18.3 Medicare, Medicaid & Third-Party Payment Regulations

Medicare, Medicaid & Third-Party Payment Regulations

Quick Answer: FACHE executives must understand how Medicare and Medicaid pay, what conditions of participation and billing rules require, and how commercial third-party contracts and regulations constrain revenue cycle behavior. Payment literacy is strategy literacy—service lines, documentation culture, and capital plans live or die on reimbursement design and compliance.

Laws and Regulations knowledge statements expect leaders to connect payment rules to operational decisions. Finance chapters cover methodologies in depth; this section emphasizes the regulatory spine executives must not delegate blindly: eligibility for payment, prohibited billing practices, program integrity, and multi-payer coordination.

Why Payment Regulation Is an Executive Domain

Healthcare organizations convert clinical work into revenue only through regulated payment systems. Errors create underpayment, overpayment recoupment, civil False Claims Act (FCA) exposure, Criminal Health Care Fraud exposure in extreme cases, Corporate Integrity Agreements, and exclusion risk. Boards expect CEOs and CFOs to know payer mix vulnerability, major rule changes (e.g., site-neutral themes, quality payment links, Medicaid redeterminations), and the integrity of the revenue cycle control environment.

Payment regulation also shapes access. Coverage design, prior authorization, network adequacy, and Medicaid eligibility churn affect ED use, elective scheduling, and health equity outcomes. Executives who treat “billing” as purely technical underinvest in clinical documentation integrity, utilization management alignment, and patient financial navigation.

Medicare Program Structure

Medicare is a federal health insurance program primarily for people 65+, certain younger people with disabilities, and people with end-stage renal disease or ALS (eligibility categories as defined in law). High-level parts:

CMS administers Medicare with Medicare Administrative Contractors (MACs), Recovery Audit Contractors (RACs), Unified Program Integrity Contractors, Quality Improvement Organizations, and other contractors. Executives should know which contractor correspondence requires rapid multidisciplinary response (demand letters, probe audits, targeted medical reviews).

Medicare Payment Systems and Conditions of Payment

Most hospital acute care inpatient services paid under the Inpatient Prospective Payment System (IPPS) use MS-DRGs (or successor structures as updated) with adjustments (wage index, DSH/UCC themes, IME/GME where applicable, quality-based adjustments). Outpatient hospital services often fall under OPPS with Ambulatory Payment Classifications. Other settings have their own PPS designs. Prospective payment shifts risk: inefficient care and poor documentation of severity reduce margin; upcoding and unnecessary admissions create integrity risk.

Conditions of payment and related rules executives must resource:

1. Medical necessity and level of care. Orders, clinical indicators, and utilization review processes must support billed services.
2. Provider enrollment and reassignment. Billing privileges, PECOS accuracy, and revalidations are operational, not clerical trivia.
3. Teaching physician and split/shared rules where applicable—documentation of presence and participation matters.
4. Cost reporting. Medicare cost reports affect settlements, DSH, GME, and other calculations; inaccurate cost reports are high-stakes compliance events.
5. Quality and value-linked payment. Hospital Value-Based Purchasing, HACRP, HRRP, Promoting Interoperability, and other programs adjust payment based on measured performance—clinical ops and finance share ownership.
6. Coverage policies. National Coverage Determinations (NCDs), Local Coverage Determinations (LCDs), and LCD-related articles define when items/services are covered.

Medicaid: Federal–State Partnership

Medicaid covers low-income individuals and other eligibility groups defined by federal floors and state options (children, pregnant people, aged/blind/disabled, expansion adults in adopting states, etc.). Financing is shared (federal medical assistance percentage varies). CMS oversees state plans and waivers; state Medicaid agencies (and managed care organizations under state contracts) drive day-to-day payment policy.

Executive implications of Medicaid’s structure:

• Eligibility and churn. Redeterminations and administrative barriers change volumes and uncompensated care unexpectedly.
• Benefits and waivers. 1115, 1915(b)/(c) and other authorities reshape covered services (e.g., SDOH-related supports, behavioral health carve-ins/outs).
• Managed care dominance. Capitation shifts utilization management and network rules to plans; hospitals must manage both state policy and MCO contracts.
• Payment adequacy and supplemental payments. DSH, upper payment limit history, directed payments, and state-directed financing arrangements can be material to safety-net hospitals—and politically volatile.
• Compliance. Medicaid false claims exposure and state false claims acts (often with qui tam) parallel Medicare risk.

Multi-state systems cannot run a single “Medicaid playbook” without state overlays. FACHE leaders insist on jurisdiction-specific revenue and access analytics.

Third-Party Payers and Managed Care Regulation

Commercial insurers, employer self-funded plans (ERISA overlay), Medicare Advantage, Medicaid managed care, workers’ compensation, and auto/liability coverage each bring contract and regulatory constraints. Key executive themes:

Self-funded employer plans are often governed primarily by ERISA, which can preempt some state insurance mandates—yet hospitals still face the practical payer on the other side of the EDI transaction. Leaders should not confuse “ERISA preemption” with “no rules.”

Program Integrity and the False Claims Act

Payment regulations are enforced through audits, overpayment demands, and fraud-and-abuse laws. The federal False Claims Act imposes liability for knowingly submitting (or causing submission of) false claims, or knowingly retaining overpayments (obligation to return within prescribed timelines under the 60-day rule framework as implemented). “Knowingly” includes deliberate ignorance and reckless disregard—not only intentional fraud. Qui tam relators (whistleblowers) amplify detection risk.

High-risk payment integrity domains for executives:

• Upcoding, cloning documentation, and medically unnecessary procedures or admissions.
• Outpatient vs. inpatient status errors and device credit failures.
• Physician arrangement issues that taint claims (Stark/AKS intersections).
• Duplicate billing, unbundling, and incorrect modifiers.
• Grant or cost-report falsification.
• Failure to return identified overpayments promptly.

An effective response culture encourages internal reporting, prompt investigation, repayment when due, and disclosure strategies coordinated with counsel—not silent “write-offs” that leave false claims risk unaddressed.

Operationalizing Payment Regulation Across the Enterprise

FACHE-level practice integrates payment rules into management routines:

1. Payer strategy: portfolio of MA, traditional Medicare, Medicaid, and commercial mixes aligned to mission and margin.
2. CDI and coding governance: clinical documentation integrity programs linking quality scores and payment accuracy.
3. Denial management: root-cause analytics feeding registration, authorization, and care management redesign—not only appeal volume vanity metrics.
4. Contract management: searchable obligations, rate schedules, stop-loss, and audit clauses; multidisciplinary negotiation teams.
5. Patient financial experience: estimates, charity care/financial assistance policy compliance (including 501(r) for many charitable hospitals), and plain-language bills.
6. Regulatory surveillance: assigned owners for CMS final rules, state Medicaid bulletins, and major payer policy updates each year.
7. Education: service-line leaders understand how their documentation and order patterns affect payment and compliance—not only RVUs.

Decision Lens for Payment-Related Initiatives

When evaluating a new service, site of care, or physician alignment model, ask: Who is the primary payer? What coverage and prior auth rules apply? Which PPS or fee schedule pays? What quality reporting attaches? What fraud-and-abuse issues does the financial relationship create? How will uninsured and underinsured patients be navigated? Can HIM, mid-revenue cycle, and compliance staff support the volume? Payment regulation is not a back-office afterthought—it is a core constraint and opportunity set for healthcare strategy.