A Corporate Integrity Agreement resolves federal healthcare fraud liability, but it does not end the government's oversight. Most CIAs require the settling provider to retain an independent review organization (IRO), an outside accounting, law, or consulting firm that audits paid claims and, in many agreements, referral arrangements, then reports its findings to the HHS Office of Inspector General (OIG). A poorly managed review can extend the government's scrutiny well past the underlying settlement.
This is a distinct function from the independent review organizations that decide health plan members' external appeals of denied claims. Both share a name, but the CIA-context IRO answers to a federal regulator, not to a health plan enrollee, and its findings can trigger repayment obligations and stipulated penalties rather than a coverage decision.
Selecting and Engaging an IRO
The provider chooses its own IRO. OIG does not maintain an approved list and will not recommend a firm, but most CIAs give OIG 30 days after receiving written notice of the provider's choice to declare it unacceptable. If concerns about the IRO's quality, qualifications, or independence surface later, OIG can require the provider to terminate that engagement and retain a replacement. The qualifications required of the IRO's personnel sit in an appendix to the CIA itself: knowledge of Medicare and State Medicaid program requirements, training in statistical sampling to design the review, a nationally recognized coding certification for the coding portion, and, where medical necessity is at issue, licensed nurses or physicians to make that determination.
The Scope of the Claims Review
Older-style CIAs start with a discovery sample of 50 paid claims. If the net financial error rate reaches 5 percent or more, the IRO must review a full sample and conduct a systems review, and the provider repays any extrapolated overpayment at the point estimate. More recent CIAs skip the discovery step and require review of a randomly selected sample of 100 paid claims from the outset, with the provider then evaluating whether the CMS overpayment rule requires additional sampling or an extrapolated repayment. Integrity Agreements, the individual-practitioner counterpart to a CIA, typically call for quarterly review of 30 paid claims instead. Many CIAs also require an arrangements review testing referral relationships against the Anti-Kickback Statute and Stark Law, separate from the claims-level work.
If the provider cannot produce documentation for a paid claim the IRO selected, the claim is treated as an error and the full amount paid is counted as an overpayment, and no substitute claim is allowed.
Preparing Before the Sample Is Drawn
Many CIAs trace back to a matter that began years earlier with a civil investigative demand or a grand jury subpoena, and the response given at that early stage often shapes how the eventual claims review gets scoped. By the time the IRO is engaged, the provider's real work is document readiness: reconstructing the adjudication and medical-necessity trail behind every claim type the sample could reach, correcting the coding and billing patterns behind the underlying settlement, and building the controls the CIA's systems review will test. Distinguishing an isolated billing error from a pattern that reads as fraud is exactly the analysis the claims review performs, and it is cheaper to run internally first. Failing to engage or use an IRO at all is itself a material breach under OIG's standard CIA language, and a material breach is an independent basis for exclusion from federal healthcare programs.
Why Early Legal Counsel Is Critical
It is critical that healthcare providers promptly retain experienced healthcare defense counsel upon receiving a subpoena, a civil investigative demand, or notice of a government inquiry that could lead to a Corporate Integrity Agreement. Early legal intervention can protect the provider's rights, shape the scope negotiated into the eventual CIA, ensure appropriate responses to government and IRO requests, and preserve defenses that become far harder to raise once the claims review is underway. Delaying legal representation can significantly affect the outcome of a matter and expose the provider to unnecessary risk.
How Health Law Alliance Can Help
Health Law Alliance represents healthcare providers and companies through False Claims Act investigations, CIA negotiation, and the IRO claims reviews that follow. Our team includes a former federal prosecutor and a former senior compliance executive at a major health plan, a combination that shapes how we read a claims review methodology and where its findings are open to challenge. If your organization is negotiating a Corporate Integrity Agreement or preparing for an IRO review, contact us for a free, confidential consultation.
