(1) One or more program integrity contractors may be used to promote the integrity of the medical assistance program, to assist with investigations and audits, or to investigate the occurrence of fraud, waste, or abuse. The contract or contracts may include services for (a) cost-avoidance through identification of third-party liability, (b) cost recovery of third-party liability through postpayment reimbursement, (c) casualty recovery of payments by identifying and recovering costs for claims that were the result of an accident or neglect and payable by a casualty insurer, and (d) reviews of claims submitted by providers of services or other individuals furnishing items and services for which payment has been made to determine whether providers have been underpaid or overpaid, and to take actions to recover any overpayments identified or make payment for any underpayment identified.

(2) Notwithstanding any other provision of law, all program integrity contractors when conducting a program integrity audit, investigation, or review shall:

(a) Review claims within four years from the date of the payment;

(b) Send a determination letter concluding an audit within one hundred eighty days after receipt of all requested material from a provider;

(c) In any records request to a provider, furnish information sufficient for the provider to identify the patient, procedure, or location;

(d) Develop and implement with the department a procedure in which an improper payment identified by an audit may be resubmitted as a claims adjustment, including (i) the resubmission of claims denied as a result of an interpretation of scope of services not previously held by the department, (ii) the resubmission of documentation when the document provided is incomplete, illegible, or unclear, and (iii) the resubmission of documentation when clerical errors resulted in a denial of claims for services actually provided. If a service was provided and sufficiently documented but denied because it was determined by the department or the contractor that a different service should have been provided, the department or the contractor shall disallow the difference between the payment for the service that was provided and the payment for the service that should have been provided;

(e) Utilize a licensed health care professional from the specialty area of practice being audited to establish relevant audit methodology consistent with (i) state-issued medicaid provider handbooks and (ii) established clinical practice guidelines and acceptable standards of care established by professional or specialty organizations responsible for setting such standards of care;

(f) Provide a written notification and explanation of an adverse determination that includes the reason for the adverse determination, the medical criteria on which the adverse determination was based, an explanation of the provider's appeal rights, and, if applicable, the appropriate procedure to submit a claims adjustment in accordance with subdivision (2)(d) of this section; and

(g) Schedule any onsite audits with advance notice of not less than ten business days and make a good faith effort to establish a mutually agreed-upon time and date for the onsite audit.

(3) A program integrity contractor retained by the department or the federal Centers for Medicare and Medicaid Services shall work with the department at the start of a recovery audit to review this section and section 68-973 and any other relevant state policies, procedures, regulations, and guidelines regarding program integrity audits. The program integrity contractor shall comply with this section regarding audit procedures. A copy of the statutes, policies, and procedures shall be specifically maintained in the audit records to support the audit findings.

(4) The department shall exclude from the scope of review of recovery audit contractors any claim processed or paid through a capitated medicaid managed care program. The department shall exclude from the scope of review of program integrity contractors any claims that are currently being audited or that have been audited by a program integrity contractor, by the department, or by another entity. Claims processed or paid through a capitated medicaid managed care program shall be coordinated between the department, the contractor, and the managed care organization. All such audits shall be coordinated as to scope, method, and timing. The contractor and the department shall avoid duplication or simultaneous audits. No payment shall be recovered in a medical necessity review in which the provider has obtained prior authorization for the service and the service was performed as authorized.

(5) Extrapolated overpayments are not allowed under the Medical Assistance Act without evidence of a sustained pattern of error, an excessively high error rate, or the agreement of the provider.

(6) The department may contract with one or more persons to support a health insurance premium assistance payment program.

(7) The department may enter into any other contracts deemed to increase the efforts to promote the integrity of the medical assistance program.

(8) Contracts entered into under the authority of this section may be on a contingent fee basis. Contracts entered into on a contingent fee basis shall provide that contingent fee payments are based upon amounts recovered, not amounts identified. Whether the contract is a contingent fee contract or otherwise, the contractor shall not recover overpayments by the department until all appeals have been completed unless there is a credible allegation of fraudulent activity by the provider, the contractor has referred the claims to the department for investigation, and an investigation has commenced. In that event, the contractor may recover overpayment prior to the conclusion of the appeals process. In any contract between the department and a program integrity contractor, the payment or fee provided for identification of overpayments shall be the same provided for identification of underpayments. Contracts shall be in compliance with federal law and regulations when pertinent, including a limit on contingent fees of no more than twelve and one-half percent of amounts recovered, and initial contracts shall be entered into as soon as practicable under such federal law and regulations.

(9) All amounts recovered and savings generated as a result of this section shall be returned to the medical assistance program.

(10) Records requests made by a program integrity contractor in any one-hundred-eighty-day period shall be limited to not more than two hundred records for the specific service being reviewed. The contractor shall allow a provider no less than forty-five days to respond to and comply with a records request. If the contractor can demonstrate a significant provider error rate relative to an audit of records, the contractor may make a request to the department to initiate an additional records request regarding the subject under review for the purpose of further review and validation. The contractor shall not make the request until the time period for the appeals process has expired.

(11) On an annual basis, the department shall require the recovery audit contractor to compile and publish on the department's Internet website metrics related to the performance of each recovery audit contractor. Such metrics shall include: (a) The number and type of issues reviewed; (b) the number of medical records requested; (c) the number of overpayments and the aggregate dollar amounts associated with the overpayments identified by the contractor; (d) the number of underpayments and the aggregate dollar amounts associated with the identified underpayments; (e) the duration of audits from initiation to time of completion; (f) the number of adverse determinations and the overturn rating of those determinations in the appeal process; (g) the number of appeals filed by providers and the disposition status of such appeals; (h) the contractor's compensation structure and dollar amount of compensation; and (i) a copy of the department's contract with the recovery audit contractor.

(12) The program integrity contractor, in conjunction with the department, shall perform educational and training programs for providers that encompass a summary of audit results, a description of common issues, problems, and mistakes identified through audits and reviews, and opportunities for improvement.

(13) Providers shall be allowed to submit records requested as a result of an audit in electronic format, including compact disc, digital versatile disc, or other electronic format deemed appropriate by the department or via facsimile transmission, at the request of the provider.

(14)(a) A provider shall have the right to appeal a determination made by the program integrity contractor.

(b) The contractor shall establish an informal consultation process to be utilized prior to the issuance of a final determination. Within thirty days after receipt of notification of a preliminary finding from the contractor, the provider may request an informal consultation with the contractor to discuss and attempt to resolve the findings or portion of such findings in the preliminary findings letter. The request shall be made to the contractor. The consultation shall occur within thirty days after the provider's request for informal consultation, unless otherwise agreed to by both parties.

(c) Within thirty days after notification of an adverse determination, a provider may request an administrative appeal of the adverse determination as set forth in the Administrative Procedure Act.

(15) The department shall by December 1 of each year report to the Legislature the status of the contracts, including the parties, the programs and issues addressed, the estimated cost recovery, and the savings accrued as a result of the contracts. Such report shall be filed electronically.

(16) For purposes of this section:

(a) Adverse determination means any decision rendered by a program integrity contractor or recovery audit contractor that results in a payment to a provider for a claim for service being reduced or rescinded;

(b) Extrapolated overpayment means an overpayment amount obtained by calculating claims denials and reductions from a medical records review based on a statistical sampling of a claims universe;

(c) Person means bodies politic and corporate, societies, communities, the public generally, individuals, partnerships, limited liability companies, joint-stock companies, and associations;

(d) Program integrity audit means an audit conducted by the federal Centers for Medicare and Medicaid Services, the department, or the federal Centers for Medicare and Medicaid Services with the coordination and cooperation of the department;

(e) Program integrity contractor means private entities with which the department or the federal Centers for Medicare and Medicaid Services contracts to carry out integrity responsibilities under the medical assistance program, including, but not limited to, recovery audits, integrity audits, and unified program integrity audits, in order to identify underpayments and overpayments and recoup overpayments; and

(f) Recovery audit contractor means private entities with which the department contracts to audit claims for medical assistance, identify underpayments and overpayments, and recoup overpayments.