{"id":3920,"date":"2026-03-05T19:34:26","date_gmt":"2026-03-05T19:34:26","guid":{"rendered":"https:\/\/www.insuracarelife.com\/blog\/oig-issues-new-compliance-guidance-for-medicare-advantage-rivkin-radler-llp\/"},"modified":"2026-03-05T19:34:26","modified_gmt":"2026-03-05T19:34:26","slug":"oig-issues-new-compliance-guidance-for-medicare-advantage-rivkin-radler-llp","status":"publish","type":"post","link":"https:\/\/www.insuracarelife.com\/blog\/oig-issues-new-compliance-guidance-for-medicare-advantage-rivkin-radler-llp\/","title":{"rendered":"OIG Issues New Compliance Guidance for Medicare Advantage | Rivkin Radler LLP"},"content":{"rendered":"
\n
\n
Last month, the U.S. Department of Health and Human Services\u2019 Office of Inspector General (\u201cOIG\u201d) published Medicare Advantage Industry Segment-Specific Compliance Program Guidance (\u201cGuidance\u201d). OIG described the Guidance as \u201cOIG\u2019s updated and centralized source of voluntary compliance program guidance for Medicare Advantage.\u201d[1] The impetus for creating the Guidance was \u201cthe growing popularity\u201d and OIG\u2019s \u201cgranular understanding\u201d of the Medicare Advantage (\u201cMA\u201d) program along with the \u201cfraud, waste, and abuse risks within it.\u201d OIG noted that \u201cmanaged care oversight is a top OIG priority\u201d and that it was seeking to \u201cimprove the usefulness, timeliness, accessibility, and usability of [its] compliance program guidance for MA Parties.\u201d<\/div>\n<\/div>\n

\u00a0Included within the Guidance is a section titled \u201cCompliance Risk Areas and Recommendations for Mitigation.\u201d[2] OIG identified the following \u201ckey risk areas relevant to the MA program\u201d:<\/p>\n

    \n
  1. Access to Care (Network Adequacy and Prior Authorization)<\/li>\n
  2. Marketing and Enrollment<\/li>\n
  3. Risk Adjustment<\/li>\n
  4. Quality of Care<\/li>\n
  5. Oversight of Third Parties<\/li>\n
  6. Compliance Programs within Vertically Integrated Organizations and Other Ownership structures<\/li>\n
  7. Submission of Accurate Claims<\/li>\n<\/ol>\n

    Access to Care<\/strong> refers to the failure of MA organizations (\u201cMAOs\u201d) to ensure that enrollees can access all covered and relevant supplemental services through the failure to maintain adequate provider networks and accurate directories or failure to maintain access to services by employing utilization management tools (e.g.<\/em>, prior authorization) in a manner that inappropriately limits or impedes access to medically necessary covered services.<\/p>\n

    Marketing and Enrollment<\/strong> refers to deceptive marketing practices and potential improprieties around payments designed to generate new enrollments. According to OIG, \u201c[t]hese schemes involve questionable payments and referrals between MA plans, health care professionals and third-party marketers such as agents and brokers\u201d which \u201ccan mislead Medicare enrollees into choosing specific health plans or health care providers that may not meet the enrollees\u2019 needs.\u201d Improper financial incentives can lead to administrative sanctions, False Claims Act liability or criminal liability under the federal Anti-Kickback Statute. Misleading marketing practices can violate regulations prohibiting MAOs from engaging in such conduct.<\/p>\n

    Risk Adjustment <\/strong>refers to the reimbursement methodology utilized by CMS to pay MAOs for care rendered to enrollees. CMS pays a capitated per member per month (PMPM) rate that is based, in part, on the beneficiary\u2019s health status from the prior year, with sicker patients generally receiving higher risk scores and, hence, higher PMPM payments. OIG has noted that the risk adjustment process is subject to fraud and abuse and has raised concerns that MAOs may be using chart reviews and in-home health risk assessments inappropriately to increase risk adjustment payments. This can be done by adding, or prompting providers to add, risk-adjusting diagnoses that are unsupported or that do not affect the care, treatment or management of the patient, and also by failing to remove unsupported diagnosis codes from the medical record.<\/p>\n

    Quality of Care <\/strong>refers to MA program requirements designed to ensure enrollee access to high-quality care, including quality bonus payments to MAOs based on a 5-star rating system. To achieve those bonus payments, MAOs must submit data to CMS that measures health outcomes and other quality measures. OIG notes that \u201c[e]nsuring the integrity of the data used for Star Ratings\u2019 quality and performance measures is a key component for MA Parties\u2019 quality-of-care compliance oversight.\u201d<\/p>\n

    Oversight of Third Parties <\/strong>refers to MAO oversight of third parties, including providers, marketers and vendors. OIG notes that \u201c[f]raud and abuse risks associated with MAO interactions with third parties are not limited to interactions with FDRs [i.e.<\/em>, First Tier Downstream Related Entities], because liability under fraud and abuse laws does not turn on any entity\u2019s status as an FDR.\u201d Further, OIG cautions that when delegating functions to third parties, MAOs \u201cmay be liable for the actions of those third parties beyond MAOs\u2019 accountability to CMS for delegated functions\u201d and that \u201c[t]hird parties themselves also could be vulnerable to liability under certain fraud and abuse laws for their own conduct or for the actions of downstream entities.\u201d<\/p>\n

    Compliance Programs Within Vertically Integrated Organizations and Other Ownership Structures <\/strong>refers to the increasing number of large and complex partnerships and arrangements involving MAOs and providers, including MAOs that own health care providers and health systems, health systems that own MAOs, and MAOs that own related entities such as data analytics firms and utilization review entities. OIG cautions that the compliance challenges in such integrated organizations can be unique and that the compliance requirements of one component may be different from those of another. Additionally, OIG notes that in any organization that includes MA functions, \u201corganization-wide compliance risk assessments, audit plans and other compliance planning should consider risks arising from MA-related functions, even if those represent a small part of the larger organization.\u201d If the integrated organization involves private equity funds or other investors, OIG warns that \u201c[i]nvestors lacking experience in health care may be unfamiliar with fraud, waste, and abuse risks and the need for a vigorous compliance program.\u201d<\/p>\n

    Submission of Accurate Claims <\/strong>is fairly self-explanatory. As noted by OIG, \u201c[a]s a condition of receiving payment, MAOs must submit certifications that the data submitted to CMS are accurate\u201d and the \u201c[f]ailure to submit accurate payment data may result in administrative actions or, if fraud is involved, civil liability.\u201d (Of course, if fraud is involved, there is always the possibility of criminal liability as well.) In the MA context, fraudulent conduct could mean knowingly submitting false risk adjustment information to CMS in order to elicit higher PMPM reimbursement amounts for enrollees and\/or knowingly failing to withdraw inaccurate and invalid diagnosis codes from patient charts.<\/p>\n

    The Guidance includes compliance recommendations for mitigating risk in each of the above areas, which may be adopted by \u201cMA Parties,\u201d defined as \u201cthe wide range of entities and individuals participating in or engaged with\u201d the MA program. Rivkin Radler\u2019s Health Services Group can offer legal support to any individual or organization requiring assistance in understanding and\/or implementing the new Guidance.<\/p>\n

    \n

    [1] OIG stated that the new Guidance \u201cupdates prior guidance OIG issued in its 1999 Compliance Program Guidance for Medicare+Choice Organizations Offering Coordinated Care Plans (1999 CPG).\u201d<\/p>\n

    [2] OIG stated that \u201c[t]he absence of a previously identified risk area or consideration in the [Guidance] does not signal that a risk no longer exists, has become irrelevant, or is otherwise inapplicable\u201d and that \u201c[i]ndividuals and entities may still wish to address the risk area or consideration in their compliance programs.\u201d To that end, the 1999 CPG will remain an archived resource on the OIG website.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

    Last month, the U.S. Department of Health and Human Services\u2019 Office of Inspector General (\u201cOIG\u201d) published Medicare Advantage Industry Segment-Specific Compliance Program Guidance (\u201cGuidance\u201d). OIG described the Guidance as \u201cOIG\u2019s updated and centralized source of voluntary compliance program guidance for Medicare Advantage.\u201d[1] The impetus for creating the Guidance was \u201cthe growing popularity\u201d and OIG\u2019s \u201cgranular […]<\/p>\n","protected":false},"author":1,"featured_media":3921,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1135,2307,1703,1702,2132,505,2631,2633,2632],"class_list":["post-3920","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-advantage","tag-compliance","tag-guidance","tag-issues","tag-llp","tag-medicare","tag-oig","tag-radler","tag-rivkin"],"_links":{"self":[{"href":"https:\/\/www.insuracarelife.com\/blog\/wp-json\/wp\/v2\/posts\/3920","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insuracarelife.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insuracarelife.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insuracarelife.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insuracarelife.com\/blog\/wp-json\/wp\/v2\/comments?post=3920"}],"version-history":[{"count":0,"href":"https:\/\/www.insuracarelife.com\/blog\/wp-json\/wp\/v2\/posts\/3920\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insuracarelife.com\/blog\/wp-json\/wp\/v2\/media\/3921"}],"wp:attachment":[{"href":"https:\/\/www.insuracarelife.com\/blog\/wp-json\/wp\/v2\/media?parent=3920"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insuracarelife.com\/blog\/wp-json\/wp\/v2\/categories?post=3920"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insuracarelife.com\/blog\/wp-json\/wp\/v2\/tags?post=3920"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}