The government wants physicians to identify overpayments, but many say the responsibilities remain unclear.
The newly amended rule from the Centers for Medicare & Medicaid Services (CMS) governing how physicians and hospitals need to report and return Medicare overpayments has sparked a range of concerns and emotions among providers.
They find the ruleâs language vague and confusing, see the scope of what theyâre being asked to do as burdensome on a number of levels and complain that the ruleâs requirements add to the layers of regulations that they already face.
âItâs emotionally taxing as well as resource-taxing to the practice,â says Wanda Filer, MD, president of the American Academy of Family Physicians (AAFP). âTheyâre out there taking care of people. They donât necessarily keep their ears attuned to everything CMS is throwing at them. Theyâre trying to keep their heads above water with Meaningful Use and other rapid changes that are underway.â
Promulgated by CMS in February, the final rule requires healthcare providers and suppliers to report and return overpayments under Medicare Parts A and B within 60 days of the date the overpayment is identified, whether internally or by CMS or its contractors, or the date any corresponding cost report is due if that comes later.
CMS scaled back the âlook back periodâ during which providers must retroactively report and return overpayments from 10 to six years, which many in the healthcare field view as a step in the right directionâbut still unduly onerous.
Providers are expected to exercise what CMS terms âreasonable diligenceâ in attempting to uncover and return overpayments. The potential consequences of not doing so remain the same as in the past: criminal charges, civil liability and exclusion from federal healthcare programs.
âThe duty to identify and return overpayments is not a new one,â says Tony Salters, a CMS spokesperson. To avoid the penalties, he says, providers should adhere to the requirements by instituting proactive analytics processes that identify and calculate all overpayments going back the full six years, and then reporting and returning the money in question in a timely manner.
The term âreasonable diligenceâ means that providers should undertake both proactive compliance activities to monitor claims themselves, as well as reactive investigations in response to receiving âcredible informationâ about a potential overpayment, Salters says.
The rule itself says that these requirements âare meant to ensure compliance with applicable statutes, promote the furnishing of high quality care, and to protect the Medicare Trust funds against fraud and improper payments.â
While perhaps no one disagrees with those goals, some physicians and organizations that represent them continue to have questions about the particulars like, for example, what the rule means when it says providers have a âclear dutyâ to report and return overpayments.
The AAFP, which signed a 2012 letter that circulated to dozens of specialty societies and advocated for a three-year look-back period, is encouraging members to return overpayments as soon as theyâre identified but understands the burden that poses, Filer says. âThe vast majority of these overpayments are due to inadvertent billing errors,â she says. âItâs a little unclear how CMS is going to define âclear duty.â The clear duty of a provider is to care for your patients.â
Mark Silberman, JD, partner at Duane Morris LLP in Chicago, also isnât certain what CMS means by âclear dutyâ on the part of providers. âIt is not clearly defined, and I would hope they are gentle in their interpretation of that dutyâat least until the practical impact can be evaluated,â he says.
Filer has primarily heard from smaller family practices that they find these Medicare audits to be burdensome. âThat said, Iâm hopeful that as CMS continues to monitor this, if they find this is not the best place to put their resources, three years might start to look more attractive,â she says.
The AAFP does not plan to issue general advice on how its members should comply with the rule given their vast differences in resources, size and overhead, Filer says. âPractices are going to have to look at their own resources and what are the best practices for them,â she says. âFamily medicine tends to run on quite thin margins. Itâs not one where theyâre going to be able to spend a huge amount of capital on doing this work.â
Nonetheless, given the potential penalties, she adds that as a general rule, âweâre telling practices that self-audits are a form of preventive care for your practice.â
The American College of Physicians has heard about the rule change but hasnât taken a defined position and hasnât heard much feedback from members to date, spokeswoman Jacquelyn Blaser told Medical Economics via email.
Kenneth Kubitschek, MD, chief executive officer of Carolina Internal Medicine Associates in Asheville, North Carolina, believes the new rule mostly stemmed from problems with hospital providers and their employed physiciansâand that the ruleâs requirements are more realistic to expect from such large entities than a small practice like his, which has nine physicians, five non-physician providers and more than 50 total employees.
â[Hospitals] fiddled around for long periods instead of paying back millions of dollars,â he says. âThatâs why [CMS] said, âOK, youâve got 60 days.â For a practice like ours, 60 days actually sounds kind of short. Because weâre busy, everybodyâs busy, and trying to set aside time to dive into those kinds of things, to find out if itâs really a problem or just isolatedâitâs a real challenge.â
The 60-day clock begins when a practice identifies a problem, and Kubitschek, an editorial advisory board member of Medical Economics, says heâs not sure precisely how that time requirement is determined by CMS. Heâs also not sure how a practice like his can be expected to turn back the clock six years when, for example, the person responsible for the overpayment might have retired.
Kubitschek and his colleagues at Carolina Internal Medicine Associates are beginning to sort that out, thinking about questions like whether finding one overpayment should trigger a full investigation of that doctorâs billing going back six years, or an investigation of how the practice has billed the particular code in question, Kubitschek says. But the road ahead will be littered with such questions.
âI guess weâre going to have to learn how to do it,â he says. âIâm casting about trying to figure it out.â Typically the practice refunds any overpayments it finds, but what if it billed for a lab the patient missed? Heâs not sure whether to simply refund that one fee or attempt to extrapolate. âHow do I apply that to a six-year window? Iâm a little confused, and Iâm hoping for more clarification.â
For now, the practice does not have a plan in place, and Kubitschek isnât sure how it will comply within the ruleâs time requirements. âI think they should graduate this in, and they should differentiate between misinterpretation of a rule and fraud, and if itâs fraud the look-back period should be longer,â he says.
Kubitschek also believes that the look-back period should be shorter for small practices because practices the size of his âdonât have the same capacity for applying the large numbers of personnel.â
Healthcare attorneys empathize with their clientsâ state of mind but say theyâre well-advised to practice what one calls âpreventative lawâ in ensuring that their auditing practices err on the side of being as cautious and thorough as possible. They say that documentation of reasonable diligence can be critical to convincing CMS that a practice has not engaged in fraud, and that it has done all it can to root out inadvertent overbilling.
The final rule is an improvement over the original and not that different from the typical four-year âreopening periodâ that providers already deal with from other contractors, says Tony Maida, JD, partner with the health industry advisory group at McDermott, Will & Emery in New York. Some of those audits happen so long after the dates of service that the reopening period actually extends back closer to six years, adds Maida, a former deputy chief at the U.S. Department of Health and Human Services Office of the Inspector General.
Maida believes that CMS has hinted between the lines that practices should institute such compliance programs to be in Medicare. âThere is no regulation and no law that applies to everyone that says you have to,â he says. âBut that said, CMS thinks everybody should have one, and theyâre probably right about that at some level. Given the enforcement environment we have grown up in during the last 10 or 20 years, you would be ill-advised not to have one at this point.â
In addition to staying in CMSâ good graces, the new rule will make a compliance program more important to potential investorsâwhether hospitals, other practices or anyone in the private equity sectorâlooking to buy into physician practices, Maida predicts. âA buyer is going to kick the tires on your compliance program and see if the revenue from that practice is reliable,â he says.
A tight compliance program need not audit every claim, Maida says. âThereâs always a risk you will have overpayment in an area you havenât looked,â he says. But providers need to be able to show that they have a year-in, year-out assessment process that plans the internal audit around both areas where CMS has expressed concerns and the practiceâs own experience with overpayments.
Among the processes that providers should evaluate is what sort of âhotlineâ they have to receive complaints of overbilling, Maida says. âThis rule is probably a good time to reassess that process and make sure it is tight, that things donât get lost in the cracks, that decisions are made about whether to investigate something.â
If a provider has received several complaints and did not respond, he adds, âThat takes on more importance under this rule. The government says you got credible information about this issue, and you didnât do anything, or you did an incomplete job, and that is another strike against you.â
The ability of CMS to mine data and find practices that seem like outliers means that physicians need to invest more in their internal auditing function, Maida says. âItâs very easy to find out now, in a way it wasnât 10 years ago, who the top 10 billers are and pick a place [to audit],â he says.
Silberman of Duane Morris LLP agrees with Maida that providers need to be able to demonstrate they have attempted to root out and report overpayment errors. That makes some sense to him because otherwise, he figures, practices could spend time mired in denial about such errors if they suddenly see a spike in revenue from overbilling without asking why.
The lack of an adequate internal auditing function provides an opening for the government to second-guess your processes, Silberman says. âWhat I try to tell my clients is, whatever you do, have a reason,â he says. âIf you have a reasonable basis and explanation for why you did what you did, you can always have someone advocate for you. If you canât explain it, the government fills in their own explanation.â
Silberman recommends that physicians practice what they preach to their patients: get regular checkups and take preventative steps. Approach the matter as a triage, starting with current auditing practices and then looking backward. âThereâs no point in looking for what caused the injury if the patient dies on the table,â he says, extending the medical metaphor.
The next step is to decide whether you want to perform the audit yourself or hire an outside auditor. Doing so would increase costs but likely provide a more objective judgment. âWe all know the government is doing it, data mining and trying to find patterns,â he says, adding that if youâre going to have what he calls an âunpleasant discussionâ with the government, itâs very important to show youâve been diligent about rooting out and trying to fix the problem.
Silberman extends the analogy to preventive medicine by noting that taking a better-late-than-never approach and waiting to look for a problem might only mean it grows biger âSome people find problems and decide theyâre going to wait to see if itâs ever discovered. The risk to that is, the government can establish you didnât use reasonable diligence, youâre outside the 60-day window and then youâre going to start looking at some pretty serious penalties.â
While most overpayments are handled in civil court, Silberman adds, thereâs no guarantee, particularly when a practice doesnât seem like it has been exercising due diligence. âFind me a federal prosecutor who will verify that itâs not going to cross over into the criminal [realm],â he says. âTheir answer is, âWeâre going to have to wait and see what our investigation yields.â â
Silberman is concerned that physicians are leaving medicine, shifting to payer-less arrangements or pursuing employed relationships rather than more entrepreneurial paths because they find the administrative burden of actually running a practice that takes Medicare overwhelming.
But he suspects CMS requirements will not be easing any time soon, especially since the federal government has collected $47 billion in fines in just the last two years.
âTheyâre actually budgeting the recovery for fraud that hasnât been committed yet,â Silberman says. âYou know if you put forth the enforcement efforts, there is going to be a return on that investment.â