Recommendation: The Administrator of CMS should develop formal procedures that include specific steps to be taken in the APD review process, including how CMS will document the review (including the name of the reviewer, date of review, and what was reviewed); what documentation should be retained after the review; as well as decision-making criteria for approval or denial decisions for state Medicaid IT funding requests. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should, as part of the APD review process and prior to approval, verify that all of the required information (e.g. alternatives analysis, feasibility study, and cost benefit analysis) is included in the funding request. (Recommendation 2)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should ensure that all APD-related artifacts are retained within the designated CMS document management system, including documentation of key information from meetings and email communications with the states, the MITA self-assessment and independent verification and validation reports, when creating APD decision packages. (Recommendation 3)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should require analysts to maintain relevant MMIS and E&E system artifacts based on the entire system life cycle instead of individual APDs. (Recommendation 4)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should, in consultation with the HHS and CMS CIOs, develop a documented, comprehensive, and risk-based process for how CMS will select IT projects for technical assistance and provide recommendations to states to assist them in improving the performance of the systems, with consideration to those that are high-cost and performing poorly. (Recommendation 5)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should encourage state Medicaid program officials to consider involving state CIOs in overseeing Medicaid IT projects. (Recommendation 6)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should establish a timeline for implementing the outcome-based certification process for MMIS and E&E systems. (Recommendation 7)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should establish documented procedures for how the results of the outcome-based certification process will be used for conducting oversight and making funding decisions. The procedures should include specific steps that CMCS will take to oversee individual state MMIS and E&E projects and how it will demonstrate that the steps have been taken. (Recommendation 8)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: Prior to approving funding for MMIS and E&E systems, the Administrator of CMS should identify areas of duplication or common functionality, such as core MMIS modules, in order to facilitate sharing, leveraging, or reusing Medicaid technologies. CMS should share the results of the review with the state or territory requesting federal funding for a duplicative or similar project and take steps to encourage states to share, leverage, or reuse Medicaid technologies, where possible. (Recommendation 9)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should take steps to obtain quality information on the experiences of dual-eligible beneficiaries who have been default enrolled into D-SNPs, such as by obtaining information about the extent to which and reasons that beneficiaries disenroll from a D-SNP after being default enrolled. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of the Social Security Administration should clarify policies and procedures to remind staff that a diagnosis of a substance use disorder is not necessary to conduct a Drug Addiction and Alcoholism evaluation. (Recommendation 1)

Agency: Social Security Administration
Status: Open

Comments: SSA agreed with this recommendation. The agency stated that it had revised related policies in February 2020, and had planned to issue guidance and video-on-demand training to further clarify policies and procedures in this area. However, SSA said its efforts to maintain mission critical activities amid the COVID-19 pandemic have delayed further implementation of this recommendation and a specific implementation date could not be provided at this time.

Recommendation: The Commissioner of the Social Security Administration should ensure that staff document their rationale for decisions involving the Drug Addiction and Alcoholism evaluation process. (Recommendation 2)

Agency: Social Security Administration
Status: Open

Comments: SSA agreed with this recommendation. The agency said it had planned to issue guidance reinforcing its policy on properly documenting decisions involving the Drug Addiction and Alcoholism evaluation process. However, SSA said its efforts to maintain mission critical activities amid the COVID-19 pandemic have delayed implementation of this recommendation and a specific implementation date could not be provided at this time.

Recommendation: The Administrator of CMS should require states to submit and make public projections of administrative costs when seeking approval of demonstrations, including those with work requirements and all other demonstrations. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS did not concur with this recommendation in its September 2019 comments on the report. We maintain that the recommendation is valid because requiring states to make public information about administrative costs would help to ensure that demonstration proposals provide sufficient information to ensure meaningful public input.

Recommendation: The Administrator of CMS should account for the administrative costs of demonstrations, including those with work requirements and all other demonstrations, when assessing whether demonstrations are budget neutral. (Recommendation 2)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS did not concur with this recommendation in its September 2019 comments on the report. We maintain that the recommendation is valid because including administrative costs in its assessments will help HHS ensure that demonstrations are budget neutral.

Recommendation: The Administrator of CMS should assess the risks of providing federal funds for costs to administer work requirements that are not allowable and should respond to risks by improving oversight procedures, as warranted. This assessment should consider risks related to costs for information systems, beneficiary supports, and managed care. (Recommendation 3)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS did not concur with this recommendation in its September 2019 comments on the report. We maintain that the recommendation is valid and that assessing these risks of providing federal funds for costs that are not allowable and improving oversight, as warranted, would help HHS to ensure the integrity of the Medicaid program.

Recommendation: The Administrator of CMS should, to the extent feasible, maintain more complete information on both the total amount of funding allocated for quality measurement activities and the extent to which this funding supports each of its quality measurement strategic objectives. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should develop and implement procedures to systematically assess the measures it is considering developing, using, or removing in terms of their impact on achieving CMS's strategic objectives and document its compliance with those procedures. (Recommendation 2)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should develop and use a set of performance indicators to evaluate the agency's progress towards achieving its quality measurement strategic objectives. (Recommendation 3)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should ensure the agency's Medicaid third-party liability guidance is consistent with federal law related to

• the requirement for states to apply cost avoidance procedures to claims for labor, delivery, and postpartum care services,
• the requirement for states to make payments without regard to potential third-party liability for pediatric preventive services unless the state has made a determination related to cost-effectiveness and access to care that warrants cost avoidance for 90 days, and
• state flexibility to make payments without regard to potential third-party liability for pediatric services provided to child support enforcement beneficiaries. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: On November 14, 2019, CMS issued an Informational Bulletin providing further guidance to Medicaid Bipartisan Budget Act (BBA) of 2018 and changes to Medicaid Provisions Passed in April 2019-Third Party Liability in Medicaid and CHIP. The intent of the information Bulletin is to further clarify CMS guidance issued in the agency's June 2018 Bulletin on key provisions related to third party liability in Medicaid and CHIP. The Bulletin also addresses April 2019 changes to the Bipartisan Budget Act of 2013. The bulletin clarifies CMS guidance on two of the three issues we identified in our 2019 report. The bulletin notes that (1) effective February 9, 2018 a state is required to use standard coordination of benefits cost avoidance when processing claims for prenatal services which now includes labor and delivery and postpartum care claims, and (2) effective October 1, 2019, a state is required to make payments without regard to third party liability for pediatric preventive services unless the state has made a determination related to cost-effectiveness and access to care that warrants cost avoidance for 90 days. However, with regard to the third issue, the bulletin notes that, effective April 18, 2019, a state is allowed 100 days to pay claims related to child support enforcement, but does not note that states may choose to make payment within 30 days, if the state determines doing so is cost-effective and necessary to ensure access to care. We will continue to monitor CMS guidance on payments related to child support enforcement to assess whether the recommendation is fully implemented.

Recommendation: The Administrator of CMS should determine the extent to which state Medicaid programs are meeting federal third-party liability requirements and take actions to ensure compliance as appropriate. Such actions can include ensuring that state plans reflect the law. (Recommendation 2)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: As of February 2020, we are unaware of any actions taken by CMS to implement this recommendation.

Recommendation: The administrator of CMS should require that abuse and perpetrator type be submitted by state survey agencies in CMS's databases for deficiency, complaint, and facility-reported incident data, and that CMS systematically assess trends in these data. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open
Priority recommendation

Comments: HHS concurred with this recommendation. In February 2020, HHS said CMS is developing the ability to review survey trends related to alleged perpetrator and alleged abuse types and aims to implement this recommendation by December 2020.

Recommendation: The administrator of CMS should develop and disseminate guidance—including a standardized form—to all state survey agencies on the information nursing homes and covered individuals should include on facility-reported incidents. (Recommendation 2)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS concurred with this recommendation. In February 2020, HHS said CMS will list the elements that all nursing homes should report to state agencies and aims to implement this recommendation by December 2020.

Recommendation: The administrator of CMS should require state survey agencies to immediately refer complaints and surveys to law enforcement (and, when applicable, to Medicaid Fraud Control Units (MFCU)) if they have a reasonable suspicion that a crime against a resident has occurred when the complaint is received. (Recommendation 3)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open
Priority recommendation

Comments: HHS concurred with this recommendation. In February 2020, HHS said CMS will require state survey agencies to immediately refer complaints upon receipt and surveys to law enforcement (and, when applicable, to Medicaid Fraud Control Units) if they have a reasonable suspicion that a crime against a resident has occurred and aims to implement this requirement by December 2020.

Recommendation: The administrator of CMS should conduct oversight of state survey agencies to ensure referrals of complaints, surveys, and substantiated incidents with reasonable suspicion of a crime are referred to law enforcement (and, when applicable, to MFCUs) in a timely fashion. (Recommendation 4)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS concurred with this recommendation. In February 2020, HHS said CMS will revise guidance to ensure state survey agencies will investigate and track incidents of abuse and neglect and report substantiated findings to local law enforcement. CMS aims to implement this recommendation by December 2020.

Recommendation: The administrator of CMS should develop guidance for state survey agencies clarifying that allegations verified by evidence should be substantiated and reported to law enforcement and state registries in cases where citing a federal deficiency may not be appropriate. (Recommendation 5)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS concurred with this recommendation. In February 2020, HHS said CMS will provide clarification to the state survey agencies regarding the definition of substantiated and when cases need to be referred to law enforcement. CMS aims to implement this recommendation by December 2020.

Recommendation: The administrator of CMS should provide guidance on what information should be contained in the referral of abuse allegations to law enforcement. (Recommendation 6)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS concurred with this recommendation. In February 2020, HHS said it will provide guidance to state agencies and nursing homes on identifying and reporting potential abuse and neglect of residents and will develop a list of standardized elements that should be included when reporting an abuse allegation to law enforcement. HHS aims to implement this recommendation by July 2020.

Recommendation: The Administrator of CMS should develop and communicate a policy that defines when changes to a pending section 1115 demonstration application are considered major and should prompt a new review of the application against the transparency requirements applicable to the pending application. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: In response to this recommendation, HHS stated that existing regulations permit CMS at its discretion to direct an additional public comment period when states make a modification to an application that substantially changes the design. In July 2020, CMS officials said the agency would continue to exercise its regulatory discretion as needed and planned no further action in response to this recommendation. In light of past CMS decisions to not require states to first seek public comment before submitting major changes to their demonstration applications, we maintain that a policy is needed defining when changes are considered major and should prompt a new review of the application against transparency requirements. We will continue to monitor CMS's actions in this area.

Recommendation: The Administrator of CMS should develop and communicate a policy whereby applications for section 1115 demonstration amendments that may have significant impact are subject to transparency requirements comparable to those for new demonstrations and extensions. (Recommendation 2)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open
Priority recommendation

Comments: HHS stated that it plans to implement a policy applying state public input processes and application criteria to amendments proposing significant or substantial changes in the same manner as for new demonstrations. In July 2020, CMS stated the agency plans to develop criteria for determining whether an amendment application proposes a substantial change to an existing demonstration and to include this in guidance by early 2021. We will continue to monitor CMS's actions in this area and will close this recommendation once this policy guidance is issued.

Recommendation: The Administrator of CMS should provide states with more information on how to fulfill the requirement for independent encounter data audits, including information on the required audit scope and methodology, and what should be described in the resulting report. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS agreed with our recommendation, noting that CMS would provide states with additional information on how to fulfill the requirement for independent encounter data audits. HHS also noted in January 2019 that CMS was developing voluntary guidance that will include information on best practices for validating encounter data. To implement this recommendation, the Administrator of CMS should inform states of the required audit scope and methodology as well as the resulting report. As of January 2020, HHS officials have not informed us of any additional actions taken to implement this recommendation. We will update the status of this recommendation when we receive additional information.

Recommendation: The Administrator of CMS should provide states information on the required content of the annual assessment of encounter data reporting. (Recommendation 2)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS agreed with our recommendation, noting that CMS would provide states further information on the required content of the annual assessment. In January 2019, HHS noted that CMS continues to develop guidance to states on how to fulfill the annual assessment requirement. As of January 2020, HHS officials have not informed us of any additional actions taken to implement this recommendation. We will update the status of this recommendation when we receive additional information.

Recommendation: The Administrator of CMS should provide states with information on the circumstances under which CMS would defer or disallow matching funds in response to noncompliant encounter data submissions. (Recommendation 3)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS neither agreed nor disagreed with our recommendation and noted steps it has already taken to remind states of their obligation to submit timely, quality encounter data, and prioritize data quality. In January 2019, HHS identified a possible step CMS could take in the event it finds deficiencies in states' encounter data reporting that cannot be resolved through informal monitoring and discussions with state Medicaid agencies. In particular, HHS noted that CMS would issue guidance on the parameters by which the agency would impose financial penalties on states for noncompliant encounter data submissions, if necessary. In February 2020, CMS officials told us that they continue to monitor state encounter data submissions and would issue guidance to states if they identify deficiencies in the data that cannot be resolved through informal monitoring and disccussions with state Medicaid agencies. To implement this recommendation, the Administrator of CMS should provide states with this information. We will update the status of this recommendation when we receive additional information.

Recommendation: The Administrator of CMS should eliminate impediments to collaborative audits in managed care conducted by audit contractors and states, by ensuring that managed care audits are conducted regardless of which entity--the state or the managed care organization--recoups any identified overpayments. (Recommendation 2)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open
Priority recommendation

Comments: CMS agreed with and has taken some steps to address this action, as recommended by GAO in July 2018. In September 2019, CMS reported that in July 2019 CMS held a meeting with states and collaborative audit contractors to discuss coordination of managed care audits, including a wide range of challenges with managed care audits. As result of the feedback and recommendations received, CMS is evaluating several process improvements and reiterated that audit contractors will continue to work with states to provide support and assistance in Medicaid managed care, and that Medicaid managed care audits should not be limited by MCO contract language. Although CMS has communicated to states the need to increase audits in managed care and address identified issues, it is unclear if these actions will remove known impediments to managed care audits or result in an increase in the number of collaborative audits. Implementing GAO's July 2018 recommendation is needed because few audits of Medicaid managed care have been conducted and overpayments can be significant based on the findings from federal and state audits and investigations that have been completed. .

Recommendation: To ensure efficient use of federal resources, the Administrator of CMS should account for Medicaid payments a hospital has received that offset uncompensated care costs when determining hospital uncompensated care costs for the purposes of making Medicare UC payments to individual hospitals.

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open
Priority recommendation

Comments: No executive action taken as of March 2020. CMS initially agreed with GAO's June 2016 recommendation. However, in October 2018, and again in December 2019 , CMS indicated that it was reconsidering whether to offset Medicare Uncompensated Care (UC) payments by Medicaid's uncompensated care payments. CMS stated that because Medicare UC payments are distributed based on hospitals' relative (not actual) uncompensated care costs, it would not be appropriate to account for Medicaid payments that reduce hospital uncompensated care. However, in some states Medicaid payments reduce or even eliminate hospital uncompensated care costs, which can result in an inequitable distribution of payments. Because the total amount of Medicare UC payments is capped, not accounting for Medicaid payments will result in hospitals that have little or no uncompensated care costs receiving a higher proportion of Medicare UC payments than warranted, resulting in in less funding for hospitals that actually have uncompensated care costs. Implementing GAO's recommendation would ensure that Medicare UC payments are based on accurate levels of uncompensated care costs and result in CMS better targeting billions of dollars in Medicare UC payments to hospitals that do have with the most uncompensated care costs, while avoiding making payments to hospitals with little or no uncompensated care costs.

Recommendation: The Administrator of CMS should develop a data collection strategy that ensures that states report accurate and complete data on all sources of funds used to finance the nonfederal share of Medicaid payments. There are short- and long-term possibilities for pursuing the data collection strategy, including (1) in the short-term, as part of its ongoing initiative to annually collect data on Medicaid payments made to hospitals, nursing facilities, and other institutional providers, CMS could collect accurate and complete facility-specific data on the sources of funds used to finance the nonfederal share of the Medicaid payments, and (2) in the long-term, as part of its ongoing initiative to develop an enhanced Medicaid claims data system (T-MSIS), CMS could ensure that T-MSIS will be capable of capturing information on all sources of funds used to finance the nonfederal share of Medicaid payments, and, once the system becomes operational, ensure that states report this information for supplemental Medicaid payments and other highrisk Medicaid payments.

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: The Centers for Medicare & Medicaid Services (CMS) acknowledged that it lacks adequate data on state financing methods for overseeing compliance with a certain federal requirement related to the nonfederal share and that it will examine efforts to improve data collection toward this end. In November 2019, CMS issued a proposed rule that the agency said would promote state accountability, improve federal oversight, and strengthen fiscal integrity of the Medicaid program. The proposed rule would establish new policies and codify existing policies related to reporting the sources of funds used to finance the nonfederal share of Medicaid payments. For example, the proposed rule would require states to report, at the aggregate and provider level, contributions to the state or local governments used as a source of the nonfederal share for Medicaid supplemental payments. GAO will continue to monitor the status of the proposed rule, as well as review a final rule, if one is issued, to determine the extent to which it addresses the recommendation. GAO maintains it is important that CMS and federal policymakers have more complete information about how increasing federal costs are impacting the Medicaid program, including beneficiaries and the providers who serve them and plans to continue to monitor CMS's actions to help ensure that states report accurate and complete data on all sources of the nonfederal share.

Recommendation: To improve transparency of and accountability for Medicaid non-DSH supplemental payments, Congress should consider requiring the Administrator of CMS to (1) improve state reporting of non-DSH supplemental payments, including requiring annual reporting of payments made to individual facilities and other information that the agency determines is necessary to oversee non-DSH supplemental payments; (2) clarify permissible methods for calculating non-DSH supplemental payments; and (3) require states to submit an annual independent certified audit verifying state compliance with permissible methods for calculating non-DSH supplemental payments.

Agency: Congress
Status: Open

Comments: No legislation enacted as of February 2020. However, CMS has taken some administrative actions, which are underway, to improve its oversight of non-DSH supplemental payments. In November 2019, CMS issued a proposed rule that the agency said would promote state accountability, improve federal oversight, and strengthen fiscal integrity of the Medicaid program. Among other things, the proposed rule would require states to report on non-DSH supplemental payments on a facility-specific basis, as well as specify data sources, data standards, and acceptable methods for demonstrating compliance for non-DSH supplemental payment calculations. GAO plans to continue to monitor congressional action and the status of the proposed rule, as well as review a final rule, if one is issued, to determine the extent to which they improve state reporting of non-DSH supplemental payments, clarify permissible methods for calculating non-DSH supplemental payments, and require audits to verify that states use permissible methods to calculate non-DSH supplemental payments.