This article was reprinted in Health Lawyers Weekly, a publication of the American Health Law Association, on May 17, 2013.
District Court Finds That Medical Group’s Failure to Further Investigate Audit Results May Violate Requirement to Return Overpayments
Background
Internal audits of third-party payment claims – frequently referred to as “self-audits” – have been recognized as an effective way for health care providers to identify and to correct non-compliant billing practices. The Department of Health & Human Services, Office of Inspector General (OIG) recommends review of bills and medical records for compliance with applicable coding, billing and documentation requirements in its compliance guidance for individual physicians and small physician group practices. OIG compliance guidance for clinical laboratories also urges the use of compliance audits.
More recently, issues related to self-audits have been raised in connection with statutory provisions added by the Patient Protection and Affordable Care Act (Pub. L. 111-148), as amended by the Health Care Education Reconciliation Act of 2010 (Pub. L. 111-152), collectively known as the Affordable Care Act (ACA). These provisions require providers to report and return any Medicare or Medicaid overpayment within 60 days of identification of the overpayment, or face administrative sanctions and potential liability under the False Claims Act (FCA).1 In a proposed rule that would implement these statutory provisions with respect to Medicare overpayments, the Centers for Medicare & Medicaid Services (CMS) indicated that when a Medicare provider or supplier “performs an internal audit and discovers that overpayments exist,” an overpayment has been identified, triggering the obligation to report and return the overpayment within 60 days. CMS, Medicare Program; Reporting and Return of Overpayments, 77 Fed. Reg. 9179, 9182 (proposed Feb. 16, 2012).
U.S. and State of Wisconsin, ex rel. Keltner v. Lakeshore Medical Clinic, Ltd.
A recent court decision demonstrates that self-audit results can have important compliance and provider liability implications, including under the statutory requirement that health care providers return overpayments within 60-days of their identification. In U.S. and Wisconsin, ex rel. Keltner v. Lakeshore Med. Clinic, Ltd., Case No. 11-cv-00892, 2013 WL 1307013, at *1 (E.D. Wis. Mar. 28, 2013), a former employee of a large multi-specialty medical group sued the medical group under the FCA’s qui tam provisions and related state law, claiming that the medical group had filed fraudulent payment claims with Medicare and Medicaid. The employee alleged, among other things, that it overbilled Medicare and Medicaid for evaluation and management (E/M) services. She claimed that an annual internal audit of 25 claims per physician demonstrated that two physicians had each upcoded more than 10% of his claims. The employee alleged that although the medical group returned overpayments related to their specific claims that were found to have been upcoded, the physicians’ non-audited claims were not reviewed. The employee asserted that the medical group subsequently stopped reviewing E/M service codes, leaving its physicians free to upcode claims without being discovered. Id. at *3. Both the United States and the state of Wisconsin declined to intervene in the action; however, the employee continued to pursue her claim.
The medical group filed a motion to dismiss the complaint, including claims related to E/M services, asserting that it did not state a valid cause of action and that it did not include information necessary to support a fraud claim. The employee asserted, however, that under the circumstances described above, it could be “plausibly inferred” that the medical group submitted fraudulent claims for E/M services. Id.
The court agreed, finding that the employee’s allegations were sufficient to withstand the medical group’s motion to dismiss. The court stated that “[a]lthough [the employee] does not allege that [the medical group] knew that specific requests for reimbursement for E/M services were false, she claims that [it] ignored audits disclosing a high rate of upcoding and ultimately eliminated audits altogether.” Id. According to the court, “[t]hese allegations plausibly suggests that [the medical group] acted with reckless disregard for the truth and submitted some false claims.” Id.
The court also rejected the medical group’s assertion that coding decisions were subjective and that most of the alleged errors involved a one-level coding difference only. According to the court, “[w]hile a one-level coding difference might reflect a legitimate difference of opinion as to the value of the services provided, it could also result from wrongful upcoding and from [the medical group’s] failure to review bills that it had reason to believe contained errors.” Id. Similarly, the court rejected the medical group’s assertion that the alleged miscoding could have reflected only “an absence of medical documentation,” rather than a failure to provide the services billed. The court stated that while FCA liability requires proof that the medical group did not actually provide the services reflected on its claim for payment, “[a]n absence of medical documentation is sufficient to support a plausible claim of fraud.” Id.
The court stated that the employee had also stated “a plausible claim for relief under the amended reverse false claim provision of the FCA for overpayments withheld after May 20, 2009.”2 According to the court, “[i]f the government overpaid [the medical group] for E/M services and [it] intentionally refused to investigate the possibility that it was overpaid, it may have unlawfully avoided an obligation to pay money to the government.” Id.
The court’s decision will allow the employee to proceed with her FCA claims, both as to claims that were submitted after the self-audit was completed and as to the medical group’s failure to return overpayments that had been received previously. It is not, however, the final decision in this matter; the medical group may very well prevail in its defense of her fraud claims.
Analysis of Impact of Self-Audit Findings
The court’s decision in Lakeshore Med. Clinic demonstrates certain vulnerabilities to qui tam lawsuits resulting from self-audits. Additionally, although the employee did not rely on statutory provisions that require return of an overpayment within 60 days of identification, the decision provides a context for analyzing issues related to this requirement.
If the employee’s allegations in Lakeshore Med. Clinic are taken as both true and complete, the medical group performed self-audits to identify potential non-compliant payment claims. However, it did not use the audit results, except to return overpayments related to particular claims that were within the audit sample and which related to the two physicians who had been determined to have overcoded E/M services significantly. This resulted in the medical group’s potential liability for both claims submitted after the results of the self-audit were known and for claims for which payment had already been received. Each type of claim is discussed below.
Subsequent Claims
The Lakeshore Med. Clinic court appears to have determined that the employee alleged a valid cause of action related to payment claims submitted after the medical group’s receipt of the audit results because it took no action in response to the audit findings, and, in fact, stopped performing self-audits. According to the court, this was sufficient for it to infer that (1) false claims were subsequently submitted and (2) the medical group acted in reckless disregard of those claims (sufficient to establish “knowing” conduct under the FCA).
Ober|Kaler’s Comments: Given that the FCA provides for significant penalties for false claims if the claimant acted “in deliberate ignorance of the truth” or “in reckless disregard of the truth,” a health care provider whose self-audit indicates that sampled claims have been overpaid should determine whether further action is required to avoid recurrence of such incorrect claims. Lakeshore Med. Clinic demonstrates that failure to take reasonable actions to prevent recurrence of improper claims of the same type identified in the self-audit could support an assertion that the health care provider acted in reckless disregard for the truth of its subsequently submitted payment claims. Documentation demonstrating that the health care provider employed reasonable good faith efforts to correct any improper billing procedures may offer substantial protection against FCA allegations if it is determined to have subsequently submitted incorrect claims for payment.
Claims for Which Payment Had Been Previously Received
The medical group’s alleged failure to take further action in connection with claims for which it had previously received payment, particularly claims that were not part of the two 25-claim samples, raised issues under the statutory provisions requiring return of overpayments. Although the court in Lakeshore Med. Clinic was not required to follow CMS interpretations of these provisions as reflected in its proposed rule, its application to the facts alleged in that matter may be instructive.
As discussed previously, CMS stated in the proposed rule that an overpayment could be deemed to have been identified from an internal audit. The agency, however, did not state that the audit served to identify overpayments related to claims that had not been specifically reviewed. Similarly, there is nothing in CMS’ discussion of government audit results that indicates specifically that any such finding applied to claims that had not been reviewed by the agency. CMS stated that when a government agency informs a provider or supplier that its audit had discovered a “potential overpayment,” the provider or supplier was required to make a “reasonable inquiry” to determine if it received an overpayment; its failure to do so could cause it to have knowingly retained an overpayment in violation of the law because it would have then acted in reckless disregard or deliberate ignorance of whether it received an overpayment. 77 Fed. Reg. at 9182.
According to CMS, receipt of information concerning a potential overpayment could “create[ ] an obligation to make a reasonable inquiry to determine whether an overpayment exists.” Id. Therefore, under the proposed rule, further analysis of claims may be required if self-audit results are sufficient to raise concerns that overpayments had been received regarding claims that had not been reviewed. Under the facts raised in Lakeshore Med. Clinic, the question would be whether the determination that two physicians had overcoded more than 10% of their E/M services required the medical group to analyze additional non-audited claims for E/M services that these physicians had furnished.
Ober|Kaler’s Comments: The proposed rule does not provide specific advice as to how to determine whether the results of a self-audit are sufficient to create an obligation to investigate whether an overpayment existed in connection with unaudited claims. In the absence of any specific guidance, it would appear reasonable for a health care provider to review the totality of circumstances to determine whether the incorrect payment claims that were identified as part of the self-audit reflect isolated mistakes or omissions, such as the failure to document a particular service that had been provided, or whether they reflect a general practice or misunderstanding of payment requirements that would routinely affect payment claims. The former would be less likely to require analysis of additional claims than the latter.
Similarly, the proposed rule did not suggest whether there was a threshold of improper claims that was required to be exceeded before an obligation to analyze additional claims was triggered. For purposes of claims review generally required under a Corporate Integrity Agreement, the OIG has required further analysis only if the “net financial error rate” from an initial 50-sample unit equals or exceeds 5%. The calculated error rate used by the OIG reflects both the percentage of improper claims and the amounts involved; it is computed based on the dollar difference between the total amount that was paid and the total amount that should have been paid, divided by the total dollar value of the sample. As part of the calculation required by the OIG, any underpayments are offset from overpayments received; CMS’ proposed rule, however, does not indicate that underpayments are relevant. While this may be a reasonable approach in determining whether further analysis of previously paid claims is necessary, CMS has not recommended its use for this purpose (or even acknowledged that any level of payment discrepancies reflected in a self-audit is considered de minimus and can be disregarded). Health care providers are therefore left with little guidance as to their legal obligations upon receipt of self-audit results reflecting any overpayment for services that were provided.
Conclusion
Ober|Kaler Comments: For sure, the lack of guidance from CMS regarding application of the 60 day overpayment return requirement places health care providers in a difficult position. Nonetheless, if a self-audit reflects excessive payment for services, they will be required to make important decisions regarding what, if any, action is required. This includes determining whether further action is required in connection with claims for which payment has already been received and, if so, determining what procedures are appropriate to identify related overpayments. These determinations, including the basis on which they were made, should be carefully documented even if it is determined that no further action is required. Such documentation may assist a health care provider prove that it did not know of the existence of an overpayment or act in reckless disregard or deliberate ignorance of its existence, should a claim of failure to return overpayments be asserted.
In the absence of final regulations, some health care providers may be inclined not to take any action when a self-audit reveals a potential overpayment. A provider may believe that the proposed rule’s requirement that it exercise “reasonable diligence” or make a “reasonable inquiry” when there is information to suggest that an overpayment may exist goes beyond what the statute requires. Alternatively, it may believe that because the agency has not issued a final rule specifying related requirements, the federal government would not pursue violations of the 60-day repayment rule in this type of situation. They may or may not be correct. However, health care providers that fail to review results of internal audits and to take any action to identify and return overpayments that is appropriate under the particular circumstances may be at significant legal risk. The lack of specific agency guidance may not dissuade potential qui tam relators from pursuing claims against health care providers.
How to determine whether there is a sufficient basis to require a health care provider to investigate whether it received overpayments is only one of many important issues related to the statutory obligation to return overpayments about which there is no clear guidance available. Providers of health care services and their legal counsel will need to remain alert for subsequent developments, particularly final regulations addressing CMS’ implementation of the statutory requirement.
NOTES
1 Claims under the FCA for failure to repay monies owed to the government are referred to frequently as “reverse false claims.”
Under statutes that are currently in effect, a person who has received a Medicare or Medicaid overpayment is required to report and return the overpayment within 60 days after the date on which the overpayment is identified (overpayments related to cost reports must be reported and returned when the cost report is due). 42 U.S.C. § 1320a-7k. Failure to do so can result in civil money penalties and related assessments and exclusion from Federal health care programs. 42 U.S.C. § 1320a-7a. Additionally, an overpayment that is not repaid within 60 days becomes an “obligation” under the FCA. 42 U.S.C. § 1320a-7k(d)(3). Under the FCA, a person who knowingly and improperly avoids or decreases an obligation to pay or transmit money to the government is subject to substantial monetary damages. 31 U.S.C. § 3729(a)(1)(G).
2 The date referred to by the court reflects enactment of the Fraud Enforcement Recovery Act of 2009 (FERA), Pub. L. 111-21, which defined “obligation” for purposes of the FCA to include “an established duty... arising from the retention of an overpayment.” This new definition effectively provided for a cause of action under the FCA based on failure to return an overpayment received from the government. The 60-day deadline for return of overpayments was provided for in subsequent ACA legislation, which became effective on May 22, 2010. See generally, U.S. ex rel. Stone v. Omnicare, Inc., No. 0904319, 2011 WL 2669659, *3 (N.D. Ill. July 7, 2011). In Lakeshore Med. Clinic, the employee did not rely on the 60-day requirement provided for in current statutes.