3 Steps to Prepare for a Risk-Adjustment Audit

In risk-adjusted payment models, physicians are paid based on their patients’ clinical complexity. Generally speaking, the sicker and more complex the patient, the higher the payment. Risk adjustment plays a significant role in Medicare Advantage contracts, commercial capitated payment arrangements, and CMS alternative payment models such as shared-savings contracts and accountable care organizations. Although several risk-adjusted methodologies exist, CMS’ hierarchical condition category (HCC) risk adjustment model is one of the most widely recognized.

Risk-Adjusted Payments Under the Microscope

As with any payment model, there’s always the potential to "game the system" and over-report CMS-HCCs to increase reimbursement. Thus, it’s not surprising that the agency has begun to perform Risk Adjustment Data Validation (RADV) audits of its Medicare Advantage plans. According to the latest data from paymentaccuracy.gov, the agency has made $16.2 billion in improper payments to its Part C supplemental plans, representing a 9.99% improper payment rate. There have been whistleblower lawsuits as well, such as the one against United Healthcare Medicare & Retirement in which the federal government accuses the carrier of implementing an organization-wide upcoding scheme to increase its operating income by $100 million.

How Risk Adjustment Audits Affect Independent Practices

When Medicare Advantage plans lose money due to recoupments, the pool of funds from which they pay providers also shrinks. However, commercial plans using a risk-adjusted payment methodology also pose a threat because they’ll be able to recoup money directly from physicians who over-code HCC diagnoses, says Sean M. Weiss, CHC, CEMA, CMCO, CPMA, CPC-P, CPC, partner and vice president of compliance at Doctors Management, a medical and health care consulting firm based in Knoxville, Tenn. Commercial payer HCC audits aren’t currently punitive, but that may soon change as payers continue to collect more data about physician billing patterns.

“I think HCCs are going to cost doctors a lot of money in recoupments,” says Weiss.

Steps to Performing an Internal HCC Compliance Audit

Performing an internal HCC audit helps physicians identify compliance risks before payers do, says Weiss. He provides these steps to help practices get started:

1. Select cases for review 

For a baseline audit, randomly select 20-25 encounters per physician. For follow-up audits, Weiss says to randomly select at least five claims per physician on a quarterly basis. Random selection could be every third patient encounter per day, for example. Another option is to consider software that automatically identifies claims that are at high-risk for an HCC audit.

2. Review documentation carefully

Risk adjustment is directly related to accurate and complete physician documentation. Consider using the CMS RADV medical record checklist as a starting point on which to base the audit. This checklist reminds physicians, for example, to clarify the historical status of all diagnoses (e.g., history of cancer vs. current cancer) and to validate all diagnoses on the problem list. That’s because in some EHRs, diagnoses never drop off the list even though they’re resolved.

CalOptima—a public health agency that manages the Medi-Cal program in Orange County, California—provides a similar HCC documentation tip sheet that can also be used as the basis for an internal HCC audit, helping auditors identify the documentation on which they should focus.

3. Act on audit findings

If the audit reveals low HCC scores, determine why HCC capture is difficult. For example, do physicians continually report unspecified codes? If so, can the practice work with its EHR vendor to develop templates or other prompts that encourage physicians to assign more specified codes, when appropriate? When it comes to HCCs, specificity matters.

Physician education may also be warranted, says Weiss. Physicians need to understand the fundamentals of HCCs but also have a general awareness of the fact that payers will increasingly reimburse them based on the ICD-10 diagnosis codes—not CPT codes—they report, he adds.

Payers, many of which have a comprehensive process for data collection, may also be able to initially help practices identify each patient’s HCCs, says Weiss. This is especially helpful for new patients who may not provide accurate and comprehensive information about all of the chronic conditions for which they receive treatment, he adds.

Or what if the practice discovers that patients simply don’t present to the office on an annual basis? This is important because physicians must evaluate, document, and bill HCCs annually to ensure that capitated payment calculations include these diagnoses. Identifying and addressing care gaps is critical, says Weiss.

New Audit, Same Focus

HCC audits aren’t really that different from other types of audits that practices should perform regularly, says Weiss. As long as practices focus on accurate and comprehensive documentation that justifies medical necessity, they should be able to avoid costly recoupments, he adds.