Colorado
Colorado Office of the State Auditor
Published May 24, 2024

Evaluation Of The Colorado Recovery Audit Contractor Program

Learn how the AI-generated research projects were created

Overall Conclusion

HCPF’s Medicaid Recovery Audit Contractor program generally adheres to federal and state requirements but requires stronger contract oversight and program management to ensure efficient operation, reduce overpayments, and improve provider billing and education.

Source Document

Audit Scope

This performance evaluation examined the Colorado Department of Health Care Policy & Financing’s Medicaid Recovery Audit Contractor (RAC) program, administered by HMS, to determine compliance with federal (CMS 42 CFR Part 455) and Colorado state requirements (Section 25.5-4-301, C.R.S.) and to assess program effectiveness, efficiency, and governance. The scope includes: review of the RAC process from planning to reporting for 31 approved audit scenarios (25 automated and 6 complex) and the related provider outreach/education activities; in-depth analysis of three scenarios (Radiology Duplicates, Level of Care, Initial Inpatient Visits) with case review and data supporting their finding letters; evaluation of oversight roles among HCPF divisions, the RAC vendor, and CMS communications; analysis of lookback periods (up to seven years per SPA, with a three-year federal limit), the contingency-fee structure (up to 18%), and contract transmittal practices; examination of lookback policy changes and the handling of appeals, informal reconsiderations, and settlements; the data range for claims audited (January 2018 – June 2023) and recoveries (FY 2019–2023) as reported by HCPF; engagement included interviews with HCPF staff, HMS staff, provider associations, provider surveys (115 responses), reviews of 11,000+ documents, and comparisons with eight to seventeen other states.

Key Findings Summary

1

Finding 1 – Audit Scenario Investigation: Our high-level review of 31 RAC audit scenarios revealed that 3 in-depth audits contained inconsistent, unclear, or outdated policies leading to inaccurate findings and rescissions; Radiology Duplicates (2015–2020 lookback with policy change in 2018) resulted in $13.5 million in overpayments to 17,000 providers; Leve…

2

Finding 2 – Application of Contingency Fee: HCPF pays the RAC contingency fee based on identified overpayments, even if not recovered, contrary to federal/state requirements and potentially incentivizing aggressive audits; contract allows up to 18% vs CMS 12.5%.

3

Finding 3 – Use of Contract Transmittals: Transmittals are used for official direction, but issues include one transmittal increasing compensation without a contract amendment; six of nine transmittals predate the 2021 contract; some guidance given outside transmittal; recommendation to define purpose and update processes.

View the Findings tab to see all 7 findings

AI-Assisted

Generated by gpt-5-nano

AI Scope Summary

The audit aimed to assess Colorado's Medicaid RAC program’s compliance with CMS requirements and state law, evaluate the effectiveness of the payment model and lookback periods, examine governance and oversight processes (including credentialing, communications, and appeals), and assess effects on provider burden and beneficiary access to care.

AI-Generated Insight

This evaluation highlights governance and operational gaps in Colorado's Medicaid Recovery Audit Contractor program, including misalignment of contingent payment structures with federal rules, inconsistent scenario design, weak credential verification, and gaps in provider outreach. The findings point to substantial opportunities to strengthen program integrity, reduce provider burden, and ensure CMS expectations are met, with concrete steps including clarifying approvals, updating contracts and transmittals, and enhancing oversight. The implications extend to CMS oversight risk, budget impact, and the balance between accountability and access to care in Colorado.

Audit Objectives

1

Evaluate compliance with CMS requirements for Medicaid RAC programs, state law, and coding practice standards.

2

Examine the effectiveness and level of the payment model used for HCPF’s RAC, including the level of payments sufficient to maintain a contract, the scope of the contract and deliverables, and impacts on providers related to a contingency fee-based system significantly above the federal standard.

3

Examine the methods and effectiveness of HCPF’s approach to address provider concerns regarding the Medicaid RAC program.

4

Examine the requirements imposed by other states regarding overall RAC contractor staffing and qualifications for reviewers to help ensure alignment of specialty and subspecialty expertise for conducting initial audits and final determinations. Consider how Colorado can optimize staffing to balance potential overpayment claims and medical necessity reviews.

5

Examine other states’ lookback periods and their relative financing mechanisms. Consider the impacts on providers and Medicaid beneficiaries of a lookback period in Colorado that exceeds federal standards for Medicaid RAC programs.

6

Examine other states’ best practices, or best practices recommended by providers, to help improve billing practices and compliance and to provide support throughout the RAC audit process.

7

Examine the feasibility of incentives for underpayment identification, including models from other states.

8

Assess the implications for providers and the State’s General Fund of adjusting the lookback period used for RAC audits.

9

Examine, compare to other states, and, to the extent feasible, disaggregate by service date, audit finding date, and provider type: a. The number, proportion, and value of claims reviewed relative to total potential claims subject to the RAC program. b. The number and proportion of providers impacted by claims reviews and contested payments. c. The number, proportion, value of contested payments, including underpayments, overpayments, and recoupments. d. The number, proportion, value, and result of contested payments by disposition status, including resolution through Informal Reconsideration and appeal.

10

Examine provider administrative burdens associated with the RAC program.

11

Examine the impact of audits on provider participation and access to care, and opportunities to increase meaningful provider participation access to care.

12

Assess the duplication of utilization management reviews and approvals, such as prior authorization, with post-payment and audit reviews.

13

Assess federal flexibilities that Colorado can use to improve the RAC program, including provider education, training, and error rates, and the timing and procedure when a potential overpayment is “identified” or “determined.”

14

Consider how the State could evaluate the cost benefit of the RAC program to determine whether it is striking the right balance between accountability and access to care.

Audit Findings (7)

1

Finding 1 – Audit Scenario Investigation: Our high-level review of 31 RAC audit scenarios revealed that 3 in-depth audits contained inconsistent, unclear, or outdated policies leading to inaccurate findings and rescissions; Radiology Duplicates (2015–2020 lookback with policy change in 2018) resulted in $13.5 million in overpayments to 17,000 providers; Level of Care audits failed to account for a February 2019 policy change for ESRD; Initial Inpatient Visits audits caused confusion due to guidance on CPT codes, with about 58.5% of findings appealed and 59.6% reconsidered as of February 2024.

2

Finding 2 – Application of Contingency Fee: HCPF pays the RAC contingency fee based on identified overpayments, even if not recovered, contrary to federal/state requirements and potentially incentivizing aggressive audits; contract allows up to 18% vs CMS 12.5%.

3

Finding 3 – Use of Contract Transmittals: Transmittals are used for official direction, but issues include one transmittal increasing compensation without a contract amendment; six of nine transmittals predate the 2021 contract; some guidance given outside transmittal; recommendation to define purpose and update processes.

4

Finding 4 – Monitoring of HMS Staff Credentials: HCPF did not directly verify credentials for many RAC staff (31 of 61 lacked required licenses/certifications); reliance on RAC’s accreditation; need for stronger credential verification.

5

Finding 5 – Mitigation of the Appearance of a Conflict of Interest: When HMS acquired the RAC in 2021, required disclosures were not obtained; HCPF has not clearly communicated conflicts to Medicaid providers.

6

Finding 6 – Claims Limits on RAC Audits: HCPF lacks clear guidance on limits on number/frequency of claims reviewed; limited evidence of provider outreach/education as contract requires; potential reduction in program effectiveness.

7

Finding 7 – Provider Support, Outreach, and Education: Inconsistent provider outreach and education as required by the contract; possible impacts on provider understanding and billing practices.

Recommendations (3)

1

Recommendation No. 1: The Department of Health Care Policy & Financing should improve controls to ensure RAC audit scenarios are complete and accurate, including defining review roles, information needs, and accountability; implement policies to ensure policies/standards are complete and up-to-date; Implementation Date: 12/2024.

2

Recommendation No. 2: The Department of Health Care Policy & Financing should amend the RAC contract to eliminate paying contingency fees based on unrecovered overpayments and base fees solely on recovered amounts; Implementation Date: 08/2024.

3

Recommendation No. 3: The Department of Health Care Policy & Financing should promote consistent use of contract transmittals by implementing policies that specify their purpose, when other communications are appropriate, and require updating references when contracts expire; Implementation Date: 08/2024.