Medicare and Medicaid Audit Defense

• Medical necessity and coverage requirements.
• Orders, prescriptions, certifications, and authorizations.
• Documentation supporting the billed code, units, or level of service.
• Rendering and supervising provider eligibility.
• Patient eligibility and coordination of benefits.
• Duplicate or overlapping claims.
• Timeliness and authenticity of records.
• Provider enrollment and ownership information.

Medicare and Medicaid use different agencies and contractors for program integrity, claims review, and recovery. The identity of the auditor matters because response rights, appeal procedures, and deadlines differ.

In New York Medicaid, OMIG conducts audits across a broad range of provider types and may issue preliminary and final findings. Federal Medicare reviews can involve CMS contractors and may proceed through program-specific appeal structures.

An audit response should be built around the specific claims selected. The provider should confirm that the chart produced is complete, includes relevant orders and supporting documentation, and corresponds to the correct date of service and patient.

Electronic records may be stored in several systems. A clinical chart may not include billing notes, authorizations, delivery records, signatures, or external orders that are necessary to establish compliance.

When an auditor uses a sample to estimate an overpayment across a larger universe, both the underlying claim findings and the sampling methodology can become important. A high error rate in a small sample may produce a much larger repayment demand.

Providers should understand how the universe was defined, how the sample was drawn, what errors were classified, and whether each claim finding is legally and factually supportable before focusing only on the extrapolated total.

Many audit processes allow providers to respond to preliminary or draft findings before a final determination. That stage can be important because missing records, factual misunderstandings, coding issues, or legal interpretations may still be addressed before the agency finalizes its position.

A response should be claim specific where necessary and should distinguish documentation defects from findings that the service was not actually provided or medically necessary.

An audit can remain an administrative repayment matter, but certain patterns may be referred for broader investigation. Indicators of intentional falsification, services not rendered, identity misuse, kickbacks, or obstruction can increase that risk.

If the questions shift from whether claims were payable to who knew what and why records or claims were created, counsel should reassess whether criminal or civil fraud exposure exists.

Appeal rights and deadlines depend on the program and the specific determination. Providers should review the actual notice and governing regulations before assuming that an informal response preserves formal appeal rights.

Where repayment is ultimately required, the provider should also consider cash flow, offset procedures, potential payment arrangements, disclosure obligations, and whether the finding creates separate licensing or enrollment issues.

A healthcare investigation should be reduced to concrete questions. What payment rule is said to have been violated? Which claims or transactions are involved? Is the concern documentation, medical necessity, provider eligibility, ownership, remuneration, or evidence that a service never occurred? Without that level of precision, a provider may produce large amounts of material without addressing the issue that actually drives the case. In this matter, that analysis should be tied specifically to the governing legal framework, factual record, procedural posture, and practical consequences.

The theory may change as an audit develops. A matter that begins with record sufficiency can become an inquiry into intent if auditors find repeated anomalies, late-created records, inconsistent explanations, or evidence that employees raised concerns. Counsel should monitor those changes and reassess strategy rather than treating every stage as the same administrative review. In this matter, that analysis should be tied specifically to the governing legal framework, factual record, procedural posture, and practical consequences.

Healthcare cases are increasingly built from data. Claims, eligibility files, prescription records, timekeeping, transportation logs, inventory, enrollment information, and electronic audit trails can identify patterns before investigators review individual records. The defense should obtain enough source data to reproduce or test the pattern whenever possible. In this matter, that analysis should be tied specifically to the governing legal framework, factual record, procedural posture, and practical consequences.

Source records should also be matched to the legal requirement. A clinical note may establish that a patient was seen but not prove that a particular billing condition was satisfied. Conversely, an apparent claims anomaly may disappear once reversals, corrections, split billing, multiple locations, or other operational facts are included. In this matter, that analysis should be tied specifically to the governing legal framework, factual record, procedural posture, and practical consequences.

When a legitimate defect is identified, the provider should determine its scope before deciding whether the problem is isolated or systemic. That inquiry may require sampling additional claims, interviewing staff, reviewing software settings, or examining a vendor’s role. Corrective action should address the cause rather than simply the claims selected by the government. In this matter, that analysis should be tied specifically to the governing legal framework, factual record, procedural posture, and practical consequences.

Remediation and historical defense are separate tasks. Current policies can be improved without rewriting the past. If repayment, disclosure, or other reporting obligations may exist, those decisions should follow a reliable calculation and legal analysis rather than an estimate made during the first days of an audit. In this matter, that analysis should be tied specifically to the governing legal framework, factual record, procedural posture, and practical consequences.

The next decision should be based on what is known at that stage rather than on assumptions about the eventual outcome. Counsel should identify the evidence needed before the client commits to a detailed factual position, determine which deadlines are fixed, and separate immediate compliance obligations from issues that can be addressed after further review. This sequencing is especially important when the government or regulator has access to records the client has not yet seen. A measured response can satisfy legitimate procedural requirements while leaving room to refine the legal position as the factual record becomes more complete. The analysis should remain tied to the specific legal and factual issues raised by medicare and medicaid audit defense.

A sound strategy preserves options. Early cooperation can be appropriate, but cooperation does not require unnecessary admissions, speculation, or waiver of legal protections. Likewise, contesting an allegation does not require reflexive hostility toward the agency. The client should understand which positions are legally necessary, which are voluntary advocacy, and which can be deferred until the evidence is stronger. Preserving options also means considering the effect of a statement, consent order, repayment, or other decision on later proceedings that may apply a different legal standard. The analysis should remain tied to the specific legal and factual issues raised by medicare and medicaid audit defense.

Contemporaneous records ordinarily deserve more weight than recollection reconstructed after an investigation begins. The defense should identify the source documents created in the ordinary course, determine who created them, and understand the systems in which they were stored. Gaps or inconsistencies should be analyzed rather than concealed. If later explanatory material is prepared, it should be clearly dated and should not be inserted into historical records in a manner that obscures when it was created. A reliable record often narrows disputes more effectively than broad argument. The analysis should remain tied to the specific legal and factual issues raised by medicare and medicaid audit defense.

NSLG represents healthcare providers in Medicare and Medicaid audits and related enforcement matters. The firm analyzes claim findings, supporting records, procedural rights, sampling issues, and any risk that an administrative audit may develop into a broader investigation.

Providers who receive an audit notice, records request, draft finding, repayment demand, or appeal notice may contact Norman Spencer Law Group to discuss the matter and response options.