Connecticut Medicaid Audits by the Department of Social Services

The Connecticut Department of Social Services (DSS) audits Medicaid providers under Conn. Gen. Stat. § 17b-99(d), and the statute fixes nearly every deadline in that process: the notice before DSS opens a file, the window to produce records once DSS flags a discrepancy, the lookback period on claims, and the threshold DSS must clear before extrapolating a sample's error rate across every claim a provider billed. A compliance officer who treats a DSS audit notice as routine correspondence can lose the chance to contest a finding before it becomes final.

How DSS Opens a Medicaid Provider Audit

DSS must give a participating provider written notice at least 30 days before an audit begins, along with the sampling and extrapolation methodology it will use, unless DSS determines a recipient's health or safety is at risk or suspects vendor fraud. At the audit's start, DSS discloses the auditor's name and contact information, the audit location, and the categories of records under review. No audit may reach claims paid more than 36 months before the date DSS selects claims for the audit, a limit explained in Medicaid Audit Lookback Periods and the Sample Time Frame.

The Records Request and the Self-Audit Alternative

Once DSS flags a discrepancy during fieldwork, the provider gets at least 30 days to produce documentation, and DSS must accept a scanned copy when the original is unavailable. A clerical error, the statute's term for an unintentional typographical, scrivener's, or computer error, does not by itself establish a willful violation unless the state proves intent to commit fraud or otherwise violate program rules. DSS also uses a separate tool, a letter demanding the provider audit its own claims and certify the results instead of waiting for a DSS-led review, covered in Medicaid Self-Audit Demand Letters: Options Before You Certify.

Extrapolation and the Threshold That Triggers It

Extrapolation projects a sample's error rate across every claim a provider billed during the audit period, turning a limited document pull into a demand far larger than the sample itself. The statute permits extrapolation only when the methodology carries at least a ninety-five per cent confidence level and the extrapolated overpayment exceeds a fixed share of the provider's total claims paid for the audit period. Public Act 26-143, effective October 1, 2026, raised that threshold from 1.75% to 2.75% of total claims paid, so a smaller sample error now has to clear a higher bar before it becomes a full recoupment demand.

DSS cannot recoup a disputed extrapolated overpayment while a contested case hearing on that finding is pending, but that protection only reaches a provider who requested the hearing within 30 days of the final report.

Preliminary and Final Reports, and the Appeal Window

DSS issues a preliminary written report within 60 days after the audit concludes, then holds an exit conference where the provider can present evidence against the findings. A final written report follows within 60 days of the exit conference, absent an extension or a pending referral. A provider aggrieved by the final report has 30 days from receipt to request, in writing, a contested case hearing under Chapter 54, describing each item disputed. An impartial designee, who may not be a DSS Office of Quality Assurance employee, presides and must decide within 90 days after the close of evidence or final briefs, whichever is later. That hearing is the audit appeal stage of the process, and it is the last point at which a provider can challenge a finding before DSS treats it as final.

When an Audit Points Toward Fraud

The audit procedures in Conn. Gen. Stat. § 17b-99(d) do not apply to a Medicaid Fraud Control Unit (MFCU) audit, a distinct track with different exposure. A DSS audit that surfaces a pattern suggesting intentional misconduct can route to the MFCU, exposing the provider to civil liability under the False Claims Act or a program exclusion from HHS-OIG (see OIG exclusion). A provider that discovers its own overpayment first, rather than waiting for a DSS finding, can weigh self-disclosure instead; the tradeoffs are covered in Medicaid Self-Disclosure: When and How.

Why Early Legal Counsel Is Critical

It is critical that healthcare providers promptly retain experienced healthcare defense counsel upon receiving a DSS audit notice, document request, or related government inquiry. Early legal intervention can protect the provider's rights, shape responses to DSS requests, avoid inadvertent admissions, preserve defenses for the contested case hearing, and let counsel communicate with DSS and its auditors on the provider's behalf. Delaying representation can significantly affect the outcome and expose the provider to unnecessary risk.

How Health Law Alliance Can Help

Health Law Alliance's attorneys have overseen 2,000+ audits and handled 5,000+ matters, with 25+ years of experience. The firm's defense framework runs from the document request response through extrapolation challenges, state fair hearings, and administrative appeals. If your practice has received a Connecticut DSS Medicaid audit notice or document request, contact us for a free, confidential consultation through our Medicaid audit defense page.