State Medicaid agencies are auditing assisted living providers enrolled in a Medicaid home and community-based services (HCBS) waiver against two things: the federal HCBS settings rule at 42 CFR 441.301(c)(4) and (c)(5), and the person-centered service plan the state approved for each resident. A facility that cannot show its setting meets the rule, or that billed a unit of service the service plan does not support, faces recoupment across the full audit lookback period, not just the flagged claims.
The HCBS Settings Rule for Assisted Living Residences
The settings rule sits at 42 CFR 441.301(c)(4) through (c)(5). To qualify as a home and community-based setting, an assisted living residence must be integrated in and support full access to the surrounding community, be a setting the resident selected from real alternatives, protect the resident's privacy, dignity, and freedom from restraint, and let the resident control daily choices such as visitors, food access, and schedule. CMS treats certain settings as presumptively institutional: a residence inside a building that also provides inpatient treatment, a residence on the grounds of or immediately adjacent to a public institution, or any setting that has the effect of isolating residents from the broader community. A facility caught in that presumption overcomes it only if CMS finds, through what the rule calls heightened scrutiny, that the setting does not have the qualities of an institution and does have the qualities of a home and community-based setting.
What the Service Plan Must Show Before the Audit
A Medicaid HCBS waiver audit starts with the person-centered service plan on file for the resident the auditor selected, because 42 CFR 441.301(c)(2) requires that plan to identify the setting the resident chose, the services and supports the resident needs, and the provider responsible for each one. Under 441.301(c)(3), the state must reassess the resident's functional need and review the plan at least once every 12 months. An auditor who pulls a claim dated outside that window, or finds a plan that never documents why the resident's placement satisfies the settings rule, has what is needed to question every claim tied to that plan. The fix is a contemporaneous record: the assessment, the plan, and a service note for each billed unit that lines up with what the plan actually authorized.
Where the Institutional Presumption Catches Assisted Living Settings
Assisted living operators run into the institutional presumption in predictable places: a building that shares a campus with a skilled nursing facility, or a residence built on land adjacent to a state hospital. Overcoming that presumption takes a heightened-scrutiny determination that the setting lacks institutional qualities and has the qualities of a home and community-based setting, not a facility's own paperwork. A related but separate rule reaches a locked memory care unit with no resident-controlled door: restricting that right in a provider-owned setting needs a documented, resident-specific justification under 441.301(c)(4)(vi)(F): the assessed need for the restriction, the less restrictive options tried first, and the schedule for reviewing whether the restriction still fits. A facility that added a locked unit for safety but never built that record is the facility an auditor flags first.
A service plan that does not document why a resident's setting satisfies the HCBS settings rule gives a Medicaid auditor everything needed to recoup every claim tied to that plan.
Recoupment, Suspension, and Appeal After the Finding
A finding that the service plan does not support the claim, or that the setting does not meet the rule, supports recoupment across the full audit period the state reviewed, not only the sampled claims. Extrapolating a sample's error rate across a provider's full waiver caseload can turn a handful of flagged resident files into a demand covering years of billing. A state can also suspend Medicaid payments once it has a credible allegation of fraud under investigation, and it may find a good cause exception to lift the suspension based on documented harm to beneficiaries or its own assessment of the evidence, not on the provider's conduct. A pattern of billing for a setting the provider already knew did not meet the rule can expose the provider to False Claims Act liability separate from the recoupment. An audit appeal is the first point where a provider can contest the sample, the extrapolation, or the auditor's reading of the service plan.
Why Early Legal Counsel Is Critical
It is critical that assisted living providers promptly retain experienced healthcare defense counsel once a Medicaid HCBS waiver audit notice arrives. Early legal intervention can shape the service-plan record before the audit sample is drawn, position a heightened-scrutiny request before the state treats a setting as institutional by default, and preserve the right to an audit appeal before an extrapolated finding becomes final.
How Health Law Alliance Can Help
Health Law Alliance defends Medicaid audits and investigations, including the home and community-based services reviews state program-integrity units target, through a defense framework that runs from the document request response through extrapolation challenges, payment-suspension good-cause submissions, and state fair hearings and administrative appeals, as part of its broader Medicaid audit defense work.
Health Law Alliance's attorneys have overseen 2,000+ audits and handled 5,000+ matters, with 25+ years of experience.
If your facility has received a Medicaid HCBS waiver audit notice, contact Health Law Alliance for a free, confidential consultation before you respond to the state.
