Kusserow on Compliance: Oncology remains high federal enforcement priority

Oncology continues to be a high enforcement priority for the DOJ, OIG, FBI, and CMS.  The latest fraud investigation by the DOJ involves CCS Oncology, large and prominent providers of cancer care. The reported question being investigated relates to possible billing irregularities involving Medicare and Medicaid. As with most cases related to oncology irregularities, the predication was by a “whistleblower.” The complaint alleges CCS billed for more expensive procedures than were actually performed, billed for procedures that never were performed, and performed medically unnecessary procedures on patients, among other violations, according to the source. The stream of cases is long enough to outline key factors that have led to settlements with the DOJ and OIG. Compliance Officers, whose portfolio of responsibilities include oncology services may wish to review the following to ensure none of these factors are at work in a manner that may trigger investigation.

Common Oncology Enforcement Issues

  1. Employees knowingly submitted false records to Medicare and Medicaid to increase revenue
  2. Claims submitted for services performed without required physician supervision
  3. Offering unnecessary treatments and services to patients
  4. Recruitment and treatment of terminal patients that should have been referred to hospice care
  5. Re-treatment of patients in excess of prescribed dosage limits
  6. Claims for services when physician reviews had not taken place
  7. Claims where treatment occurred without prior required IGRT scan
  8. Physicians allowed registered nurses to fill out prescriptions for medications
  9. Offering inducements (“kickbacks”) to patients by waiving their co-pays
  10. Conducting not necessary fluorescence in situ hybridization (FISH) tests for bladder cancer
  11. Filing payment claims for GAMMA functions by improperly trained physicians and staff
  12. Seeking payments for tests whose results doctors had not reviewed
  13. Billing E&M services on the same day as a related procedure
  14. Double and over-billing Medicare for services that lacked supporting documentation
  15. Improperly billing for radiation treatment without proper physician supervision
  16. Submitting false claims for magnetic resonance imaging (MRI) services
  17. Billing for services that were not documented in the patients’ medical records
  18. Billing twice for the same services
  19. Misrepresentation of the level of a service provided to increase reimbursement
  20. Routinely waived patient copayments as an inducement, then billing Medicare for them.
  21. Claims for services not performed, medically necessary, and/or properly documented
  22. Claims for services rendered to patients referred by physicians benefiting from referral
  23. Purchasing cancer treatments from unlicensed sources for oncology practice
  24. Diluting patients’ chemotherapy treatments and delivering in a manner designed to extend period of treatment time
  25. Claims for medically unnecessary or properly documented intensity-modulated radiation therapy (IMRT)
  26. Unsupported add-on claims for “special treatment procedures” and “specialty physics consults”
  27. Violating the Stark Laws and Anti-Kickback statute by rewarding referring physicians

 

Kusserow on Compliance: EHR incentive program attestation is serious business

The American Recovery and Reinvestment Act of 2009 (ARRA) (P.L. 111-5) authorized providing incentive payments to eligible health care professionals, hospitals, and Medicare Advantage Organizations (“MAOs”) to promote the adoption and “meaningful use” of health information technology and electronic health record (“EHR”) systems. CMS established the Medicare and Medicaid Electronic Health Record Incentive Programs (EHR Incentive Programs) to make incentive payments to health care professionals and providers that meet specified requirements for the meaningful use of certified EHR technology (CEHRT). The EHR Incentive Programs are intended to bring about improved clinical outcomes and population outcomes, increase transparency and efficiency in health care, empower individuals to make decisions regarding their care, and generate additional research data on health systems. Program participants must report on their performance pertaining to certain clinical quality measures (CQMs) and objectives to CMS (for Medicare) or the authorized state agency (for Medicaid) through an attestation process. Since 2011, the EHR Incentive Programs have made incentive payments to numerous eligible professionals, eligible hospitals, and critical access hospitals (CAHs) that qualify as “meaningful users” by meeting the objectives and CQMs outlined in the various stages of the applicable programs.

Annual attestations required

Eligible providers must annually attest to meeting the specified objectives and measures in order to receive incentive payments under the EHR Incentive Programs. Once they have attested to meeting the identified objectives and measures, they are deemed to be meaningful users and eligible for incentive payments.  CMS, its contractor, and state Medicaid agencies conduct both random and targeted audits to detect inaccuracies in eligibility, reporting, and receipt of payment with respect to the EHR Incentive Programs.  Eligible hospitals may be selected for pre- or post-payment audits. CMS has required that eligible hospitals retain all supporting documentation used in completing the Attestation Module responses in either paper or electronic format for six years post-attestation. Eligible hospitals are responsible for maintaining documentation that fully supports the meaningful use and CQM data submitted during attestation. Those hospitals undergoing pre-payment audits will be required to provide supporting documentation to validate submitted attestation data before receiving payment.

Unsupported and false attestations

Making false statements, including attestations to the federal government, could implicate federal law (18 U.S.C. § 1001), which generally prohibits knowingly and willfully making false or fraudulent statements or concealing information. Although eligible hospitals receiving incentive payments under the Medicare and Medicaid EHR Incentive Programs are not required to follow any particular parameters when spending the payments, they must annually attest to meeting the relevant measures and objectives in order to be entitled to incentive payments. It is critical that eligible hospitals maintain documentation that supports their attestations.  Supporting documentation needs to make clear that the hospital is meeting the terms and conditions of the EHR Incentive Program. A checklist document by itself would be insufficient as supporting documentation. Failure to maintain such supporting documentation creates potential liability. Although no significant enforcement activity has taken place, compliance officers are advised to verify that proper supporting documentation is maintained.  In fact, the responsible program manager should be maintaining documentation as part of ongoing monitoring. As part of ongoing auditing, the compliance office should ensure that monitoring is conducted and validate that it is adequately meeting regulatory requirements.

Richard P. Kusserow served as DHHS Inspector General for 11 years. He currently is CEO of Strategic Management Services, LLC (SM), a firm that has assisted more than 3,000 organizations and entities with compliance related matters. The SM sister company, CRC, provides a wide range of compliance tools including sanction-screening.

Connect with Richard Kusserow on
Google+ or LinkedIn.

Subscribe to the Kusserow on Compliance Newsletter

Copyright © 2017 Strategic Management Services, LLC. Published with permission.

 

 

Kusserow on Compliance: Summary of OIG fraud and abuse actions first half of 2017

The HHS OIG issued their Semi-Annual report for first half of fiscal year (FY) 2017 and summarized key accomplishments, significant problems, abuses, deficiencies, and investigative outcomes relating to the administration of HHS programs and operations that were disclosed during the reporting period. The following summarizes reported statistical accomplishments.

Criminal Actions (468). OIG reported 468 criminal actions against individuals or entities that engaged in crimes against HHS programs and 461 civil actions, which include false claims and unjust-enrichment lawsuits filed in Federal district court, civil monetary penalties (CMP) settlements, and administrative recoveries related to provider self-disclosure matters.  During the first half of FY 2017, OIG reported expected investigative recoveries of over $2.04 billion.

Health Care Strike Force (152 Criminal Actions). The Health Care Fraud Strike Force teams brought charges against 45 individuals or entities, 152 criminal actions, and $267 million in recoveries through investigations.

State Medicaid Fraud Control Units (MFCUs) (1,564 Criminal Actions).  The OIG has oversight responsibility for MFCUs and administers grants that provide federal funding for their operations. There are 50 MFCUs (in 49 States and the District of Columbia) totaled almost $259 million. The MFCUs employed 1,965 individuals. MFCUs reported 18,730 investigations, of which 15,509 were related to Medicaid fraud and 3,221 were related to patient abuse and neglect, including misappropriation of patients’ private funds. The cases resulted in criminal charges or indictments involving 1,721 individuals, including 1,249 for fraud and 472 for patient abuse and neglect. In total, 1,564 convictions were reported in FY 2016, of which 1,160 were related to Medicaid fraud and 404 were related to patient abuse and neglect. Civil judgments and settlements for FY 2016 totaled 998, and monetary recoveries in civil cases totaled over $1.5 billion. During this reporting period, OIG special agents partnered with MFCUs in conducting joint investigations on 714 criminal cases.

Program Exclusions (1,422). During this semiannual reporting period, OIG excluded 1,422 individuals and entities from Medicare, Medicaid, and other federal health care programs. Most of the exclusions resulted from convictions for crimes relating to Medicare or Medicaid, for patient abuse or neglect, or as a result of license revocation. OIG is also responsible for reinstating providers who apply and have met the requirements of their exclusions.

Sanction Authorities and Other Administrative Actions (1,504).  OIG sanctions include the exclusion of individuals and entities from federal health care programs and the imposition of CMPs for submitting false and fraudulent claims to a federal health care program or for violating the Anti-kickback statute, the Stark law, or the Emergency Medical Treatment and Labor Act (EMTALA), also known as the patient dumping statute. During this semiannual reporting period, OIG imposed 1,504 administrative sanctions in the form of program exclusions or administrative actions for alleged fraud or abuse or other activities that posed a risk to federal health care programs and their beneficiaries.

Civil Monetary Penalties Law (CMPL) ($26 million0. The CMPL authorizes OIG to impose administrative penalties on and assessments against a person who, among other things, submits, or causes to be submitted, claims to a federal health care program that the person knows, or should know, are false or fraudulent. In addition to administrative penalties and assessments, OIG can also exclude individuals for engaging in conduct prohibited by the CMPL. During this semiannual reporting period, OIG concluded cases involving more than $26.3 million in CMPs and assessments.

Self-Disclosure Programs ($23 million). Health care providers, suppliers, or other individuals or entities subject to CMPs can apply for acceptance into the Provider Self-Disclosure Protocol, a program created in 1998, to voluntarily disclose self-discovered evidence of potential fraud. During this semiannual reporting period, self-disclosure cases resulted in more than $23 million in HHS receivables.

 

Richard P. Kusserow served as DHHS Inspector General for 11 years. He currently is CEO of Strategic Management Services, LLC (SM), a firm that has assisted more than 3,000 organizations and entities with compliance related matters. The SM sister company, CRC, provides a wide range of compliance tools including sanction-screening.

Connect with Richard Kusserow on Google+ or LinkedIn.

Subscribe to the Kusserow on Compliance Newsletter

Copyright © 2017 Strategic Management Services, LLC. Published with permission.

Kusserow on Compliance: Factors OIG considers in deciding exclusions

The HHS Office of Inspector General (OIG) has authority exclude any individual or entity engaging in prohibited activities from participation in the federal health care programs, and add him or her to their List of Excluded Individuals and Entities (LEIE). The effect of this is that no payment may be made for any items or services furnished by an excluded individual or entity, or directed or prescribed by an excluded physician. This authority is anchored in legislation going back to 1977; the OIG was delegated authority to impose civil monetary penalties (CMPs), assessments, and program exclusion on health care providers and others determined to have submitted, or caused the submission of, false or fraudulent claims to the Medicare or Medicaid programs. During my 11-year tenure as Inspector General (IG), the administrative remedies were broadened to address additional types of misconduct. This has continued over the years.  Passage of the Patient Protection and Affordable Care Act (ACA) (P.L. 111-148) amended and expanded the existing authority for the OIG to impose CMPs and exclusions.

 Factors in exclusion decisions

The LEIE database is very large, with 3,000 new exclusions being added annually. About half of the exclusions included in the database are for criminal convictions related to health care programs and for patient abuse or neglect. These are mandatory exclusion.  In addition, the OIG has discretionary authority to exclude for other types of misconduct, such as license revocation or suspension, exclusion or suspension from another federal or state health care program, provision of unnecessary or substandard services, fraud or kickbacks, and default on a health education loan.

Tom Herrmann, J.D. served over 20 years in the Office of Counsel to the Inspector General. He explained that when exercising its discretionary authority to exclude, the OIG takes into consideration a number of factors, including the following:

  • Nature and circumstances of conduct. This includes determining adverse physical, mental, financial, or other impact to program beneficiaries, recipients, or other patients.
  •  Financial loss. Conduct  that (1) was part of a pattern of wrongdoing; (2) occurred over a substantial period of time; (3) was continual or repeated; and (4) continued until or after the person learned of the Government’s investigation indicates higher risk.
  • Leadership role. If the individual organized, led, or planned the unlawful conduct.
  • History of prior fraudulent conduct. History of judgments, convictions, decisions, or settlements in prior enforcement actions, as well as (1) refusal to have entered into a corporate integrity agreement (CIA), (2) breach of a prior CIA, or (3) lies or failure to cooperate with the OIG while under a CIA.
  • Conduct during investigation. Any (1) obstruction in the investigation or audit; (2) taking any steps to conceal the conduct from the government; or (3) failure to comply with a subpoena.
  • Resolution. The inability to pay an appropriate monetary amount (including damages, assessments, and penalties) to resolve a fraud case.
  • Absence of compliance program. Absence of a compliance program that incorporates the seven elements of an effective compliance program.

Avoiding exclusion

There are a number of steps that can be taken to reduce the likelihood of the OIG exercising its discretion to exclude parties and put them on the LEIE. These include being able to evidence:

  1. Initiating internal investigation and sharing results before the government gets involved;
  2. Self-disclosing an internal investigation;
  3. Cooperating with the government, if it initiate an investigation;
  4. Taking appropriate disciplinary action against individuals responsible for bad conduct;
  5. Implementing an effective compliance program, prior to government investigation;
  6. Devoting increased/improved support for the compliance program; and
  7. Having in the past self-disclosed overpayments in good faith to the OIG and CMS.

LEIE sanction screening

Screening individuals and entities prior to engagement and periodically thereafter is not optional–it is a necessity.   The best practice is to screen monthly against the LEIE and any state exclusion database where business is conducted, in that CMS has set this as a standard for Medicaid Directors.   In addition to screening against the LEIE, most states require screening against their database of sanction parties. Often there are delays in resolution of cases, so that a party may not be included in a sanction database at time of engagement, but is added later. Furthermore, inasmuch as most state Medicaid Fraud Control Units report their criminal actions to the OIG, that in turn includes them in the LEIE, resulting in frequent cases of multiple hits for the same underlying action. This is further complicated by the fact that there are delays when actions by state agencies are reported to the OIG for their determination to add them to the LEIE.

Richard P. Kusserow served as DHHS Inspector General for 11 years. He currently is CEO of Strategic Management Services, LLC (SM), a firm that has assisted more than 3,000 organizations and entities with compliance related matters. The SM sister company, CRC, provides a wide range of compliance tools including sanction-screening.

Connect with Richard Kusserow on Google+ or LinkedIn.

Subscribe to the Kusserow on Compliance Newsletter

Copyright © 2017 Strategic Management Services, LLC. Published with permission.