Scores of Medicaid audits still leave holes
By Nancy Madsen
Published on Monday, March 24th, 2014 at 1:01 p.m.
To audit or not to audit.
That's a key question the General Assembly will debate after it convenes today for a special session to decide whether to expand Virginia's Medicaid program, a battle that is tying up passage of a two-year state budget.
House Republicans oppose offering the healthcare program to an additional 400,000 poor Virginians, even though the federal government will foot the entire tab at first and pay 90 percent of the cost over the long run. GOP delegates say the federal government can't be trusted to fund its promise and, if it goes back on its word, the state will be stuck with the tab.
House GOP leaders insist that before any expansion occurs, the state's Medicaid system must undergo a two-year external audit to seek efficiencies in a program whose costs have increased by an average of 8 percent a year over the last three decades. Virginia's Medicaid program is projected to cost $8 billion this year.
Gov. Terry McAuliffe, a Democrat, says the state program has already been examined to death and the two-year audit is a ruse by conservatives to scuttle the expansion, which is an option under Obamacare.
"We've had 63 audits," McAuliffe said on Feb. 27 during his monthly radio show on WRVA. "When they say they want an audit, it just means, 'Let's kick the can down the road.'"
All this talk about audits caught our attention. We wondered about the dates, numbers and scope of these probes. So we took a look, and what we found could bolster the arguments of either side in this debate.
McAuliffe is right that Medicaid has had lots of scrutiny. The governor's office sent us a list of 63 examinations since 2002 of the Department of Medical Assistance Services, the agency that runs the state's Medicaid program. Two of the reports were listed twice, so the correct number of examinations is 61. Of them, eight have not yet been published.
We requested copies of the 53 items on the list that have been published and found they overwhelmingly focused on small pieces of Virginia's Medicaid program, verifying that there had been proper accounting of funds paid in and out. They provide insights to some of the specific issues House Republicans want addressed in a new two-year state audit. But few of the reports address the GOP question of whether broad efficiencies can be brought to the program down the road.
The examinations were done by a variety of organizations. Let's take a closer look.
Virginia Auditor of Public Accounts. The state auditor compiles an annual examination of the accounting procedures and internal controls used by all of the agencies and the departments in state government. The Department of Medical Assistance Services, which runs the state's Medicaid program, is considered with 13 agencies and departments reporting to the Secretary of Health and Human Resources.
These broad reports account for 10 of the audits on the list. The sections on DMAS largely examine whether the agency is following rules for Medicaid when it files reimbursement requests with the federal government. For the most part, the Medicaid agency has used proper procedures.
The state also has conducted nine audits of the computer networks and security measures at the Medicaid agency to ensure clients’ personal and health information isn’t improperly shared or hacked. One report on the list -- get this -- was an audit of the accounting standards used by all internal auditors working directly for state agencies, including those at DMAS.
Office of Inspector General. There were 19 audits on the list from the Office of Inspector General, part of the U.S. Department of Health and Human Services. They generally focused on short-term or pilot state Medicaid programs, such as assistance given to Hurricane Katrina evacuees in 2006. The audits checked whether DMAS had accurately documented the number of clients served by these programs and the reimbursements it requested from the federal government.
In some cases, the U.S. government required the state to correct flaws in the programs and repay millions in improperly received reimbursements.
Centers for Medicare and Medicaid Services. The list included 10 federal reviews that sought to ensure the state is not overpaying Medicaid providers. Several of the reports looked at Medicaid fraud and urged the state to tighten controls so that ineligible providers would not be reimbursed. A CMS spokeswoman told us that these reports do not use the rigorous accounting standards necessary to qualify as audits.
Joint Legislative Audit and Review Commission. JLARC, the General Assembly’s watchdog agency, authored four reports examining broad issues such as whether state Medicaid recipients had adequate access to hospitals and medical specialists (they did).
The most significant report, issued in 2012, found that local Departments of Social Services caseworkers were enrolling ineligible Medicaid recipients, costing the state between $18 million and $263 million during the budget year that ended June 30, 2010. JLARC recommended a variety of measures to improve controls, including beefed up training and a better computer system.
CGI Technologies and Solutions and KPMG. This 2012 audit examined whether DMAS, which oversees the state Medicaid program, had corrected deficiencies pointed out in all other audits during the previous five years. It concluded that DMAS had, for the most part, done a good job.
Others. There's a collection of technical examinations by an assortment of entities looking into DMAS's internal accounting procedures. They recommended minor improvements.
House Republicans say that all of those reviews aren't enough. In February, the House passed a resolution calling for a new two-year audit of the Medicaid agency, to be conducted by the legislatively-controlled JLARC.
The resolution has a lists a number of familiar topic Republicans want JLARC to study. For example, the GOP wants a review of all "current" state Medicaid studies. It also seeks an examination of DMAS’s response to recommendations JLARC made in its 2012 audit that found ineligible people were enrolled in the state Medicaid program.
But the GOP also listed some topics that were not addressed on the previous audits:
- The use of expensive hospital care and long-term facilities in the Medicaid system.
- Non-emergency transportation services offered to Medicaid patients.
- DMAS’s system to identify and locate third parties responsible for Medicaid payments and recovering assets or recipients in long-term care.
The idea for a comprehensive audit of the state’s Medicaid system did not originate from House Republicans. JLARC, in its 2012 report, called for a "central audit plan" that would coordinate the multitude of studies.
It's important to note that JLARC's recommendation was not tied to any decision about whether Virginia should expand Medicaid. When the report was released, Obamacare required all states to broaden their programs. Six months passed before the U.S. Supreme Court ruled that each state must be allowed to decide for itself whether to widen Medicaid.
It wasn't until this February that House Republicans called for a two-year audit of Medicaid and said they would not consider expansion before the study is completed.
WRVA, "Ask the Governor," Feb. 27, 2014.
Terry McAuliffe, "McAuliffe Medicaid expansion means quality health care for more Virginians," Feb. 2, 2014.
Email from Brian Coy, McAuliffe’s spokesman, Feb. 3, 2014.
List of external audits of DMAS from DMAS, Jan. 24, 2014.
Email from Justin Hopkins, professor of business administration at the University of Virginia Darden School of Business, Feb. 19, 2014.
Interview with Martha Mavredes, Auditor of Public Accounts, Feb. 12, 2014.
Commonwealth of Virginia, Auditor of Public Accounts, "Report on Audit for the year ended June 30, 2002 and COV Single Audit Report for the Year Ended June 30, 2002," Nov. 15, 2002.
APA, "DMAS Network Vulnerability Assessment and Penetration Test," March 8, 2004.
APA, "DMAS Network Vulnerability Assessment and Penetration Test," Aug. 26, 2005.
APA, "Review of Performance Measures for Fiscal Year 2005," March 31, 2006. NOT ON LIST
APA, "DMAS Network Vulnerability Assessment and Penetration Test," Feb. 23, 2007.
APA, "DMAS Network Vulnerability Assessment and Penetration Test," Feb. 13, 2008.
APA, "DMAS Network Vulnerability Assessment and Penetration Test," June 30, 2009.
APA, "Enterprise Data Standards for Human Services as of March 2010," March 30, 2010.
APA, "Review of the Internal Audit Function," March 2010.
APA, "DMAS Network Vulnerability Assessment and Penetration Test," Dec. 12, 2013.
Department of Health and Human Services, Centers for Medicare and Medicaid Services, Financial Management Review of Free-for-Service Family Planning Payments, Oct. 19, 2004.
CMS, Focused Financial Management Review, Nov. 30, 2004.
CMS, "Review of the Department of Mental Health, Mental Retardation and Substance Abuse Services," September 2006.
CMS, "Financial Management Report: Level 1 Preadmission Screenings and Certified Public Expenditures," November 2006.
CMS, "Review of Consumer-Directed Personal and Respite Care Services," July 7, 2008.
CMS, "Virginia Comprehensive Program Integrity Review Final Report," November 2008.
CMS, "Review of Virginia Physician Credit Balances," Feb. 26, 2010.
CMS, "Virginia Comprehensive Program Integrity Review Final Report," November 2011.
Stage Department of Accounts, "Stage 1 Agency Risk Management and Internal Control Standards," May 8, 2008.
Joint Legislative Audit and Review Commission, "State spending on medical supplies and pharmaceuticals," December 2002.
Joint Legislative Audit and Review Commission, "Interim Report: Fraud and error in Virginia’s Medicaid program," Oct. 12, 2010.
Joint Legislative Audit and Review Commission, "Mitigating the risk of improper payments in the Virginia Medicaid program," January 2012.
Joint Legislative Audit and Review Commission, "Review of the impact of Medicaid rates on access to health care in Virginia," November, 2013.
Legislative Information System, Senate Joint Resolution 92, Feb. 14, 2012.
PolitiFact Virginia, "Audit the Department of Medical Assistance Services," March 10, 2013.
CGI Technologies and Solutions, "Review of DMAS performance," Feb. 2012.
U.S. Department of Health and Human Services, Office of Inspector General, "Review of the Commonwealth of Virginia’s Medicaid Drug Rebate Program," July 29, 2003.
OIG, "Review of Virginia’s Accounts Receivable System for Medicaid Provider Overpayments," Jan. 31, 2005.
OIG, "Medicaid Hospital Outlier Payments in Virginia for State Fiscal Years 2001 Through 2003," Feb. 9, 2007.
OIG, "Follow up Audit of the Medicaid Drug Rebate Program in Virginia," Jan. 31, 2008.
OIG, "Medical Assistance Provided By Virginia to Hurricane Katrina Evacuees," June 18, 2008.
Richard Tarr, "DMAS Internal Audit Division Quality Assurance Review Report," April 2007.
Office of State Inspector General, "DMAS Performance Review Letter," Oct. 10, 2013.
Virginia House of Delegates Republican Caucus, "GOP Calls for Medicaid Audit," Jan. 27, 2014.
LIS, House Joint Resolution 40, Feb. 10, 2014.
Richmond Times-Dispatch, "House GOP leaders want audit to look for Medicaid waste," Jan. 27, 2014.
Names in this article: Terry McAuliffe
We want to hear your suggestions and comments. Email the Virginia Truth-O-Meter with feedback and with claims you'd like to see checked. If you send us a comment, we'll assume you don't mind us publishing it unless you tell us otherwise.