Annual High-Risk Medicaid Audits

Summary#

The Medicaid Integrity Improvement Act would amend title XIX of the Social Security Act. It would require State Medicaid fraud control units to audit a statistically valid sample of high-risk providers and suppliers at least once a year, starting within one year after enactment. Its stated aim is to identify potential fraud, waste, and abuse; the bill does not guarantee that audits will find or prevent them.

  • The fraud control unit must coordinate audits with the HHS Inspector General and, as appropriate, the state agency that runs the Medicaid plan.
  • “High-risk” includes providers and suppliers in a federal high-risk screening category, or those the unit identifies using factors such as unusual billing, prior audits, payment anomalies, ownership risks, or credible fraud allegations.
  • The unit must report a summary of the audits and the extent to which they identified overpayments that were collected or referred for collection.
  • If the Secretary finds the unit did not meet the audit requirement, the Secretary may still certify or recertify it if it submits and implements an acceptable corrective action plan.
  • This is an introduced bill, not current law. It has been referred to the House Energy and Commerce Committee; passage is uncertain.

What it means for you#

  • State Medicaid fraud control units: They would have to conduct the annual sample audits and include results in an annual report. The bill does not require auditing every high-risk provider or supplier.
  • Providers and suppliers in the sample: They could be audited under this new requirement. The bill does not set audit procedures, timelines, or appeal rights.
  • Medicaid enrollees: The bill does not directly change eligibility, benefits, or how people apply for Medicaid.
  • Taxpayers: The bill does not change taxes or create a new fine. It also does not say how any recovered overpayments would be used.
  • Current law: The bill amends an existing Social Security Act provision about fraud control units and certification. The parent Act was not supplied, so I could not verify the full current requirements or how this audit duty would interact with them.

Money#

No cost information is in the available material.

  • The bill requires annual audits and reporting but gives no estimate for added state or federal spending, staffing, or other costs.
  • It calls for reporting overpayments identified and collected or referred for collection, but does not estimate those amounts.

What is unclear#

  • The bill does not explain how to determine whether a sample is “statistically valid.”
  • It does not set the audit methods, scope, or process for selecting providers and suppliers.
  • It does not define how the unit must apply the listed risk factors, including “credible allegations of fraud.”
  • The Secretary may set standards for corrective action plans; the bill does not specify those standards.
  • The bill does not say how audits would be funded or how they would fit with existing state or federal audits.

Case for#

  • The bill appears intended to direct regular audit attention toward providers and suppliers identified as higher risk, rather than requiring audits of all providers.
  • Requiring a sample could give fraud control units a way to look for potential problems while limiting audits to a portion of the high-risk group.
  • Reporting audit results and overpayment collections could make the units’ work more visible.

Case against#

  • The bill leaves key choices—such as sample design, audit methods, and how risk factors are applied—open, which could lead to uneven approaches.
  • Annual audits and reporting would require resources, but the bill provides no cost estimate or funding.
  • The Secretary could certify or recertify a unit that missed the audit requirement if it implements an acceptable corrective action plan. The bill does not set the plan’s standards or say how quickly it must be completed.