writer Billing Compliance Checker
Overview
Systematically evaluate healthcare billing practices against federal and state regulations, OIG (Office of Inspector General) guidance, CMS billing rules, and payer-specific policies to identify compliance risks, prevent fraud and abuse, and ensure adherence to the False Claims Act, Anti-Kickback Statute, and Stark Law. This skill supports compliance officers, billing managers, and revenue cycle leaders in maintaining compliant billing operations.
When to Use
- Auditing billing practices for compliance with federal/state regulations
- Evaluating individual claims or claim patterns for compliance risk
- Preparing for external audits (OIG, RAC, MAC, ZPIC/UPIC)
- Building or enhancing a billing compliance program
- Training staff on billing compliance requirements
- Investigating potential billing irregularities or whistleblower concerns
Required Inputs
| Input | Description | Format |
|---|---|---|
| Claims data | Billed CPT/ICD-10 codes, modifiers, amounts, dates | Structured array |
| Clinical documentation | Supporting notes and medical records | Document references |
| Provider information | NPI, specialty, employment/contract arrangements | Structured object |
| Billing patterns | Historical claim data for trend analysis | Structured array |
| Compliance program docs | Existing policies, training records, audit history | Document references |
Methodology
Step 1: Regulatory Framework Assessment
Identify applicable compliance requirements:
Federal Compliance Framework:
| Regulation | What It Covers | Key Risk |
|---|---|---|
| False Claims Act (FCA) | Knowingly submitting false claims for payment | Treble damages + per-claim penalties |
| Anti-Kickback Statute (AKS) | Remuneration for referrals of federal healthcare business | Criminal penalties, exclusion |
| Stark Law (Physician Self-Referral) | Physician referrals to entities with financial relationships | Claim denial, refund obligation |
| NCCI Edits | Correct coding to prevent unbundling and incorrect billing | Claim denial, overpayment |
| OIG Compliance Guidance | Industry-specific compliance program elements | Increased scrutiny, exclusion risk |
| 60-Day Overpayment Rule | Obligation to report and return identified overpayments | FCA liability if not returned |
Step 2: Claim-Level Compliance Audit
Evaluate individual claims against compliance criteria:
Billing Compliance Checks:
- Documentation supports the code billed — every code must be justified by clinical documentation
- Medical necessity established — diagnosis supports the procedure or service
- Correct code selection — CPT/HCPCS accurately reflects the service performed
- Proper modifier usage — modifiers used correctly, not to bypass edits inappropriately
- No unbundling — component codes not billed separately when a comprehensive code exists
- No upcoding — E/M level or procedure complexity matches documentation
- No duplicate billing — same service not billed twice for the same date
- Correct provider — billing provider performed or supervised the service as required
- Incident-to rules — services billed incident-to meet all CMS requirements
- Place of service accuracy — POS code reflects where service was actually rendered
Step 3: Pattern Analysis
Identify billing patterns that may indicate compliance risk:
High-Risk Billing Patterns:
| Pattern | Red Flag | OIG Risk Level |
|---|---|---|
| Consistently billing highest E/M level | Upcoding risk | High |
| High percentage of modifier 25 usage | Separate E/M not supported | Medium-High |
| Unusual modifier 59/XE usage | Unbundling risk | High |
| Same diagnosis on every claim | Cloning/template abuse | Medium |
| Services on every encounter regardless of diagnosis | Routine-ization | High |
| Billing above specialty peers (units, frequency) | Over-utilization | High |
| High volume of after-hours codes | Potential misuse | Medium |
| Bilateral procedures without bilateral diagnosis | Upcoding | Medium |
Statistical Analysis:
- Compare provider billing distributions against specialty benchmarks
- Identify outliers (billing greater than 2 standard deviations from peers)
- Analyze procedure frequency per patient against clinical norms
- Review modifier usage rates against specialty averages
Step 4: Stark Law and AKS Assessment
Evaluate referral patterns and financial arrangements:
Stark Law Compliance:
- Are there financial relationships between referring physicians and entities?
- Do referral patterns follow financial interests?
- Are applicable Stark exceptions properly structured and documented?
- Common exceptions: in-office ancillary, employment, personal services, fair market value
Anti-Kickback Assessment:
- Are there arrangements that could be construed as remuneration for referrals?
- Do compensation arrangements meet safe harbor requirements?
- Are marketing arrangements, free services, or below-market leases present?
- Common safe harbors: employment, personal services, space rental, equipment rental
Step 5: Compliance Risk Report
Generate the compliance assessment with risk scoring:
Risk Severity Levels:
- CRITICAL: Immediate compliance action needed, potential FCA/AKS exposure
- HIGH: Significant compliance risk, corrective action required within 30 days
- MODERATE: Compliance concern requiring investigation and monitoring
- LOW: Minor issue, address through education and process improvement
- ADVISORY: Best practice recommendation, no current violation
Output Specification
The output includes:
compliance_summary: total_claims_audited, critical_findings, high_risk_findings, moderate_findings, low_findings, overall_compliance_score (0-100)
claim_level_findings: claim_id, cpt_codes, icd10_codes, finding_description, compliance_rule_violated, severity, evidence, corrective_action
pattern_analysis: pattern_description, affected_claims_count, risk_level, statistical_evidence (provider vs benchmark), recommended_investigation
stark_aks_assessment: financial_relationships_evaluated, stark_risks, aks_risks, safe_harbors_documented, recommendations
overpayment_identification: claims with potential overpayment, estimated_overpayment_amount, 60_day_rule_deadline, return_obligation
corrective_action_plan: prioritized actions with finding, risk_level, corrective_action, responsible_party, deadline, monitoring_plan
compliance_program_assessment: seven_elements_evaluation (standards, oversight, training, reporting, enforcement, auditing, response), gaps, recommendations
Analysis Framework
OIG Seven Elements of an Effective Compliance Program
- Written standards and procedures: Coding and billing policies, compliance manual
- Compliance officer and committee: Designated leadership with authority
- Training and education: Regular training for all billing and coding staff
- Open lines of communication: Anonymous reporting mechanism (hotline)
- Internal monitoring and auditing: Regular proactive audits
- Enforcement through disciplinary guidelines: Consistent enforcement of standards
- Prompt response to detected offenses: Investigation and corrective action protocols
Audit Sample Sizing
| Risk Level | Recommended Sample | Frequency |
|---|---|---|
| High-risk areas | 30+ claims per provider | Quarterly |
| Moderate-risk areas | 10-20 claims per provider | Semi-annually |
| Low-risk areas | 5-10 claims per provider | Annually |
| New providers | 20+ claims | Within first 90 days |
| Post-corrective action | 20+ claims | Monthly for 3 months |
Examples
Input: Dermatology practice audit. Provider bills 99215 on 78% of established patient visits. Modifier 25 used on 85% of E/M claims with same-day procedures. Multiple destruction codes billed per encounter with modifier 59.
Compliance Assessment:
- CRITICAL: E/M upcoding risk — 99215 at 78% far exceeds specialty benchmark of 8-12%. Documentation review needed for sample of 99215 claims
- HIGH: Modifier 25 overuse — 85% usage exceeds benchmark of 30-40%. Risk of billing separately identifiable E/M without supporting documentation
- HIGH: Modifier 59 on destruction codes — potential unbundling. Review whether lesions are truly distinct anatomic sites with separate documentation
- Corrective action: Immediate retrospective audit of 30 claims across each flagged pattern. Provider education on E/M documentation requirements. Implementation of prospective coding review for 90 days
Guidelines
- Apply the FCA knowledge standard — "knew or should have known" the claim was false
- When in doubt, do not bill — it is safer to under-bill than to over-bill
- Document compliance program activities — evidence of a good-faith compliance program is a mitigating factor
- Respond promptly to identified overpayments — the 60-day clock starts when overpayment is identified
- Audit regularly and proactively — do not wait for external audits to find issues
Validation Checklist
- All seven OIG compliance program elements are evaluated
- Claim-level audits cover documentation support, medical necessity, and code accuracy
- Billing patterns are statistically compared against specialty benchmarks
- Stark Law and AKS risk factors are assessed
- Potential overpayments are identified with 60-day rule deadlines
- Corrective action plan addresses root causes with specific deadlines and owners
- Compliance findings are documented and retained for regulatory defense
HIPAA Compliance Notes
- Compliance audits require access to clinical documentation and claims data containing PHI
- Audit findings should be protected under attorney-client privilege when conducted by or at the direction of legal counsel
- External auditors and consultants must operate under BAA
- Compliance investigation files should be secured with restricted access
- Report compliance findings through appropriate channels (compliance officer, legal counsel)
- Whistleblower protections apply — do not retaliate against individuals who report potential violations