Why OIG Compliance Is Non-Negotiable for Billing Practices
Any medical practice that bills Medicare or Medicaid is operating under OIG oversight. The OIG's enforcement tools — exclusion screening requirements, Work Plan audits, self-disclosure protocols, and civil monetary penalty authority — apply to practices of every size. The difference between a practice that survives OIG scrutiny and one that doesn't is almost always documentation.
The Cost of Missing OIG Exclusion Screening
A practice that employs or contracts with an individual on the OIG's exclusion list can face civil monetary penalties of up to $20,000 per item or service billed by that individual — plus repayment of all Medicare and Medicaid reimbursements for those services, plus potential exclusion of the practice itself. Ignorance is not a defense. The OIG expects monthly screening with documented records.
AuditVault automates monthly screening against both the OIG LEIE and SAM.gov (the separate federal exclusion database), generates documentation for each screening cycle, and maintains a searchable history. Read more: What Is OIG Exclusion Screening?
The OIG Work Plan: Your Annual Enforcement Roadmap
The OIG updates its Work Plan monthly — adding new audit targets and enforcement priorities as they emerge. AuditVault monitors Work Plan updates and surfaces items relevant to your practice's billing codes, service lines, and specialty. This intelligence drives your annual risk assessment and helps you prioritize compliance activities where enforcement risk is highest.
Building an OIG-Recognized Compliance Program
The OIG's General Compliance Program Guidance (GCPG) identifies seven elements of an effective compliance program. Practices with documented programs aligned to these elements receive lower penalties in enforcement actions — because a good-faith compliance program is an explicit mitigating factor. AuditVault provides structured documentation for all seven elements:
- Written policies and procedures
- Compliance program oversight (designated compliance contact)
- Training and education with documented completion records
- Effective lines of communication and non-retaliation policy
- Auditing and monitoring activities
- Enforcement and discipline procedures
- Responding promptly to detected offenses
Learn more: The OIG's 7 Elements Explained