{"id":2052,"date":"2018-10-31T19:44:09","date_gmt":"2018-11-01T00:44:09","guid":{"rendered":"http:\/\/blogs.luc.edu\/compliance\/?p=2052"},"modified":"2018-10-31T19:44:09","modified_gmt":"2018-11-01T00:44:09","slug":"compliance-in-healthcare-understanding-zone-program-integrity-contractor-investigations-and-audits","status":"publish","type":"post","link":"https:\/\/blogs.luc.edu\/compliance\/?p=2052","title":{"rendered":"Compliance in Healthcare: Understanding Zone Program Integrity Contractor Investigations and Audits \u00a0"},"content":{"rendered":"

Alesandra Hlaing<\/i>
\nAssociate Editor<\/em>
\nLoyola University Chicago School of Law, JD 2020<\/em><\/p>\n

The Centers for Medicare and Medicaid Services (CMS) have a multitude of resources to detect and protect against fraud and abuse in claims. Particularly, CMS has at least six types of contractors that provide different roles in the prevention, detection, and reporting of fraud and abuse in healthcare. This list includes Recovery Auditors<\/a>, which serve to reduce fraud and abuse by detecting and collecting overpayments from entities and Comprehensive Error Rate Testing (CERT) Contractors<\/a>, which determine rates of improper payments by reviewing claims under Medicare Fee-For-Service (FFS). Another auditor that providers should be particularly mindful of are the Zone Program Integrity Contractors (ZPICs). This article is an overview ZPICS, its role in Medicare, and outlines the steps providers should take when faced with an audit by ZPICs.<\/p>\n

What is a Zone Program Integrity Contractor?<\/em><\/strong><\/p>\n

The primary goal of a ZPIC, as defined in Chapter 4 of the Medicare Program Integrity Manual<\/a>, is to \u201cidentify cases of suspected fraud, develop them thoroughly and in a timely manner, and take immediate action to ensure that Medicare Trust Fund monies are not inappropriately paid out and that any mistaken payments are recouped.\u201d ZPIC performs several functions in order to protect against fraud and abuse, including investigations, interviews, onsite visits, and medical reviews, as well as data analysis and referrals to law enforcement for civil or criminal prosecution. ZPICs have seven zones<\/a>: 1) Safeguard Services (SGS) 2) AdvanceMed 3) Cahaba, 4) Health Integrity, 5) AdvanceMed 6) Under Protest, and 7) Safeguard Services (SGS). ZPICs can audit a variety of healthcare providers<\/a>, including Medicare Part A and B providers, Medical Equipment, Prosthesis, Orthotics and Supplies companies, a Home Health or Hospice agency, or even pain and addiction clinics.<\/p>\n

Though audits performed by ZPICs are conducted much like other CMS audits, a major difference is that ZPIC audits have potential Medicare fraud implications. Unlike routine audit requests performed by recovery auditors, ZPIC audits are not routine and more than likely result in the discovery of overpayment. Essentially, ZPICs are the \u201cpolice\u201d of the CMS<\/a>, and are authorized to work and aid law enforcement in detecting fraud and abuse. ZPICs may refer detected cases of fraud and abuse<\/a> to the Department of Health and Human Services, particularly to the Office of Inspector General Office of Investigations. The Office of Inspector General then has 90 days<\/a> to reject or pursue the case to the Department of Justice.<\/p>\n

What to do if facing a ZPIC Audit?<\/em><\/strong><\/p>\n

A ZPIC audit typically begins with a request of medical records<\/a> or other documentation from the ZPIC without specifying a look-back period. Particularly, the document requests by ZPICs are not limited to a certain number, which can be overwhelming for providers to comply with. It is important to note that ZPIC audits typically occur once fraud is already suspected<\/a>, through data analysis, complaints, or referrals. Providers should be alerted when a ZPIC auditor begins investigations, because ZPIC audits are not random, and it is important that providers comply with the requests made by ZPIC. In addition, ZPICs are not required to announce their onsite audits,<\/a> and may appear unannounced to interview and request records.<\/p>\n

ZPICs can take several adverse actions<\/a> against a provider in addition to referring them to the DOJ, which may include recoupment and payment blocking or even exclusion from federal health care programs. In some cases, ZPIC audits and appeals can take a considerable amount of time<\/a>, which may affect payments depending on the ZPIC\u2019s determinations. If a ZPIC makes an adverse determination, every healthcare provider has the right to appeal a ZPIC\u2019s determination. A recent case in Texas<\/a> held that CMS could not withhold, recoup, or fail to pay a provider that was determined to be committing fraud by a ZPIC audit due to backlog slowing down the appeals process. Ultimately, it is important that providers keep all documents up to date, have a compliance plan, and employ legal counsel<\/a> to ensure that the healthcare entity is prepared for ZPIC audits — whenever they may come.<\/p>\n","protected":false},"excerpt":{"rendered":"

The Centers for Medicare and Medicaid Services (CMS) have a multitude of resources to detect and protect against fraud and abuse in claims. Particularly, CMS has at least six types of contractors that provide different roles in the prevention, detection, and reporting of fraud and abuse in healthcare. This list includes Recovery Auditors, which serve to reduce fraud and abuse by detecting and collecting overpayments from entities and Comprehensive Error Rate Testing (CERT) Contractors, which determine rates of improper payments by reviewing claims under Medicare Fee-For-Service (FFS). Another auditor that providers should be particularly mindful of are the Zone Program Integrity Contractors (ZPICs). This article is an overview ZPICS, its role in Medicare, and outlines the steps providers should take when faced with an audit by ZPICs.<\/p>\n","protected":false},"author":29,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29],"tags":[231,366,1024,1025,1027],"class_list":["post-2052","post","type-post","status-publish","format-standard","hentry","category-fraud-abuse","tag-auditing","tag-centers-for-medicare-and-medicaid-services","tag-healthcare-professionals","tag-healthcare-providers","tag-healthcare-regulations"],"_links":{"self":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts\/2052","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/users\/29"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2052"}],"version-history":[{"count":0,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts\/2052\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2052"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2052"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2052"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}