The Whistleblower and the Retaliation Risk
A billing specialist reports to the compliance officer that a manager instructed staff to 'always bill 99215 for Medicare patients' and to 'add modifier 59 when claims deny.' The specialist is the only person who raised the issue and asks to remain anonymous. The compliance officer confirms the manager's instruction occurred. The organization has a non-retaliation policy. The specialist's direct supervisor is the manager in question. The compliance officer must decide how to investigate, protect the reporter, and address the billing practice. Estimated exposure: ~$220,000 in potentially improper claims over 18 months.
1. What are the compliance officer's immediate obligations, and how should the investigation be structured to protect the reporter?
Read the worked answer
Immediate obligations:
- Document the report and the specialist's request for anonymity; treat the report as a potential FWA matter.
- Protect the reporter: The reporter's direct supervisor is the subject of the allegation - a direct retaliation risk. Take steps to insulate the reporter (e.g., temporarily reassign reporting line, monitor for adverse actions, remind the manager of the non-retaliation policy without revealing the source).
- Do not reveal the source unless legally required; conduct the investigation through independent channels (audit of claims data, interviews of other staff, review of the manager's communications).
- Preserve evidence: claims data, emails, training materials, the instruction itself.
Investigation structure:
- Assign an investigator independent of the manager.
- Review claims data to quantify the pattern (99215 rate vs. peers, modifier 59 usage vs. peers).
- Interview other staff and the manager; do not disclose the reporter.
- Determine whether the instruction was isolated or systemic.
2. If the allegations are substantiated, what corrective and disclosure steps are required?
Read the worked answer
- Stop the practice immediately: instruct staff to bill based on documentation, not patient payer type; remove any standing instruction to add modifier 59.
- Quantify and remediate: identify the affected claims (~$220,000 exposure), determine which were improper, and repay overpayments. Under the 60-day repayment rule (for Medicare), identified overpayments must be reported and returned promptly.
- Consider self-disclosure: depending on severity, evaluate the OIG Self-Disclosure Protocol or CMS voluntary disclosure.
- Corrective action plan: provider/coder education, claim edits (e.g., flag 99215 frequency outliers, modifier 59 patterns), monitoring audits, and policy updates.
- Personnel action: address the manager's conduct per HR policy, consistent with the non-retaliation policy.
- Protect the reporter throughout: confirm no adverse action occurred; document the protection steps.