Health Law Advisor

In what will create a glimmer of hope for beleaguered Medicare Advantage Organizations (MAOs) who are facing looming waves of Risk Adjustment Data Validation (RADV) audits, on September 25, 2025, a Northern District (ND) of Texas District Court invalidated the Centers for Medicare & Medicaid Services’ (CMS) 2023 RADV Final Rule, finding that the agency violated the notice-and-comment requirements of the Administrative Procedure Act (APA).

This ruling comes amidst a recently announced aggressive agenda by the current Trump administration to catch up on five payment years of RADV audits. This agenda has triggered visceral concern from MAOs, who are struggling to understand the potential breadth and impact of future extrapolated recoupments. Given the adverse residual impact to MAOs through CMS’s V28 risk adjustment (RA) model cuts, RADV audits landed at a less than opportune time for the industry. The Court’s ruling, while still subject to appeal and possible CMS rule redlining, is at least temporary good news for MAOs.  But, for those popping corks for their victory lap, it ain’t over yet.

On May 21, 2025, the Centers for Medicare & Medicaid Services (CMS) announced^[1] an aggressive plan (Plan) to expand its efforts to address fraud, waste, and abuse in Medicare Advantage (MA). By engaging with enhanced technology and significantly expanding its workforce, CMS states that it intends to audit every eligible MA contract for Payment Years (PY) 2018 through 2024 and recover on all prior audits conducted by CMS and the Office of Inspector General (OIG).  Historically, CMS has only selected a small subset of contracts (approximately sixty) for each PY audited. CMS is currently completing PY2018 Risk Adjustment Data Validation (RADV) audit but has yet to issue findings or payment recovery demands for any audit completed. CMS has similarly not taken material action regarding the so called “OIG audits”.

Background

CMS Audit Methodology. CMS officially launched its RADV audit program in 2008. The audit methodology employed by CMS has evolved over the years through various rule making efforts and sub-regulatory issuances. CMS’s proposed rule in 2010 set forth an audit methodology to review a risk stratified 201-member sample, where all risk adjusted Hierarchical Condition Categories (HCCs) for each member would be reviewed and checked for errors.^[2] Finalizing this methodology in 2012[3], CMS then conducted audits on PY2012 and 2013 utilizing this approach. The presumption was that CMS would extrapolate and recoup such amounts. However, CMS did not issue final agency actions requiring substantial repayments or extrapolation.

On March 25, 2025, U.S. Senators Bill Cassidy, M.S. (R-LA) and Jeff Merkley (D-OR) introduced the No Unreasonable Payments, Coding, or Diagnoses for the Elderly (No UPCODE) Act (the “Bill”). According to Senator Cassidy’s press release, the Bill aims to improve how Medicare Advantage plans evaluate patients’ health risks, reduce overpayments for care, and save taxpayers money by removing incentives to overcharge Medicare. If passed, this Bill would have a tremendous impact on plans, vendors, and risk-bearing provider groups relative to Medicare Advantage (“MA”).

Background

Traditional Medicare (Parts A and B) reimburses health care providers based on the cost of services already rendered (known as “Fee-for-Service” or “FFS”). Conversely, MA functions as a prospective payment model, whereby Medicare Advantage Organizations (“MAOs”) contract with the Centers for Medicare & Medicaid Services (“CMS”) to administer and insure their respective member population.

The Centers for Medicare and Medicaid Services (CMS) is issuing, what will amount to be, very significant Risk Adjustment Data Validation (RADV) Audit notices for PY2018 to Medicare Advantage Organizations (MAOs).

These notices follow the issuance of CMS’s final rule (88 Fed. Reg. 6643 (Feb. 1, 2023), amending 42 C.F.R. 422.310(e). Pursuant to the rule, CMS has the authority to extrapolate audit findings for PY2018 and beyond. CMS has noted that the extrapolation methodology it adopts for RADV audits will be focused on MAO contracts that, through statistical modeling ...

In an indictment announced on October 26, 2023 in Miami, the U.S. Department of Justice, Criminal Division’s Fraud Section, working with the FBI and HHS-OIG, brought what may be only the second federal criminal charges directly related to the Medicare Advantage (Medicare Part C) risk adjustment payment methodology.  DOJ enforcement in the Medicare Advantage risk adjustment space overwhelmingly has proceeded civilly under the False Claims Act. Although the allegations suggest conduct far more troubling than prior civil cases under risk adjustment, these criminal charges ...

On February 1, 2023, the Centers for Medicare & Medicaid Services (CMS) published a final rule outlining its audit methodology and related policies for its Medicare Advantage (MA) Risk Adjustment Data Validation (RADV) program. The final rule codifies long-awaited regulations first proposed by CMS in 2018.

On August 30, 2021, the DOJ announced a $90 million dollar settlement with Sutter Health and affiliates[1] (“Sutter Health”) to settle False Claims Act (“FCA”) allegations brought by qui tam relator, Kathy Ormsby, related to the Center for Medicare & Medicaid Services’ (“CMS”) MA Program.[2] Sutter Health elected to settle with DOJ and the relator without an admission of liability. As part of the Settlement Agreement, the Office of Inspector General (“OIG”) required Sutter Health to enter into a Corporate Integrity Agreement.

On April 19, 2021, the Office of Inspector General’s (OIG) Office of Audit Services (OAS) released the results of an audit conducted on the accuracy of diagnosis codes submitted to CMS by Humana, Inc. for 2015 dates of service. Based on the audit results, the OIG recommended Humana return a whopping $197.7 million in alleged overpayments and enhance its policies and procedures to prevent, detect and correct noncompliance with Federal requirements for diagnosis codes that are used to calculate risk-adjusted payments.

Under the Medicare Advantage (MA) program, the Centers for ...

The application of artificial intelligence technologies to health care delivery, coding and population management may profoundly alter the manner in which clinicians and others interact with patients, and seek reimbursement. While on one hand, AI may promote better treatment decisions and streamline onerous coding and claims submission, there are risks associated with unintended bias that may be lurking in the algorithms. AI is trained on data. To the extent that data encodes historical bias, that bias may cause unintended errors when applied to new patients. This can result in ...

Based on findings of the Payment Accuracy Report recently issued by the Department of Health and Human Services (DHHS), six Democratic United States Senators questioned the Centers of Medicare and Medicaid Services’ (CMS) oversight and enforcement of Medicare Advantage (MA) plans. In a letter dated September 13, 2019, the Senators highlighted their belief that MA plans have been overbilling the federal government for years, specifically in excess of $30 billion dollars over the last three years.

The Senators requested that CMS provide a response on how the Agency intends to ...

The Department of Justice (DOJ) announced this week that it has entered into a settlement agreement with Davita Medical Holdings (Davita) for $270 million dollars to resolve certain False Claims Act liability related to Medicare Advantage risk adjustment payments.

As the settlement agreement describes, Davita acquired HealthCare Partners (HCP), a large California based independent physician association in 2012. HCP, subsequently Davita Medical Group (or Davita), operated as a medical service organization (MSO) who contracted with Medicare Advantage Organizations ...