Maryland Department of Health – Medical Care Programs Administration Audit

Finding 2: MCPA did not have effective processes to identify, prevent, and recover questionable Medicaid payments, including $7.1 million in payments on behalf of incarcerated and deceased recipients.

Finding 8: MCPA did not adequately monitor the hospital claims audit contractor and had not collected or recovered improper claims identified by the contractor totaling $6.9 million.

Finding 9: Redacted cybersecurity-related finding.

Finding 1: The Medical Care Programs Administration (MCPA) did not ensure that all referrals of potential third-party health insurance information were investigated and recorded in the Medicaid Management Information System (MMIS II), potentially resulting in improper payments.

Finding 3: MCPA did not ensure that changes to recipient Medicaid eligibility information were processed timely and accurately.

Finding 4: MCPA had not established adequate oversight to ensure that all CFC program recipients received personal assistance services in accordance with their plans of services, including nurse monitoring.

Finding 5: MCPA did not monitor the utilization control agent contractor to ensure continued stay reviews of Medicaid recipients in nursing facilities were performed timely.

Finding 6: MCPA did not have an established process to ensure costly recipient ventilator care claims submitted by nursing facilities were valid, as required by State regulations, and did not recoup unsupported or improper payments.

Finding 7: MCPA did not conduct the required audits of Medical Day Care (MDC) and Supports Planning providers, and the related audit policy and procedures were not sufficiently comprehensive.

Finding 10: Redacted cybersecurity-related finding.

Recommendation for Finding 7: Ensure MDC and Supports Planning provider audits are conducted per policy; document scope and expand testing; update SOPs and provide ongoing staff training.

Recommendation for Finding 8: Actively monitor the hospital claims audit contractor, obtain all deliverables, and pursue recovery of improper claims; continue regular coordination with OIGH.

Recommendation for Finding 9: Redacted cybersecurity-related finding – no public recommendations available.

Recommendation for Finding 10: Redacted cybersecurity-related finding – no public recommendations available.

Recommendation for Finding 2a: Ensure that instances of recipients with missing SSNs are referred to DHS and the LHDs for investigation; establish a monthly review cycle and monitor corrective action cases.

Recommendation for Finding 6: Establish ventilator claim audits and recoupments for unsupported payments; implement comprehensive SOPs with defined pass/fail metrics and CAP requirements.

Recommendation for Finding 1: Ensure that all third-party health insurance information provided by the third-party liability vendor is interfaced with MMIS II, resolve the carrier text file interface, reconcile data discrepancies, and test the interface before deployment.

Recommendation for Finding 1 (b): Ensure that all MCO insurance referrals are recorded into MMIS II timely, and continue progress on automating the referral process using the 270/271 format once the carrier code file issue is resolved.

Recommendation for Finding 2b: Document reviews of investigations of questionable recipient eligibility and support proper corrective action using a standalone platform; implement timely action.

Recommendation for Finding 2c: Develop a process to identify, prevent, and recover improper fee-for-service payments related to incarcerated recipients; align with upcoming modular MMIS requirements.

Recommendation for Finding 2d: Continue monthly monitoring of deceased recipient cases and formalize processes for closing or redetermining cases, including management of households with deceased primary members.

Recommendation for Finding 3: Ensure that recipient eligibility information is updated timely and accurately in MMIS II; implement testing methodologies for CTAD reviews and monthly tracking reports.

Recommendation for Finding 4: Establish Nurse Monitoring Agreement with Local Health Departments and have Health Officers sign by the targeted date; update LTSSMaryland tools to identify non-compliant cases.

Recommendation for Finding 5: Monitor the Utilization Control Agent (UCA) contractor to ensure CSRs are completed timely; assess potential liquidated damages; develop an Ad Hoc MMIS report to improve data reconciliation.