Medicare - High Risk Issue
In 2014, Medicare covered approximately 54 million people at an estimated cost of about $600 billion. The Centers for Medicare & Medicaid Services (CMS), which administers Medicare, faces many challenges related to implementing payment methods that encourage efficient service delivery including implementing changes to payment models outlined in the Medicare Access and CHIP Reauthorization Act, managing the program to serve beneficiaries well, and safeguarding the program from loss due to fraud, waste, and abuse.
This key issue page is related to an area on GAO’s 2017 High Risk Update and will be updated shortly. In the meantime, visit the related High Risk area for the newest information.
Medicare has been designated as a high-risk program because its complexity and susceptibility to improper payments, in addition to its size, have led to serious management challenges. Addressing these challenges requires improvements to payment methods, program management, and program safeguards.
Reforming and refining payment methods to encourage efficient service delivery
- CMS has continued to implement payment reforms in various parts of the program, such as for inpatient hospital and home health services, but other payment areas need further attention, including aspects of physician payment, end-stage renal disease, imaging, and preventive services.
- CMS pays for certain services at a higher rate if the service is performed in a hospital outpatient department than if it were performed in a physician’s office. CMS is likely paying more than necessary for many services, which is inconsistent with Medicare's role as an efficient purchaser of health care services. Congress should consider directing the Secretary of Health and Human Services (HHS) to equalize payment rates between settings for evaluation and management services—and other services that the Secretary deems appropriate—and to return the associated savings to the Medicare program.
- Providers that self-refer (referring patients to entities in which they or a family member have a financial interest) have dramatically increased their provision of certain services, including diagnostic imaging, prostate cancer radiation treatment, and diagnostic pathology services. CMS needs to better identify claims from physicians who self-refer advanced imaging, anatomic pathology, and prostate cancer treatment services; reduce payments for certain self-referred services; and, for prostate cancer radiation treatment services, disclose physicians financial interest to patients to avoid unnecessary increases in these self-referred services.
- CMS pays plans in Medicare Advantage (MA), Medicare’s private plan alternative to traditional Medicare, a predetermined amount per enrolled beneficiary adjusted for health status. The agency would improve the accuracy of its MA risk score adjustments and could realize program savings by using the most current data available and incorporating adjustments for additional beneficiary characteristics. CMS has taken steps to collect encounter data—information on the services and items furnished to enrollees—that are more comprehensive than the beneficiary diagnosis data the agency currently uses to risk-adjust payments to MA organizations, and has started using these data in calculating risk adjustments. However, CMS has not fully developed plans for validating and using MA encounter data.
Improving program management for efficiency and better service to beneficiaries
- CMS is responsible for overseeing the MA program, including assessing whether an MA plan’s provider network is adequate. To improve these oversight activities, CMS should augment oversight of MA networks to address provider availability, verify provider information submitted by MA organizations, conduct more periodic reviews of network information, and set minimum information requirements for MA enrollee notification letters.
- More than 54 million Medicare cards display beneficiaries' Social Security numbers. In 2015, Congress enacted legislation requiring the removal of Social Security numbers from Medicare cards. CMS has begun and should continue its work, which will help protect Medicare beneficiaries from identity theft.
- CMS has relied on three accrediting organizations establishing their own standards and auditing for safety and quality of advanced diagnostic imaging services, but their standards and audits vary. CMS should establish minimum national s4tandards for the accreditation of advanced diagnostic imaging suppliers and develop an oversight framework to improve safety and quality.
Enhancing program integrity to safeguard Medicare from loss
- CMS must sustain progress in reducing its payment error rates in total more than $59.6 billion in fiscal year 2015 to better ensure the integrity of the Medicare program.
- CMS should improve its processes for selecting contracts to include in its risk adjustment data validation audits of MA contracts. These audits facilitate the recovery of improper payments from MA organizations that submit beneficiary diagnosis information for payment adjustments that were unsupported by medical records. CMS estimated that it improperly paid $14.1 billion in 2013 to MA organizations. Additionally, CMS should enhance the timeliness of these audits and incorporate recovery audit contractors into the risk adjustment audits.
- CMS saved Medicare at least $1.76 billion in fiscal year 2010 through the use of prepayment edits, but those savings could have been greater had such edits been more widely used.
- The Patient Protection and Affordable Care Act (PPACA) provides CMS with certain authorities to combat fraud, waste, and abuse in Medicare. CMS should fully exercise its PPACA authority to require a surety bond for certain types of at-risk providers and suppliers and establish core elements of compliance programs for providers and suppliers.
GAO-16-76: Published: Apr 8, 2016. Publicly Released: May 9, 2016.
GAO-16-189: Published: Dec 18, 2015. Publicly Released: Dec 18, 2015.
GAO-15-710: Published: Aug 31, 2015. Publicly Released: Sep 28, 2015.
GAO-15-633: Published: Aug 14, 2015. Publicly Released: Sep 14, 2015.
GAO-15-434: Published: May 21, 2015. Publicly Released: May 21, 2015.
GAO-15-199: Published: Feb 20, 2015. Publicly Released: Mar 23, 2015.
GAO-15-66: Published: Oct 24, 2014. Publicly Released: Nov 24, 2014.
GAO-14-571: Published: Jul 31, 2014. Publicly Released: Sep 2, 2014.
GAO-14-474: Published: Jul 18, 2014. Publicly Released: Aug 13, 2014.
GAO-17-237SP: Published: Jan 17, 2017. Publicly Released: Jan 17, 2017.
GAO-17-223: Published: Jan 17, 2017. Publicly Released: Jan 19, 2017.
GAO-17-283R: Published: Jan 12, 2017. Publicly Released: Jan 12, 2017.
GAO-17-145: Published: Jan 9, 2017. Publicly Released: Feb 8, 2017.
GAO-17-55: Published: Dec 9, 2016. Publicly Released: Dec 9, 2016.
GAO-17-42: Published: Nov 15, 2016. Publicly Released: Dec 15, 2016.
GAO-17-5: Published: Oct 13, 2016. Publicly Released: Oct 13, 2016.
GAO-16-570: Published: Sep 15, 2016. Publicly Released: Oct 17, 2016.
GAO-16-840R: Published: Aug 31, 2016. Publicly Released: Aug 31, 2016.
GAO-16-780R: Published: Aug 1, 2016. Publicly Released: Aug 31, 2016.