Key Takeaways

  • The National Correct Coding Initiative (NCCI) edits are maintained by CMS to prevent improper code pair combinations (bundling edits) and ensure accurate payment.
  • NCCI Column 1/Column 2 edits identify code pairs that should not be reported together — the Column 2 code is bundled into the Column 1 code unless a valid modifier overrides the edit.
  • Medically Unlikely Edits (MUEs) set maximum units of service for a code that a single provider can report for a single patient on a single date of service.
  • The False Claims Act (FCA) imposes penalties for knowingly submitting false claims to government payers — violations can result in triple damages plus per-claim fines.
  • The Anti-Kickback Statute (AKS) prohibits offering, paying, soliciting, or receiving anything of value to induce referrals for services covered by federal healthcare programs.
  • The Stark Law (Physician Self-Referral Law) prohibits physicians from referring Medicare/Medicaid patients to entities with which they have a financial relationship for designated health services.
  • Medical necessity means that the service or procedure is reasonable and necessary for the diagnosis or treatment of the patient's condition — it is the foundation of proper coding and billing.
  • Auditing programs (internal and external) review coding accuracy, documentation support, and compliance with payer rules to identify errors and prevent fraud.
Last updated: February 2026

Modifiers, Compliance & Regulatory Guidelines

Compliance is the backbone of ethical medical coding. CPC coders must understand not only how to assign codes accurately, but also the regulatory framework that governs healthcare billing. This section covers NCCI edits, fraud and abuse laws, medical necessity, and auditing — all heavily tested on the CPC exam.


National Correct Coding Initiative (NCCI) Edits

The NCCI, maintained by CMS, consists of automated edits designed to prevent improper payment for services that should not be reported together.

Column 1 / Column 2 Edits

ConceptDefinition
Column 1 codeThe comprehensive (more inclusive) code — always payable
Column 2 codeThe component (lesser/included) code — bundled into Column 1
Modifier indicator0 = NO modifier override allowed; 1 = modifier override IS allowed (e.g., -59, X{EPSU})

Example:

  • Column 1: 43239 (Upper GI endoscopy with biopsy)
  • Column 2: 43235 (Upper GI endoscopy, diagnostic)
  • Result: Diagnostic endoscopy is included in the surgical endoscopy and should NOT be reported separately (bundled)

When Column 2 Codes CAN Be Separately Reported

If the modifier indicator = 1, and the services are truly distinct, a modifier (-59 or X{EPSU}) can be appended to the Column 2 code:

  • Different anatomical site
  • Different surgical session
  • Different encounter
  • Different incision/excision

Medically Unlikely Edits (MUEs)

MUEs set the maximum number of units a provider can report for a single CPT/HCPCS code per patient per day:

ExampleMUERationale
99213 (Office visit, established)1Only one E/M per provider per day per patient
20610 (Major joint injection)2Maximum of 2 major joints per day
36415 (Venipuncture)1Only one venipuncture per encounter

Key Rule: Claims with units exceeding the MUE will be denied automatically. If medically justified, a modifier or appeal with documentation may be needed.


Fraud & Abuse Laws

False Claims Act (FCA) — 31 U.S.C. 3729-3733

The FCA is the primary federal tool for combating healthcare fraud:

ElementDetails
ProhibitsKnowingly submitting false or fraudulent claims to government healthcare programs
"Knowingly"Actual knowledge, deliberate ignorance, or reckless disregard of the truth
PenaltiesTriple damages (3x the fraudulent amount) + civil penalties of $11,000-$27,894 per false claim
Qui tam provisionWhistleblowers (relators) can file lawsuits on behalf of the government and receive 15-30% of recovered funds
Statute of limitations6 years from the violation or 3 years from when the government knew (max 10 years)

Anti-Kickback Statute (AKS) — 42 U.S.C. 1320a-7b

ElementDetails
ProhibitsOffering, paying, soliciting, or receiving anything of value to induce referrals for services covered by federal healthcare programs
ScopeApplies to BOTH parties — the person offering AND the person receiving
PenaltiesCriminal: up to 10 years imprisonment + $100,000 fine; Civil: up to $100,000 per violation + treble damages
Safe harborsCertain arrangements are exempt (e.g., bona fide employment, personal services contracts, group purchasing organizations)

Examples of AKS Violations:

  • A physician receiving cash payments for referring patients to a specific lab
  • A DME company giving free equipment to physicians who order from them
  • A hospital paying physicians above-market rent for office space to secure referrals

Stark Law (Physician Self-Referral) — 42 U.S.C. 1395nn

ElementDetails
ProhibitsPhysicians from referring Medicare/Medicaid patients for designated health services (DHS) to entities with which the physician (or immediate family member) has a financial relationship
Designated Health ServicesClinical lab, physical therapy, occupational therapy, radiology, DME, home health, outpatient prescription drugs, inpatient/outpatient hospital services
PenaltiesDenial of payment, refund of amounts collected, civil monetary penalties up to $15,000 per service, exclusion from federal programs
ExceptionsIn-office ancillary services, physician services, fair market value arrangements, academic medical centers
Key difference from AKSStark is a strict liability statute — no proof of intent is required

Medical Necessity

Medical necessity is the foundation of proper coding and billing. A service must be:

  1. Reasonable and necessary for the diagnosis or treatment of the patient's illness, injury, or condition
  2. Consistent with nationally accepted standards of medical practice
  3. Not primarily for the convenience of the patient, physician, or provider
  4. The most appropriate level of service that can safely be provided

Documentation Requirements for Medical Necessity

RequirementWhat It Means
Chief complaintReason for the encounter must be documented
HistoryRelevant medical/surgical/family/social history
Physical examFindings that support the diagnosis
Assessment/diagnosisICD-10-CM code must support the procedure/service
Plan of careTreatment plan that justifies the services billed

Key Rule: The ICD-10-CM diagnosis code must support the medical necessity of the CPT/HCPCS procedure code. If the diagnosis does not justify the procedure, the claim may be denied.

Advance Beneficiary Notice (ABN)

An ABN (CMS-R-131) must be given to a Medicare patient before a service is provided if the provider believes Medicare may not cover the service:

  • The patient can choose to receive the service and accept financial responsibility
  • Without a valid ABN, the provider cannot bill the patient for denied services
  • The ABN must be specific about the service, expected cost, and reason for potential denial

Coding Compliance Programs

Key Elements of a Compliance Program

The OIG (Office of Inspector General) recommends seven elements for an effective compliance program:

  1. Written policies and procedures — Code of conduct, coding guidelines, billing procedures
  2. Compliance officer and committee — Designated leadership for compliance oversight
  3. Education and training — Regular training for all staff involved in coding and billing
  4. Open lines of communication — Hotlines, reporting mechanisms for concerns without fear of retaliation
  5. Internal monitoring and auditing — Regular reviews of coding accuracy and documentation
  6. Enforcement through disciplinary guidelines — Consistent consequences for violations
  7. Prompt response to detected offenses — Investigation, corrective action, and voluntary self-disclosure when appropriate

Internal vs. External Audits

TypeConducted ByPurpose
Internal auditOrganization's own compliance teamProactive identification of coding errors, education opportunities, and documentation deficiencies
External auditOutside auditing firm, payer (RAC, MAC, OIG), or government agencyIndependent review of coding accuracy; may be routine or triggered by data anomalies

Common Coding Compliance Issues

IssueDescription
UpcodingAssigning a higher-level code than documentation supports
UnbundlingReporting component codes separately when a comprehensive code exists
DowncodingAssigning a lower-level code than supported (results in underpayment)
Duplicate billingBilling the same service more than once
Phantom billingBilling for services not actually performed
Modifier misuseUsing modifiers to override edits without clinical justification
Lack of documentationServices billed without adequate documentation support
Test Your Knowledge

In NCCI Column 1/Column 2 edits, the Column 2 code represents:

A
B
C
D
Test Your Knowledge

A physician refers Medicare patients to a laboratory in which the physician has a financial ownership interest. Which law is potentially violated?

A
B
C
D
Test Your Knowledge

Reporting component codes separately instead of using the appropriate comprehensive code is known as:

A
B
C
D
Test Your Knowledge

Under the False Claims Act, a whistleblower who reports fraud can receive what percentage of recovered funds?

A
B
C
D
Test Your KnowledgeMulti-Select

Which of the following are among the OIG's seven recommended elements for an effective compliance program? (Select all that apply)

Select all that apply

Written policies and procedures
Guaranteed immunity from prosecution for all employees
Education and training for staff
Internal monitoring and auditing
Mandatory external audits every quarter
Open lines of communication for reporting concerns
Test Your KnowledgeFill in the Blank

The Stark Law is a _____ liability statute, meaning no proof of intent is required for a violation.

Type your answer below

Test Your KnowledgeMatching

Match each federal healthcare law to the conduct it prohibits:

Match each item on the left with the correct item on the right

1
False Claims Act (FCA)
2
Anti-Kickback Statute (AKS)
3
Stark Law
4
HIPAA
Test Your KnowledgeOrdering

Arrange the steps a coder should follow when an NCCI Column 1/Column 2 edit is triggered for a claim:

Arrange the items in the correct order

1
If distinct, apply modifier -59 or X{EPSU} to the Column 2 code
2
Identify the Column 1 (comprehensive) and Column 2 (component) codes
3
Submit the claim with appropriate documentation
4
Check the modifier indicator (0 = no override, 1 = modifier allowed)
5
Review documentation to determine if services were truly distinct
Test Your Knowledge

A Medicare provider believes a service may not be covered for a particular patient. Before providing the service, what document should be given to the patient?

A
B
C
D
Congratulations!

You've completed this section

Continue exploring other exams