The Center for Medicare and Medicaid Services (CMS) announced the expansion of Targeted Probe and Educate (TPE) audits. At first glance, this appears to be fantastic news coming on the heels of so much craziness at Health and Human Services (HHS). We have former-HHS Secretary Price flying our tax dollars all over. Dr. Don Wright stepping up as our new Secretary. The Medicare appeal backlog fiasco. The repeal and replace Obamacare bomb. Amidst all this tomfoolery, health care providers are still serving Medicare and Medicaid patients, reimbursement rates are in the toilet, which drives down quality and incentivizes providers to not accept Medicare or Medicaid (especially Caid), and providers are undergoing “Audit Alphabet Soup.” I actually had a client tell me that he receives audit letters requesting documents and money every single week from a plethora of different organizations.
So when CMS announced that it was broadening its TPE audits, it was a sigh of relief for many providers. But will TPE audits be the benign beasts they are purporting to be?
What is a TPE audit? (And – Can We Have Anymore Acronyms…PLEASE!)
CMS says that TPE audits are benevolent. CMS’ rhetoric indicates that these audits should not cause the toner to run out from overuse. CMS states that TPE audits will involve “the review of 20-40 claims per provider, per item or service, per round, for a total of up to three rounds of review.” See CMS Announcement. The idea behind the TPE audits (supposedly) is education, not recoupments. CMS states that “After each round, providers are offered individualized education based on the results of their reviews. This program began as a pilot in one MAC jurisdiction in June 2016 and was expanded to three additional MAC jurisdictions in July 2017. As a result of the successes demonstrated during the pilot, including an increase in the acceptance of provider education as well as a decrease in appealed claims decisions, CMS has decided to expand to all MAC jurisdictions later in 2017.” – And “later in 2017” has arrived. These TPE audits are currently being conducted nationwide.
Below is CMS’ vision for a TPE audit:
Clear? As mud?
The chart does not indicate how long the provider will have to submit records or how quickly the TPE auditors will review the documents for compliance. But it appears to me that getting through Round 3 could take a year (this is a guess based on allowing the provider 30 days to gather the records and allowing the TPE auditor 30 days to review).
Although the audit is purportedly benign and less burdensome, a TPE audit could take a whole year or more. Whether the audit reviews one claim or 20, having to undergo an audit of any size for a year is burdensome on a provider. In fact, I have seen many companies having to hire staff dedicated to responding to audits. And here is the problem with that – there aren’t many people who understand Medicare/caid medical billing. Providers beware – if you rely on an independent biller or an electronic medical records program, they better be accurate. Otherwise the buck stops with your NPI number.
Going back to CMS’ chart (above), notice where all the “yeses” go. As in, if the provider is found compliant , during any round, all the yeses point to “Discontinue for at least 12 months.” I am sure that CMS thought it was doing providers a favor, but what that tells me is the TPE audit will return after 12 months! If the provider is found compliant, the audit is not concluded. In fact, according to the chart, the only end results are (1) a referral to CMS for possible further action; or (2) continued TPE audits after 12 months. “Further action” could include 100% prepayment review, extrapolation, referral to a Recovery Auditor, or other action. Where is the outcome that the provider receives an A+ and is left alone??
CMS states that “Providers/suppliers may be removed from the review process after any of the three rounds of probe review, if they demonstrate low error rates or sufficient improvement in error rates, as determined by CMS.”
I just feel as though that word “may” should be “will.” It’s amazing how one word could change the entire process.
What if you had to appeal traffic citations through the police officer who pulled you over before you could defend yourself before an impartial judge? That would be silly and a waste of time. I could not fathom a time in which the officer would overturn his/her own decision.
“No, officer, I know you claim that I was speeding, but the speed limit on Hwy 1 had just increased to 65. You were wrong when you said the speed limit was 55.”
“Good catch, citizen. You’re right; I’m wrong. Let’s just rip up this speeding ticket.”
Not going to happen.
The same is true when it comes to decisions by the Department of Health and Human Service (DHHS) to sanction or penalize a Medicaid provider based on alleged provider abuse (otherwise known as documentation errors). If DHHS determines that you owe $800,000 because your service notes are noncompliant, I am willing to bet that, upon its own reconsideration, the decision will be upheld. Asking for reconsideration review from the very same entity that decided the sanction or penalty is akin to doing something over and over and expecting different results (definition of insanity?).
But – are informal reconsideration reviews required by law to fight an adverse decision before you may appear before an administrative law judge?
The reason that you should care whether the reconsideration reviews are required by law is because the process is time consuming, and, often, the adverse determination is in effect during the process. If you hire an attorney, it is an expensive process, but one that you will not (likely) win. Generally, I am adverse to spending time and money on something that will yield nothing.
Before delving into whether reconsideration reviews are required by law, here is my caveat: This issue has not been decided by our courts. In fact, our administrative court has rendered conflicting decisions. I believe that my interpretation of the laws is correct (obviously), but until the issue is resolved legally, cover your donkey (CYA), listen to your attorney, and act conservatively.
Different laws relate to whether the adverse decision is rendered by the DHHS or whether the adverse decision is rendered by a managed care organization (MCO). Thus, I will divide this blog into two sections: (1) reconsiderations to DHHS; and (2) reconsiderations to an MCO.
Appealing DHHS Adverse Determinations
When you receive an adverse decision from DHHS, you will know that it is from DHHS because it will be on DHHS letterhead (master of the obvious).
10A NCAC 22F .0402 states that “(a) Upon notification of a tentative decision the provider will be offered, in writing, by certified mail, the opportunity for a reconsideration of the tentative decision and the reasons therefor. (b) The provider will be instructed to submit to the Division in writing his request for a Reconsideration Review within fifteen working days from the date of receipt of the notice. Failure to request a Reconsideration Review in the specified time shall result in the implementation of the tentative decision as the Division’s final decision.”
As seen above, our administrative code recommends that a Medicaid provider undergo the informal reconsideration review process through DHHS to defend a sanction or penalty before presenting before an impartial judge at the Office of Administrative Hearings (OAH). I will tell you, having gone through hundreds upon hundreds of reconsideration reviews, DHHS does not overturn itself. The Hearing Officers know who pay their salaries (DHHS). The reconsideration review ends up being a waste of time and money for the provider, who must jump through the “reconsideration review hoop” prior to filing a petition for contested case.
Historically, attorneys recommend that provider undergo the reconsideration review for fear that an Administrative Law Judge (ALJ) at OAH would dismiss the case based on failure to exhaust administrative remedies. But upon a plain reading of 10A NCAC 22F .0402, is it really required? Look at the language again. “Will be offered” and “the opportunity for.” And what is the penalty for not requesting a reconsideration review? That the tentative decision becomes final – so you can petition to OAH the final decision.
My interpretation of 10A NCAC 22F .0402 is that the informal reconsideration review is an option, not a requirement.
Now, N.C. Gen. Stat. 150B-22 states that “[i]t is the policy of this State that any dispute between an agency and another person that involves the person’s rights, duties, or privileges, including licensing or the levy of a monetary penalty, should be settled through informal procedures. In trying to reach a settlement through informal procedures, the agency may not conduct a proceeding at which sworn testimony is taken and witnesses may be cross-examined. If the agency and the other person do not agree to a resolution of the dispute through informal procedures, either the agency or the person may commence an administrative proceeding to determine the person’s rights, duties, or privileges, at which time the dispute becomes a “contested case.””
It is clear that our State’s policy is that a person who has a grievance against an agency; i.e., DHHS, attempts informal resolution prior to filing an appeal at OAH. Notice that N.C. Gen. Stat. 150B-22 is applicable to any dispute between “an agency and another person.” “Agency” is defined as “an agency or an officer in the executive branch of the government of this State and includes the Council of State, the Governor’s Office, a board, a commission, a department, a division, a council, and any other unit of government in the executive branch. A local unit of government is not an agency.”
Clearly, DHHS is an “agency,” as defined. But an MCO is not a department; or a board; or a commission; or a division; or a unit of government in the executive branch; or a council. Since the policy of exhausting administrative remedies applies to DHHS, are you required to undergo an MCO’s reconsideration review process?
Appealing an MCO Adverse Determination
When you receive an adverse decision from an MCO, you will know that it is from an MCO because it will be on the MCO’s letterhead (master of the obvious).
There is a reason that I am emphasizing the letterhead. It is because DHHS contracts with a number of vendors. For example, DHHS contracts with Public Consulting Group (PCG), The Carolina Center for Medical Excellence (CCME), HMS, Liberty, etc. You could get a letter from any one of DHHS’ contracted entities – a letter on their letterhead. For example, you could receive a Tentative Notice of Overpayment on PCG letterhead. In that case, PCG is acting on behalf of DHHS. So the informal reconsideration rules would be the same. For MCOs, on the other hand, we obtained a Waiver from the Center for Medicare and Medicaid Services (CMS) to “waive” certain rules and to create the MCOs. Different regulations apply to MCOs than DHHS. In fact, there is an argument that N.C. Gen. Stat. 150B-22 does not apply to the MCOs because the MCOs are not an “agency.” Confusing, right? I call that job security.
Are you required to undergo the MCO’s internal reconsideration review process prior to filing a petition for contested case at OAH?
Your contract with the MCO certainly states that you must appeal through the MCO’s internal process. The MCO contracts with providers have language in them like this:
Dispute Resolution and Appeals: “The CONTRACTOR may file a complaint and/or appeals as outlined in the LME/PIHP Provider Manual promulgated by LME/PIHP pursuant to N.C. Gen. Stat. 122C-151.3 and as provided by N.C. Gen. Stat. Chapter 108C.”
I find numerous, fatal flaws in the above section. Whoever drafted this section of the contract evidently had never read N.C. Gen. Stat. 122C-151.3, which plainly states in subsection (b) “This section does not apply to LME/MCOs.” Also, the LME/PIHP does not have the legal authority to promulgate – that is a rule-making procedure for State agencies, such as DHHS. The third fatal flaw in the above section is that the LME/MCO Provider Manual is not promulgated and certainly was not promulgated not pursuant to N.C. Gen. Stat. 122C-151.3, does not apply to LME/MCOs.
Just because it is written, does not make it right.
If N.C. Gen. Stat. 150B-22 does not apply to MCOs, because MCOs are not an agency, then the State policy of attempting to resolve disputes through informal methods before going to OAH does not apply.
There is no other statute or rule that requires a provider to exhaust an MCO’s internal review process prior to filing a petition for contested case.
What does that mean IN ENGLISH??
What it means is that the MCOs contract and provider manual that create an informal one or two-step reconsideration process is not required by law or rule. You do not have to waste your time and money arguing to the MCO that it should overturn its own decision, even though the reconsideration review process may be outlined in the provider manual or your procurement contract.
OAH has agreed…and disagreed.
In Person-Centered Partnerships, Inc. v. NC DHHS and MeckLINK, No. 13 DHR 18655, the court found that “[n]either the contractual provisions in Article II, Section 5.b of the Medicaid Contract nor MeckLINK’s “Procedures for implementation of policy # P0-09 Local Reconsideration Policy” states that reconsideration review is mandatory and a prerequisite to filing a contested case.”
In another case, OAH has held that, “[c]ontract provisions cannot override or negate the protections provided under North Carolina law, specifically the appeal rights set forth in N.C. Gen. Stat. Chapter 108C. Giesel, Corbin on Contracts § 88.7, at 595 (2011) (When the law confers upon an individual a right, privilege, or defense, the assumption is that the right, privilege or defense is conferred because it is in the public interest. Thus, in many cases, it is contrary to the public interest to permit the holder of the right, privilege, or defense to waive or to bargain it away. In these situations, the attempted waiver or bargain is unenforceable.”)” Essential Supportive Services, LLC v. DHHS and its Agent Alliance Behavioral Healthcare, No. 13 DHR 20386 (NCOAH) (quoting Yelverton’s Enrichment Services, Inc., v. PBH, as legally authorized contractor of and agent for N.C. Department of Health and Human Services, 13-CVS-11337, (7 March 2014)).
However, most recently, OAH ruled in the opposite way. A provider was terminated from an MCO’s catchment area, and we immediately filed a preliminary injunction to cease the termination. As you can see from the above-mentioned cases, OAH had not considered the reconsideration review mandatory. But, this time, the Judge found that the “contractual provision in [the MCO’s] contract with Petitioner, which provides for a local reconsideration review, is a valid and binding provision within the contract.”
So, again, the law is as clear as two and two adding up to five.
For now, when you are disputing an adverse determination by an MCO requesting a reconsideration review before going to OAH is a good CYA.
Going back to the traffic example at the beginning of the blog, my husband was pulled for speeding a few weeks ago. I was surprised because, generally, he does not speed. He is a usually conscientious and careful driver. When the officer came to his window, he was genuinely confused as to the reason for the stop. In his mind, he was driving 73 mph, only 3 miles over the speed limit. In fact, he had the car on cruise control. Turns out he confused the sign for HWY 70, as a speed limit sign. The speed limit was actually 55 mph.
We did not appeal the decision.
Electronic health records or EHR have metamorphosed health care. Choosing a vendor can be daunting and the prices fluctuate greatly. As a provider, you probably determine your EHR platform on which vendor’s program creates the best service notes… or which creates the most foolproof way of tracking time… or which program is the cheapest.
But…what’s in YOUR contract can be legally deadly.
Regardless how you choose your EHR vendor, you need to keep the following legal issues in mind when it comes to EHR and the law:
Regulatory and Clinical Coverage Policy Compliance
Most likely, your EHR vendor does not have a legal degree. Yet, you are buying a product and assuming that the EHR program complies with applicable regulations, rules, and clinical coverage policies – whichever are applicable to your type of service. Well, guess what? These regulations, rules, and clinical coverage policies are not stagnant. They are amended, revised, and re-written more than my chickens lay eggs, but a little less often, because my chickens lay eggs every day.
Think about it – The Division of Medical Assistance (DMA) publishes a monthly Medicaid Bulletin. Every month DMA provides more insight, more explanations, more rules that providers will be held accountable to follow.
Does your EHR program update every month?
You need to review your contract and determine whether the vendor is responsible for regulatory compliance or whether you are. If you are, should you put so much faith in the EHR program?
You are required to maintain your records (depending on your type of service) anywhere from 5-10 years. Let’s say that you sign a four year contract with EHR Vendor X. The four years expires, and you hire a new EHR vendor. You are audited. But Vendor X does not allow you access to the records because you no longer have a contract with them – not their problem!
You need to ensure that your EHR contract allows you access to your documents (because they are your documents) even in the event of the contract expiring or getting terminated. The excuse that “I don’t have access to that” does not equal a legal defense.
This is otherwise known as the “Blame Game.” If there is a problem with regulatory compliance, as in, the EHR records do not follow the regulations, then you need to know whether the EHR vendor will take responsibility and pay, or help pay, for attorneys’ fees to defend yourself.
Like it or not, the EHR vendor does not undergo audits by the state and federal government. The EHR vendor does not undergo post and pre-payment reviews for regulatory compliance. You do. It is your NPI number that is held accountable for regulatory compliance.
You need to check whether there is an indemnification clause in the EHR contract. In other words, if you are accused of an overpayment because of a mistake on the part of the vendor, will the vendor cover your defense? My guess is that there is no indemnification clause.
HIPAA laws require that you minimize the access to private health information (PHI) and prevent dissemination. With hard copies, this was easy. You could just lock up the documents. With EHR, it becomes trickier. Obviously, you have access to the PHI as the provider. But who can access your EHR on the vendor-side? Assuming that the vendor has an IT team in case of computer issues, you have to consider to what exactly does that team have access.
I recently attended a legal continuing education class on data breach and HIPAA compliance for health care. One of the speakers was a Special Agent with the FBI. This gentleman prosecutes data breaches for a living. He said that hackers will pay over $500 per private medical document. Health care companies experienced a 72% increase in cyberattacks between 2013 and 2014. Stolen health care information is 10 times more valuable than your credit card information.
Obviously, I am exaggerating here. I do not believe that The Walking Dead is real and in our future. But here is my point – You are held accountable for maintaining your medical records, even in the face of an act of God or terrorism.
Example: It was 1996. Provider Dentist did not have EHR; he had hard copies. Hurricane Fran flooded Provider Dentist’s office, ruining all medical records. When Provider Dentist was audited, the government did not accept the whole “there was a hurricane” excuse. Dentist was liable for sever penalties and recoupments.
Fast forward to 2017 and EHR – Think a mass computer shutdown won’t happen? Just ask Delta about its August 2016 computer shutdown that took four days and cancelled over 2000 flights. Or Medstar Health, which operates 10 hospitals and more than 250 outpatient facilities, when in March 2016, a computer virus shut down its emails and…you guessed it…its EHR database.
So, what’s in YOUR contract?
You are a provider, and you accept Medicare and Medicaid. You find out that the person with whom you contracted to provide extraction services for your dental patients has been upcoding for the last few months. -or- You discover that the supervisory visits over the past year have been less than…well, nonexistent. -or- Or your licensed therapist forgot to mention that her license was revoked. What do you do?
What do you do when you unearth a potential, past overpayment to you from Medicare or Medicaid?
Number One: You do NOT hide your head!
Do not be an ostrich. First, being an ostrich will have a direct correlation with harsher penalties. Second, you may miss mandatory disclosure deadlines, which will lead to a more in-depth, concentrated, and targeted audits by the government, which will lead to harsher penalties.
As for the first (harsher penalties), not only will your potential, monetary penalties leap skyward, but knowledge (actual or should have had) could put you at risk for criminal liability or false claims liability. As for increased, monetary penalties, recent Office of Inspector General (OIG) information regarding the self disclosure protocol indicates that self disclosure could reduce the minimum multiplier to only 1.5 times the single damages versus 2-10 times the damages without self disclosure.
As for the second (missing deadlines), your penalties will be exorbitantly higher if you had or should have had actual knowledge of the overpayments and failed to act timely. Should the government, despite your lack of self disclosure, decide to audit your billings, you can count on increased scrutiny and a much more concentrated, in-depth audit. Much of the target of the audit will be what you knew (or should have) and when you knew (or should have). Do not ever think: “I will not ever get audited. I am a small fish. There are so many other providers, who are really de-frauding the system. They won’t come after me.” If you do, you will not be prepared when the audit comes a’knocking on your door – and that is just foolish. In addition, never underestimate the breadth and scope of government audits. Remember, our tax dollars provide almost unlimited resources to fund thousands of audits at a time. Being audited is not like winning the lottery, Your chances are not one in two hundred million. If you accept Medicare and/or Medicaid, your chances of an audit are almost 100%. Some providers undergo audits multiple times a year.
Knowing that the definition of “knowing” may not be Merriam Webster’s definition is also key. The legal definition of “knowing” is more broad that you would think. Section 1128J(d)(4)(A) of the Act defines “knowing” and “knowingly” as those terms are defined in 31 U.S.C. 3729(b). In that statute the terms “knowing” and “knowingly” mean that a person with respect to information—(i) has actual knowledge of the information; (ii) acts in deliberate ignorance of the truth or falsity of the information; or (iii) acts in reckless disregard of the truth or falsity of the information. 31 U.S.C. 3729(b) also states that knowing and knowingly do not require proof of specific intent to defraud.
Number Two: Contact your attorney.
It is essential that you have legal counsel throughout the self disclosure process. There are simply too many ways to botch a well-intended, self disclosure into a casus belli for the government. For example, OIG allows three options for self disclosure; however, one option requires prior approval from OIG. Your counsel needs to maintain your self disclosure between the allowable, navigational beacons.
Number Three: Act timely.
You have 60-days to report and pay. Section 1128J(d)(2) of the Social Security Act requires that a Medicare or Medicaid overpayment be reported and returned by the later of (1) the date that is 60 days after the date on which the overpayment was identified or (2) the date any corresponding cost report is due, if applicable. See blog.
If you have a Medicare issue, please continue to Number Four. If your issue is Medicaid only, please skip Number Four and go to Number Five. If your issue concerns both Medicare and Medicaid, continue with Number Four and Five (skip nothing).
Number Four: Review the OIG Self Disclosure Protocol (for Medicare).
OIG publishes a Self Disclosure Protocol. Read it. Print it. Frame it. Wear it. Memorize it.
Since 2008, OIG has resolved 235 self disclosure provider cases through settlements. In all but one of these cases, OIG released the disclosing parties from permissive exclusion without requiring any integrity measures. What that means is that, even if you self disclose, OIG has the authority to exclude you from the Medicare system. However, if you self disclose, may the odds be ever in your favor!
Number Five: Review your state’s self disclosure protocol.
While every state differs slightly in self disclosure protocol, it is surprising how similar the protocol is state-to-state. In order to find your state’s self disclosure protocol, simply Google: “[insert your state] Medicaid provider self disclosure protocol.” In most cases, you will find that your state’s protocol is less burdensome than OIG’s.
On the state-side, you will also find that the benefits of self disclosure, generally, are even better than the benefits from the federal government. In most states, self disclosure results in no penalties (as long as you follow the correct protocol and do not hide anything).
Number Six: Draft your self disclosure report.
Your self disclosure report must contain certain criteria. Review the Federal Registrar for everything that needs to be included.
It is important to remember that you are only responsible for self disclosures going back six years (on the federal side).
Mail the report to:
330 Independence Avenue, Room 5527
Washington, DC 20201
Or you can self disclose online at this link.
Happy New Year, readers!!! A whole new year means a whole new investigation plan for the government…
The Department of Health and Human Services (HHS) Office of Inspector General (OIG) publishes what is called a “Work Plan” every year, usually around November of each year. 2017 was no different. These Work Plans offer rare insight into the upcoming plans of Medicare investigations, which is important to all health care providers who accept Medicare and Medicaid.
For those of you who do not know, OIG is an agency of the federal government that is charged with protecting the integrity of HHS, basically, investigating Medicare and Medicaid fraud, waste, and abuse.
So let me look into my crystal ball and let you know which health care professionals may be audited by the federal government…
The 2017 Work Plan contains a multitude of new and revised topics related to durable medical equipment (DME), hospitals, nursing homes, hospice, laboratories.
For providers who accept Medicare Parts A and B, the following are areas of interest for 2017:
- Hyperbaric oxygen therapy services: provider reimbursement
- Inpatient psychiatric facilities: outlier payments
- Skilled nursing facilities: reimbursements
- Inpatient rehabilitation hospital patients not suited for intensive therapy
- Skilled nursing facilities: adverse event planning
- Skilled nursing facilities: unreported incidents of abuse and neglect
- Hospice: Medicare compliance
- DME at nursing facilities
- Hospice home care: frequency of on-site nurse visits to assess quality of care and services
- Clinical Diagnostic Laboratories: Medicare payments
- Chronic pain management: Medicare payments
- Ambulance services: Compliance with Medicare
For providers who accept Medicare Parts C and D, the following are areas of interest for 2017:
- Medicare Part C payments for individuals after the date of death
- Denied care in Medicare Advantage
- Compounded topical drugs: questionable billing
- Rebates related to drugs dispensed by 340B pharmacies
For providers who accept Medicaid, the following are areas of interest for 2017:
- States’ MCO Medicaid drug claims
- Personal Care Services: compliance with Medicaid
- Medicaid managed care organizations (MCO): compliance with hold harmless requirement
- Hospice: compliance with Medicaid
- Medicaid overpayment reporting and collections: all providers
- Medicaid-only provider types: states’ risk assignments
- Accountable care
Caveat: The above-referenced areas of interest represent the published list. Do not think that if your service type is not included on the list that you are safe from government audits. If we have learned nothing else over the past years, we do know that the government can audit anyone anytime.
If you are audited, contact an attorney as soon as you receive notice of the audit. Because regardless the outcome of an audit – you have appeal rights!!! And remember, government auditors are more wrong than right (in my experience).
Knicole Emanuel Interviewed on Recent Success: Behavioral Health Care Service Still Locked in Overbilling Dispute with State
Last Thursday, I was interviewed by a reporter from New Mexico regarding our Teambuilders win, in which an administrative judge has found that Teambuilders owes only $896 for billing errors. Here is a copy of an article published in the Santa Fe New Mexican, written by Justin Horwath:
The true tragedy is that these companies, including Teambuilders, should not have been put out of business based on false allegations of fraud. Not only was Teambuilders cleared of fraud, but, even the ALJ agreed with us that Teambuilders does not owe $12 million – but a small, nominal amount ($896.35). Instead of having the opportunity to pay the $896.35 and without due process of law, Teambuilders was destroyed – because of allegations.
Another Win for the Good Guys! RAC Auditors Cannot Look Back Over 3 Years!!! (BTW: We Already Knew This -Shhhhh!)
I love being right – just ask my husband.
I have argued for years that government auditors cannot go back over three years when conducting a Medicaid/Care audit of a health care provider’s records, unless there are credible allegations of fraud. See blog.
42 CFR 455.508 states that “[a]n entity that wishes to perform the functions of a Medicaid RAC must enter into a contract with a State to carry out any of the activities described in § 455.506 under the following conditions:…(f) The entity must not review clams that are older than 3 years from the date of the claim, unless it receives approval from the State.”
Medicaid RAC is defined as “Medicaid RAC program means a recovery audit contractor program administered by a State to identify overpayments and underpayments and recoup overpayments.” 42 CFR 455. 504.
From the definition of a Medicaid RAC (Medicare RAC is similarly defined), albeit vague, entities hired by the state to identify over and underpayments are RACs. And RACs are prohibited from auditing claims that are older than 3 years from the date of the claim.
In one of our recent cases, our client, Edmond Dantes, received a Tentative Notice of Overpayment from Public Consulting Group (PCG) on May 13, 2015. In a Motion for Summary Judgment, we argued that PCG was disallowed to review claims prior to May 13, 2012. Of the 8 claims reviewed, 7 claims were older than May 13, 2012 – one even went back to 2009!
The Administrative Law Judge (ALJ) at the Office of Administrative Hearings (OAH) agreed. In the Order Granting Partial Summary Judgment, the ALJ opined that “[s]tatutes of limitation serve an important purpose: to afford security against stale demands.”
Accordingly, the ALJ threw out 7 of the 8 claims for violating the statute of limitation. With one claim left, the amount in controversy was nominal.
A note as to the precedential value of this ruling:
Generally, an ALJ decision is not binding on other ALJs. The decisions are persuasive. Had DHHS appealed the decision and the decision was upheld by Superior Court, then the case would have been precedent; it would have been law.
Regardless, this is a fantastic ruling , which only bolsters my argument that Medicaid/care auditors cannot review claims over 3 years old from the date of the claim.
So when you receive a Tentative Notice of Overpayment, after contacting an attorney, look at the reviewed claims. Are those reviewed claims over 3 years old? If so, you too may win on summary judgment.