21.2 Regulatory Agencies, Review Contractors and Appeals
Key Takeaways
Identify the actual process and notice: claim review, survey, investigation, quality review and appeal have different purposes and authorities.
UPIC investigation and recommendation do not replace CMS approval and MAC implementation of a payment suspension or law-enforcement authority.
Use the current OIG project or report in its stated scope; a CIA is agreement-specific, and an exclusion check is a separate compliance process.
TPE generally uses 20–40 claims per round and up to three rounds, with a low-biller approach that can use fewer claims; it is not a universal three-round guarantee.
Original Medicare A/B claim appeals ordinarily proceed through MAC, QIC, OMHA, Council and court; CY2026 ALJ and court thresholds are $200 and $1,960. Submit evidence early and apply the specific good-cause rules and exceptions to later OMHA evidence.
Regulatory Agencies, Review Contractors and Appeals
A documentation problem can lead to several different processes: a claim review, a quality-of-care review, a survey, an investigation or an appeal. Identify the process before deciding how to respond. A request for records does not establish fraud, and a contractor's name does not tell you that every action it takes has the same authority or appeal route.
Match the organization to its function
| Organization or contractor | Main function relevant to CDI | Practical response |
|---|---|---|
| CMS | Administers Medicare, establishes program requirements and oversees contractors | Identify the applicable program, regulation, policy and effective date |
| Medicare Administrative Contractor (MAC) | Processes claims, conducts medical review and education, and performs first-level claim redeterminations | Follow the specific request or determination; preserve the record, submission evidence and deadlines |
| Recovery Audit Contractor (RAC) | Conducts automated and complex post-payment reviews to identify and correct improper payments, including overpayments and underpayments | Check the approved review topic, requested records and findings; distinguish a discussion opportunity from a formal appeal |
| Unified Program Integrity Contractor (UPIC) | Investigates potential fraud, waste and abuse and coordinates appropriate administrative actions and referrals | Route the request promptly to the authorized organizational response team; preserve relevant evidence |
| HHS Office of Inspector General (OIG) | Conducts oversight audits and investigations and exercises applicable exclusion and other enforcement authorities | Read the actual report or action; involve compliance and counsel as appropriate |
| Beneficiary and Family Centered Care QIO (BFCC-QIO) | Handles quality-of-care concerns and specified beneficiary discharge or service-termination reviews, as well as assigned utilization reviews | Use the notice and program-specific instructions; beneficiary fast appeals differ from routine provider claim appeals |
CMS describes RAC automated reviews as system-level reviews and complex reviews as reviews requiring a qualified person to examine the medical record. A complex review may involve an Additional Documentation Request (ADR). Neither an ADR nor an unusual billing pattern is itself a final finding of an improper claim. Review the current contractor instructions for compensation, record-request limits and program lookback periods. Reopening authority has separate conditions; a historical RAC limit is not a universal statutory three-year rule. CMS Recovery Audit Program; 42 CFR §405.980
Keep investigation and enforcement powers distinct
UPIC work can include medical-record requests, medical review, provider contacts and site visits. Its role is broader than simply detecting a particular code error, but it is not a police agency with independent authority to execute a search warrant or issue a criminal indictment. CMS's Program Integrity Manual distinguishes contractor personnel from law-enforcement personnel and describes referrals and coordination. A potential fraud lead is an allegation to investigate, not a completed legal conclusion.
Payment suspension illustrates the division of responsibility. The manual requires referral of payment-suspension requests to CMS for approval. The UPIC coordinates an approved suspension with the MAC, which implements the payment action. A stem saying that a UPIC investigated a suspicious pattern is different from one saying that the contractor independently imposed an unrestricted sanction. Read the notice, authority and procedural stage. CMS Program Integrity Manual, Chapter 4, especially §§4.6–4.7.1; Chapter 8, §8.3
Translate oversight findings into accurate local work
OIG's Work Plan helps an organization identify areas warranting attention. Check a project's actual scope and status, then read any resulting report. A report about one population, period or sample does not create a universal diagnostic threshold or establish that the same error occurred in every hospital. A risk signal should guide investigation and education without predetermining provider answers. OIG Work Plan
For example, a malnutrition audit requires separate checks of the provider's diagnosis, clinical support, query process and code assignment. In FY2027 ICD-10-CM, E40 identifies kwashiorkor; E43 identifies unspecified severe protein-calorie malnutrition. They are not interchangeable names. A dietitian's findings can support appropriate clarification but do not automatically substitute for the provider's diagnosis. Evaluate the actual case rather than importing a conclusion from an unrelated audit. FY2027 ICD-10-CM guidelines; FY2027 Index and Tabular files
A Corporate Integrity Agreement (CIA) is a specific agreement between OIG and an entity. OIG describes a five-year compliance period and obligations such as compliance leadership, training, independent review and reporting, with requirements tailored to the agreement. Not every False Claims Act matter results in a CIA, and a CIA does not universally mandate a particular copy-paste restriction or query sample. Read the signed agreement before describing its obligations. OIG Corporate Integrity Agreements
Exclusion is a separate enforcement concept. OIG's List of Excluded Individuals/Entities (LEIE) identifies current exclusions. Federal health care programs generally cannot pay for items or services furnished, ordered or prescribed by excluded individuals or entities, including specified indirect payment situations. An exclusion check is not the same as a clinical documentation audit, and a coding mistake does not automatically produce exclusion. Route a possible match through the organization's verification and compliance process. OIG Exclusions Program
Understand targeted review and education
Targeted Probe and Educate (TPE) is a MAC review and education process directed at selected risks. CMS generally describes rounds of 20–40 claims with individualized education and up to three rounds; its current low-biller approach can use fewer than 20 claims. Do not interpret these figures as a requirement that every hospital undergo exactly three rounds or as a guarantee against other review. If errors persist, CMS determines possible further action, which may include more intensive review or referral. CMS TPE
The review assignment can change without changing the underlying coverage rule. CMS transferred hospital short-stay patient-status reviews to MACs effective September 1, 2025, using TPE. BFCC-QIOs continue their other assigned functions, including quality concerns, discharge/service-termination appeals and higher-weighted DRG reviews. Do not send records to a former reviewer simply because an old policy names it. CMS hospital patient-status review FAQs, transition and TPE sections
Follow the correct appeal route
The following sequence applies to Original Medicare Parts A and B claim appeals. It is not the universal sequence for Medicare Advantage, commercial contracts, exclusions or beneficiary fast appeals. A provider-payment dispute and a beneficiary coverage appeal may also have different standing and procedures. Start with the actual determination and notice. CMS Parts A and B appeals booklet
| Level | Review body | Ordinary request deadline after receipt of the preceding determination or decision | Amount in controversy |
|---|---|---|---|
| 1 | MAC redetermination | 120 calendar days after the initial determination | No minimum |
| 2 | QIC reconsideration | 180 calendar days after the redetermination | No minimum |
| 3 | OMHA: ALJ hearing or an authorized attorney-adjudicator disposition | 60 calendar days after the reconsideration | For ALJ hearing requests filed in 2026: at least $200 |
| 4 | Medicare Appeals Council | 60 calendar days after the OMHA decision | No minimum |
| 5 | U.S. District Court | 60 calendar days after the Council decision or order | For judicial-review requests filed in 2026: at least $1,960, with other jurisdictional requirements |
The amounts are annual thresholds tied to the filing year, not the discharge year. Dismissal-review requests and escalation because an adjudicator has not acted have specific rules that differ from the ordinary table. Receipt is generally presumed five days after the notice date unless evidence shows otherwise; late filing requires the applicable good-cause review. Calendar the notice's instructions rather than treating the table as an extension. CMS CY2026 threshold notice
Adjudication periods are different from filing deadlines. CMS generally describes 60 days for MAC and QIC decisions and 90 days for ordinary OMHA and Council review, subject to applicable extensions and procedural circumstances. Escalated cases can have different periods, including 180 days. Expiration may create an escalation option under the relevant rules; it does not automatically pay the claim. The Council can adopt, modify, reverse or remand a decision. Its role is not confined to correcting procedural mistakes. CMS appeal-level procedures
Build the evidence packet early
Include the contested determination, relevant medical record, precise reason for disagreement and applicable authority. Organize the clinical timeline so a reviewer can locate the evidence rather than search an unexplained chart dump. CDI can help identify the documentation and clinical issues; authorized appeals staff, clinicians and counsel address their respective responsibilities.
For a provider or supplier appealing a Part A/B QIC reconsideration, new evidence first offered at OMHA is subject to a good-cause requirement. Explain and substantiate why it was not submitted earlier. Examples include a material issue first raised by the QIC or documented unsuccessful reasonable attempts to obtain the evidence. This is not a blanket ban on all later argument or all evidence from every participant: the rules distinguish documentary evidence, oral testimony, unrepresented beneficiaries and other specified parties. A position paper discussing evidence already in the record is different from newly introduced medical evidence. OMHA Case Processing Manual, Chapter 10, §§10.4.4 and 10.5
Worked decision: A hospital receives a QIC denial and finds an omitted laboratory report in its own file. The best response is to assess the new-evidence rule and provide a truthful, supported explanation with the OMHA request. It should not assume that calling the report an “appeal attachment” makes it admissible, or that later testimony automatically cures the omission. Preserve submission receipts and the original record; never backdate documentation to improve an appeal.
A notice describes a UPIC investigation and a proposed payment suspension. Which statement correctly distinguishes the roles described in CMS program-integrity guidance?
The UPIC may independently impose any suspension once a data analysis shows unusual billing.
The UPIC develops and coordinates the recommendation; CMS approves the suspension and the MAC implements the approved payment action.
The UPIC must obtain a criminal indictment before it may request medical records or perform medical review.
The MAC must treat every UPIC allegation as a final fraud finding and bypass the applicable procedures.
A hospital is preparing an ordinary Original Medicare Part A claim appeal after a QIC reconsideration. Its ALJ hearing request will be filed in 2026. Which planning statement is correct?
The amount-in-controversy threshold is selected from the discharge year, regardless of when the hearing request is filed.
The hospital can skip OMHA and request routine Council review directly because there is no Council minimum amount.
A request involving exactly $190 meets the CY2026 ALJ hearing threshold because that was the preceding year’s amount.
The CY2026 ALJ hearing threshold is $200; also check filing, standing and other requirements rather than treating the amount alone as sufficient.
After a Part A/B QIC reconsideration denial, a provider finds a relevant report that it did not submit to the QIC. What should its appeals team do when preparing the OMHA request?
Evaluate the new-evidence requirements and submit a truthful explanation and supporting facts for good cause, while preserving the record and submission evidence.
Assume that attaching the report to a position paper makes it argument rather than new evidence.
Withhold the report until the hearing because oral discussion automatically makes every previously omitted document admissible.
Alter the original entry date so the report appears to have been included in the earlier appeal packet.
Sections you finish are checked off in the contents.