Overview
Risk Adjustment Audit Rate is the frequency and scope at which Medicare Advantage (MA) plans face RADV (Risk Adjustment Data Validation) audits, OIG audits, and other governmental reviews of their risk adjustment coding accuracy and practices. CMS conducts contract-level RADV audits on approximately 30 MA contracts annually, with additional DOJ investigations and OIG reviews targeting specific plans based on risk adjustment patterns, whistleblower allegations, or data-driven audit selection.
CMS RADV audit methodology: CMS samples a defined number of beneficiaries per contract (typically 201), retrieves medical records, and validates each HCC against documentation per MEAT criteria. Findings are extrapolated to the full contract population — a methodology that substantially increases financial exposure beyond the direct sampled-error amount. A small invalidated HCC rate in the sample can extrapolate to millions in recoupment when applied to the full contract. CMS's extrapolation methodology has been subject to extensive industry dispute and legal challenge; the 2023 RADV Final Rule formalized extrapolation but also included some operational changes.
OIG audit activity focuses on systemic risk adjustment program concerns: in-home assessment programs, specific diagnosis categories with elevated reporting rates, provider-submitted versus plan-only diagnoses, and chart review program integrity. OIG reports frequently recommend CMS recoupment and operational changes. Notable OIG audits have examined diagnoses including acute stroke, acute MI, major depression, protein-calorie malnutrition, and other categories where reporting rates varied significantly across plans.
DOJ investigations under the False Claims Act have targeted several major MA plans for alleged risk adjustment fraud, including allegations of knowingly submitting unsupported diagnoses, paying providers for diagnosis capture without clinical substance, and failing to delete unsupported diagnoses after retrospective review. Settlements and judgments have included hundreds of millions to billions of dollars in specific high-profile cases.
Audit exposure management: MA plans invest in compliance programs to minimize audit findings. Key practices include: rigorous coding audit (internal QA validation mirroring RADV methodology), MEAT-based documentation training, chart review program integrity (not coding from IHA alone; ensuring follow-up documentation), concurrent review (identifying issues before claim submission), and pre-submission validation workflows. Plans also invest in audit response infrastructure — rapid record retrieval, legal and compliance staffing, and appeal mechanisms.
Provider-side implications: MA plan audits affect provider organizations in two ways. First, plan audits may trigger retrospective review of provider documentation, including requests for clarification or additional records. Second, plans that face recoupment may pass through financial impact to participating providers via risk-sharing arrangements, fee schedule adjustments, or contract renegotiation. Provider organizations in value-based MA arrangements should maintain their own coding compliance standards to minimize downstream impact.
For RCM operations at provider organizations, audit awareness informs coding and documentation practices: MEAT-based documentation, conservative coding (when documentation is ambiguous), and rigorous QA. At MA plans, audit readiness requires sustained compliance program investment including dedicated RADV audit response capabilities, documentation standards, vendor management (for IHAs, retrospective coding, retrieval), and executive-level compliance attention.
The 2023 RADV Final Rule codified CMS's audit methodology including extrapolation, eliminated the FFS adjuster (which had been proposed but was removed from the final rule), and established timelines for audit execution. Industry legal challenges continued post-rule, with Humana and other plans filing suit over specific methodological elements. The regulatory landscape continues to evolve.
Industry benchmark
CMS RADV audits: ~30 contracts per year. Sample size: typically 201 beneficiaries per contract. Extrapolation: applied to full contract population. OIG audit focus: specific diagnosis categories, IHAs, chart review programs.
Worked example
A Medicare Advantage plan receives a RADV audit notification covering payment year 2022. CMS samples 201 beneficiaries across the contract. The plan's audit response team retrieves records, validates codes internally, and prepares responses. CMS findings identify a 9.2% invalidated HCC rate in the sample. Extrapolation projects approximately $18M in recoupment. The plan appeals, focusing on specific methodology issues, and reaches a negotiated settlement after formal appeal proceedings.
Frequently asked questions — Risk Adjustment Audit Rate
How many MA plans get audited annually?
CMS conducts contract-level RADV audits on approximately 30 MA contracts annually. OIG conducts additional focused audits; DOJ investigates specific plans under False Claims Act. Audit selection uses both random and data-driven methods.
What's extrapolation in RADV audits?
CMS's methodology to project audit findings from the sample (typically 201 beneficiaries) to the full contract population, substantially increasing financial exposure. The 2023 RADV Final Rule codified extrapolation; industry has challenged the methodology through litigation.
How can plans reduce audit exposure?
Rigorous internal coding audit, MEAT-based documentation, chart review program integrity, concurrent coding review, provider education, and audit response infrastructure. Sustained compliance program investment is required.
Disclaimer
This glossary entry is operational reference for revenue-cycle and medical-billing professionals. It is not legal, clinical, or contractual advice. Industry benchmarks cite named public sources where available; always verify against the current guidance from the authority body before relying on a number in a contract, policy, or compliance filing.