Self-Disclosure After a Billing System Conversion
During a routine internal audit, a Rural Health Clinic's compliance analyst discovers that for 14 months following a billing system conversion, the clinic submitted claims for 'new patient' visits when the patients had been seen at the clinic within the prior three years. The error affected 212 claims across Medicare and Medicaid, with an estimated overpayment of $38,000. The conversion vendor has since gone out of business. The clinic's compliance officer drafted a corrective action plan but has not yet reported the overpayment. The CEO is concerned about reputational damage and wants to 'quietly refund' the money without a formal disclosure. The clinic is owned by a county hospital district and receives cost-based reimbursement.
1. What are the clinic's legal and regulatory obligations upon identifying this overpayment, and what are the consequences of the CEO's proposed approach?
Read the worked answer
The clinic has an affirmative obligation under the 60-day overpayment rule (Social Security Act §1128J(d), implemented at 42 CFR 401.301–401.305) to report and return identified overpayments within 60 days of identification. 'Identification' generally occurs when the clinic has quantified the overpayment and determined it has received it. Key obligations:
- Report and return the overpayment to Medicare and Medicaid within 60 days.
- Investigate the scope of the error, including whether it extends beyond the 212 claims identified (e.g., other visit-type errors from the conversion).
- Implement a corrective action plan to prevent recurrence.
- Consider self-disclosure through the CMS Voluntary Self-Referral Disclosure Protocol (SRDP) if Stark issues exist, or the OIG Self-Disclosure Protocol for potential fraud. The 60-day rule itself requires return, not necessarily OIG disclosure, but disclosure can mitigate penalties.
The CEO's 'quiet refund' approach is not defensible. A refund without reporting may not satisfy the 60-day rule's reporting requirement, and concealing the overpayment can support a False Claims Act theory (knowing retention of an overpayment). Reputational concerns do not override legal obligations; the county hospital district's governance should be informed.
2. The clinic cannot recover funds from the defunct vendor. How should it structure the repayment and corrective action, and what should the board be told?
Read the worked answer
Repayment structure
- Repay Medicare and Medicaid separately, using each payer's overpayment reporting process (e.g., Medicare's overpayment reporting via the MAC and the self-reported overpayment form; Medicaid per state requirements).
- Determine whether the overpayment should be reported on the cost report as an adjustment, since the clinic receives cost-based reimbursement; coordinate with the reimbursement team to avoid double-counting.
- Consider a repayment plan if a lump sum is infeasible, but do not delay reporting.
Corrective action
- Re-audit the conversion period and a sample of post-conversion claims to confirm the error is contained.
- Implement system edits for new-patient visit logic and a pre-bill review for a defined period.
- Update policies and train staff; document the training.
- Since the vendor is defunct, document the root cause and the clinic's remediation independently.
Board communication
- Report the finding, the estimated overpayment, the legal obligation, the repayment plan, and the corrective action.
- Disclose the governance and reputational risk candidly; the board should approve the disclosure and repayment plan.
- Document board minutes reflecting the discussion and approval.