that an urgent care center had a 97% error rate. Out of 30 claims, only one claim was considered 99214; 29 claims should have been down coded to a 99213, according to BCBS. Well, my urgent care center disagreed and hired an independent auditor to review the same claims that were audited. The independent audit resulted in vastly different results. According to the independent audit, only 4 of the 30 claims should have been down coded to 99213.

One should ask, how could two separate auditors audit the same documents and issue such disparate results? One reason is that the difference between 99213 and 99214 is subjective. However, subjectiveness was not the only reason for two polar opposite results.

You see, before 2021, facilities had the choice to follow either the 1995 guidelines or the 1997 guidelines for these CPT codes. And, there is a difference between the two guidelines. Instead of choosing either the 1995 or 1997 guidelines, BCBS applied both the 1997 and 1995 guidelines, which falsely created a more stringent criteria for a 99214.

The urgent care center had been verbose about the fact that they use the 1995 guidelines, not the 1997 guidelines. When the independent contractor audited the records, it used the 1995 guidelines only.

All in all, for an accusation of owing $180k, it cost the urgent care center almost $100k to defend itself against what was obviously a faulty audit. So, I’m thinking why in the world is there insurance for physicians for making a mistake in surgery – medical malpractice, but no insurance for False Claims allegations. I mean, med mal allegations mean there is a victim. But you can be accused of false claims unexpectantly and your practice is changed forever.

Recently, I learned of an insurance company that insures doctors and facilities if they are accused of billing Medicare or Medicaid for false claims. Unlike med mal, an accusation of false claims does not yield a victim (unless you see our tax dollars as people); however, an accusation of billing a False Claim can cost a doctor, facility, a hospital hundreds of thousands of dollars. Which, knowing all things are relative, is pennies on the dollar of the penalties under the FCA.

The company’s name is Curi. That is C-U-R-I. Personally, I had never heard of this company. I googled it after I was placed on the panel. This is an insurance company that pays for attorneys’ fees if you are accused of false claims or an overpayment. Personally, I think every listener should procure this insurance directly after RACMonitor. After 23 years of litigating, I have realized the worst part about defending yourself against accusations that you owe the government money is the huge price tag associated with it.

When I presented this story on RACMonitor, David Glaser made a comment about my segment that I would be remiss to omit. SOME med mal insurance policies cover the legal fees for attorneys for regulatory audits. Please review your policy to see whether your insurance company covers the attorneys’ fees for defense of regulatory audits before purchasing more insurance.

CMS Published 2023 Medicare/caid Health Care Providers’ Audit Process

THE CENTER FOR MEDICARE AND MEDICAID SERVICES (“CMS”) 2023 Program Audit Process Overview came out recently. The report is published by the Division of Audit Operations. CMS will send engagement letters to initiate routine audits beginning February 2023 through July 2023. Engagement letters for ad hoc audits may be sent at any time throughout the year. The program areas for the 2023 audits include: 

  • CDAG: Part D Coverage Determinations, Appeals, and Grievances
  • CPE: Compliance Program Effectiveness
  • FA: Part D Formulary and Benefit Administration
  • MMP-SARAG: Medicare-Medicaid Plan Service Authorization Requests, Appeals, and Grievances
  • MMPCC: Medicare-Medicaid Plan Care Coordination 
  • ODAG: Part C Organization Determinations, Appeals, and Grievances
  • SNPCC: Special Needs Plans Care Coordination

The Program Audit Process document is only 13 pages. Yet, it is supposed to set forth the rules that the auditors must abide by in 2023. My question is – what if they don’t. What if the auditors fail to follow proper procedure.

For example, similarly to last year, an audit consists of 4 phases.

  1. Audit engagement and universe submission
  2. Audit field work
  3. Audit reporting
  4. Audit validation and close out

I would like to add another phase. Phase 5 is appeal.

According to the Report, and this is a quote: “the Audit Engagement and Universe Submission (which is the 1st stage) is a six-week period prior to the field work portion of the audit. During this phase, a Sponsoring organization is notified that it has been selected for a program audit and is required to submit the requested data, which is outlined in the respective Program Audit Protocol and Data Request document.” My question is: The sponsoring organization? CMS is referring to the provider who getting audited as a sponsoring organization. And why does CMS call the provider who is getting audited sponsoring? Is it because after the audit the sponsoring organization will be paying in recoupments?

It is interesting that the first phase “Audit Engagement and Universe Submission,” lasts 6 weeks. At this point, I want to know, does the provider know that the facility has been targeted for an audit? As an attorney, I get to see the process in the aftermath. Folks call me in distress because they got the results of an audit and disagree. I have never had the opportunity to be involved from the get go. So, if any of y’all receive a notice of an audit, please call me. I won’t charge you. I just would love the experience of walking through an audit from the get go. I think it would make me better at my job.

In other news, as you know, CMS may issue civil money penalties to providers for alleged noncompliance. Other penalties exist as well, which may or may not be worse that civil penalties. On January 23, 2023, CMS published a correction that Total Longterm Care, Inc. d/b/a InnovAge Colorado PACE (InnovAge CO) corrected its violations. In 2021, CMS had suspended its ability to re-enroll. Another facility was imposed with pre-payment review, which means that the facility must submit claims to an auditor prior to receiving reimbursements. Pre-payment review is probably the worse penalty in existence. A client of mine was told yesterday that pre-payment review is imminent. The only recourse for pre-payment review is a federal or State injunction Staying the suspension of reimbursements. You cannot appeal being placed on pre-payment review. But you do have a chance to Stay the suspension. The suspension makes no sense to me. It’s as if the government is saying that you are guilty before an ability to prove innocence.

Are UTIs Preventable? OIG Says Yes and CMS Will Audit!

I hope everyone had a fantastic Thanksgiving and are now moving toward the Christmas or Hanukkah holiday. As I discussed last week, CMS and its contracted auditors are turning their watchdog eyes toward nursing homes, critical access hospitals (“CAHs”), and acute care hospitals (“ACHs”). You can hear more on this topic on Thursday, December 8th at 1:30 when I present the RACMonitor webinar, “Warning for Acute Care Hospitals: You Are a Target for Overpayment Audits.

October 2022, OIG published a new audit project entitled, “Potentially Preventable Hospitalizations of Medicare-Eligible Skilled Nursing Facility Residents.”

Residents of nursing homes and long-term care facilities are frequently transferred to an Emergency Department as an inpatient when they need acute medical care. A proportion of these transfers may be considered inappropriate and may be avoidable, says OIG.

OIG identified nursing facilities with high rates of Medicaid resident transfers to hospitals for urinary tract infections (“UTIs”).  OIG describes UTIs as being “often preventable and treatable in the nursing facility setting without requiring hospitalization.” A 2019 OIG audit found that nursing facilities often did not provide UTI detection and prevention services in accordance with resident’s individualized plan of care, which increases the chances for infection and hospitalization. Each resident should have their own prevention policy for whatever they are prone to get. My Grandma, for example, is prone to UTIs, so her personal POC should have prevention measures for trying to avoid contracting a UTI, such as drinking cranberry juice and routine cleansing. In addition to UTIs, OIG noted that previous CMS studies found that five conditions were related to 78% of the resident transfers to hospitals:  pneumonia, congestive heart failure, UTIs, dehydration, and chronic obstructive pulmonary disease/asthma. OIG added a sixth condition citing that sepsis is considered a preventable condition when the underlying cause of sepsis is preventable. In my humble opinion, the only condition listed as preventable that is actually preventable is dehydration.

OIG’s new audit project involved a review of Medicare and Medicaid claims related to inpatient hospitalizations of nursing home residents with any of the six conditions noted previously. The audit will focus on whether the nursing homes being audited provided services to residents in accordance with the residents’ care plans and related professional standards (or whether the nursing homes caused preventable inpatient admissions due to non-compliance with care plans and professional standards).

What can you do to prepare for these upcoming audits? Review your facilities’ policies, procedures, and practices germane to the identification of the 6 conditions OIG flagged as preventable. Ensure that your policies and procedures lay out definitive steps to prevent or try to prevent these afflictions. Educate and train your staff of detection, prevention, treatment, and care planning related to the six conditions. Collect and analyze data of trends of frequency and cause of inpatient hospitalizations and determine whether these inpatient hospitalizations could have been prevented and how.

In summary, be prepared for audits of inpatient hospitalizations with explanations of attempted prevention. You cannot prevent all afflictions, but you can have policies in place to try. As always, it’s the thought that counts, as long as, it’s written down.