OIG Exclusion Screening for Proactive Compliance: Requirements and Best Practices
OIG Exclusion Screening Requirements
OIG exclusion screening is a core element of federal health care programs compliance. It ensures you do not employ, contract with, or bill for services furnished by individuals or entities excluded from participation in Medicare, Medicaid, or other federal programs.
Who must screen
Any organization that bills, receives, or administers funds from federal health care programs must screen. That includes hospitals, physician practices, laboratories, pharmacies, DME suppliers, health plans, third‑party administrators, and downstream contractors.
Who must be screened
- All W‑2 employees, temporary staff, volunteers, and medical staff (employed or affiliated).
- Contractors, vendors, locum tenens, telehealth providers, and delegated entities that support billable services.
- Owners, officers, board members, and managing employees who influence operations.
When screening applies
- Before hire, contracting, credentialing, or granting privileges.
- On a recurring basis thereafter to detect new exclusions promptly.
At a minimum, screen the List of Excluded Individuals/Entities and, as applicable, state Medicaid lists and the System for Award Management. Keep evidence of each search to satisfy screening documentation standards.
Purpose of OIG Exclusion Screening
The purpose is prevention. By identifying excluded parties before they touch federally reimbursable work, you avoid improper payments, self‑disclosure obligations, and reputational damage. Effective screening also protects patients and reinforces an ethical culture across your organization.
Because exclusions can arise after onboarding, ongoing monitoring is essential to maintain compliance, protect revenue, and demonstrate diligence to regulators, auditors, and payors.
Sources for OIG Exclusion Lists
Primary source: LEIE
The List of Excluded Individuals/Entities (LEIE) from the HHS Office of Inspector General is the authoritative database for OIG exclusions. It includes identifiers such as name, specialty, NPI (where available), and exclusion basis.
Government‑wide exclusions: SAM
The System for Award Management contains government‑wide exclusion records (debarments and suspensions) under federal acquisition and assistance rules. While not limited to health care, SAM screening helps you avoid contracting with parties barred from federal work.
State Medicaid exclusion lists
Many states publish their own Medicaid exclusion or termination lists. If you participate in a state’s Medicaid program, you are typically expected to screen that state’s list in addition to the LEIE, and follow any state‑specific documentation practices.
Other useful checks
- Medicare or commercial payor rosters (for plan‑specific participation or preclusion status).
- State licensure and disciplinary actions to catch sanctions that could precede an exclusion.
Match cautiously: confirm identity using multiple data points (e.g., NPI/EIN, DOB, address, license number, aliases) to avoid false positives.
Ready to simplify HIPAA compliance?
Join thousands of organizations that trust Accountable to manage their compliance needs.
Best Practices for Compliance
Build a written policy and scope
- Define populations to screen, data sources to query, and workflows for onboarding and re‑screening.
- Assign ownership (Compliance as accountable; HR, Credentialing, Supply Chain, and IT as partners).
Embed screening in core workflows
- Require clearance before start dates, first shifts, vendor access, or credentialing approval.
- Integrate screening with HRIS, credentialing software, and vendor management to reduce manual steps.
Screening documentation standards
- Store dated proof of each search (export, PDF, or screenshot) and the exact query parameters.
- Maintain negative‑result logs and resolution notes for potential matches (with identity confirmation steps).
- Capture approvals, remediation actions, and communications for audit trails.
- Retain records in line with your written policy and payor requirements (often 6–10 years).
Clear remediation procedures
- If an active exclusion is confirmed, immediately remove the person/entity from federally reimbursable work.
- Calculate the financial exposure window, initiate refunds/recoupments, and consider self‑disclosure pathways.
- Strengthen controls to prevent recurrence and brief leadership and, where appropriate, your board committee.
Train and test
- Provide role‑specific training to recruiters, managers, credentialing staff, and intake teams.
- Run periodic audits and mock tracer reviews to validate process effectiveness.
Consequences of Non-Compliance
Submitting claims tied to an excluded party can create overpayments and trigger the duty to report and return funds. Organizations may face civil monetary penalties, assessments (often up to three times the amount claimed), program exclusion, and potential False Claims Act exposure.
Additional risks include contract termination, enrollment revocation, reputational harm, and costly remediation under a heightened oversight agreement. Strong controls and timely response significantly reduce these outcomes.
Screening Frequency
Baseline cadence
- Pre‑hire/initial credentialing: Screen before any work is performed or privileges are granted.
- Ongoing: Establish monthly re‑screening requirements as your enterprise standard to catch changes quickly.
Event‑driven checks
- Name changes, new aliases, ownership changes, or role changes that affect billing or access.
- Adverse licensure actions, sanctions, or media alerts that signal elevated risk.
- Mergers, acquisitions, or new vendor relationships (screen principals and key personnel, too).
Document your rationale if you use risk‑based frequencies in limited contexts, and ensure you still meet state Medicaid and payor‑specific obligations where monthly re‑screening is expected.
Automation Tools for Screening
Exclusion screening automation reduces manual effort, improves match accuracy, and generates reliable audit evidence. The right tool helps you scale screening across employees, medical staff, contractors, and vendors.
Capabilities to prioritize
- Comprehensive coverage: LEIE, System for Award Management, and relevant state Medicaid lists.
- Accurate matching: Fuzzy logic with NPI/EIN/DOB support, alias handling, and tunable thresholds.
- Continuous monitoring: Automatic monthly cycles with alerts for status changes.
- Workflow and evidence: Case management, resolution notes, and immutable audit logs.
- Integration and security: APIs to HRIS/credentialing, role‑based access, encryption, and HIPAA‑aligned controls.
- Reporting: Completion rates, match rates, time‑to‑resolution, and exception analytics for leadership.
Implementation tips
- Pilot with high‑risk populations first, then expand enterprise‑wide.
- Standardize data inputs (legal names, NPIs, tax IDs) to reduce false positives.
- Define SLAs for resolving potential matches and escalations to Compliance.
Summary
Proactive OIG exclusion screening safeguards revenue and reputation. By codifying policy, adopting monthly re‑screening requirements, expanding sources to LEIE, SAM, and state lists, and using reliable exclusion screening automation, you create a durable, auditable compliance control.
FAQs
What is OIG exclusion screening?
OIG exclusion screening is the process of checking your workforce, contractors, vendors, and leaders against federal and state exclusion databases—most notably the List of Excluded Individuals/Entities—to ensure excluded parties do not furnish or support items or services billed to federal health care programs.
Why is monthly re-screening required?
Exclusion status can change at any time, and many payors and state Medicaid programs expect monthly checks. A monthly cadence shortens the window of potential exposure, supports federal health care programs compliance, and provides consistent, auditable evidence of ongoing oversight.
What are the penalties for non-compliance?
Billing for services connected to an excluded party can result in overpayments, civil monetary penalties, assessments that may be several times the claims at issue, possible False Claims Act liability, program exclusion, and reputational damage. You may also face contract and enrollment consequences.
How can automation improve compliance?
Automation centralizes data sources, reduces manual errors, and continuously monitors your populations. It enhances matching accuracy, standardizes documentation, accelerates match resolution, and produces robust audit trails—making it easier to prove compliance at scale and respond quickly when issues arise.
Ready to simplify HIPAA compliance?
Join thousands of organizations that trust Accountable to manage their compliance needs.