A Kentucky pharmacy, physician practice, or home health agency facing a Medicaid audit is working against one of two different clocks. The Department for Medicaid Services, inside Kentucky's Cabinet for Health and Family Services, runs direct program integrity review through its Division of Program Integrity. The managed care organizations under contract with the department audit the claims they pay and route a denied claim through a separate review process. Each path carries its own notice, its own appeal deadline, and its own hearing procedure, and answering the wrong one does not preserve the right to challenge an overpayment at all.
Kentucky's State Program Integrity Structure
An audit that originates with the state, rather than a managed care plan, comes out of the Division of Program Integrity's Audits and Compliance Branch, which identifies providers for review through data mining, high utilization patterns, required federal audits, and other referrals. Its Recovery Branch takes over once an overpayment is identified, opening the account and processing the collection, while a provider's enrollment and revalidation status is handled by the Division's Provider Licensing and Certification Branch. The Audits and Compliance Branch also refers matters needing an intensive medical record review to a federal Unified Program Integrity Contractor working Kentucky's claims. Separately, the Cabinet's Office of the Inspector General, Division of Audits and Investigations, investigates referred fraud and abuse. A sustained fraud finding can carry False Claims Act exposure and, in serious matters, an OIG exclusion from federal health care programs, apart from the audit's own overpayment demand. Which office sent the notice determines which appeal regulation applies.
The Managed Care Plans' Audit Role
Kentucky Medicaid contracts with managed care organizations (MCOs) to deliver benefits, and each MCO audits the claims it pays under its own contract terms. When an MCO denies or reduces a claim and the provider has exhausted the MCO's internal appeal, the next step is an External Independent Third-Party Review (EITPR) under 907 KAR 17:035, administered by the department. A party that receives an adverse EITPR decision can then request an administrative hearing under 907 KAR 17:040. A provider contesting an MCO's own audit finding is working through this EITPR structure, not the Division of Program Integrity's.
Appealing a Direct State Overpayment Finding
When the Division of Program Integrity itself finds an overpayment, the audit appeal runs under 907 KAR 1:671. A provider disputing the amount has 30 calendar days from receipt of the department's notice to send a written request for an administrative hearing. Filing that request on time stays the department's recoupment activity on the disputed issues until the appeal is final. The hearing itself must be held in Frankfort, Kentucky, no later than 60 calendar days after the department receives the request, conducted under KRS Chapter 13B by a hearing officer knowledgeable in Medicaid policy. A party that loses before the hearing officer can seek judicial review under KRS 13B.140 and 13B.150.
Appealing a Managed Care Denial
The regulation at 907 KAR 17:040 governs the separate track that follows an EITPR. A provider has 30 calendar days from the adverse EITPR notice to request an administrative hearing, which must then be scheduled within 60 calendar days of that request, and the hearing officer's decision is due within 60 calendar days after the official record closes. A party that receives an adverse final order on this track also owes the department a $600 fee within 30 calendar days of the final order, a cost with no counterpart in a direct state audit appeal under 907 KAR 1:671. Confirming which regulation applies comes first, before the clock starts.
A timely request for an administrative hearing stays the department's recoupment activity on the disputed issues until the appeal is final, so a provider is not forced to fund a disputed Medicaid overpayment while contesting it.
Why Early Legal Counsel Is Critical
It is critical that Kentucky Medicaid providers promptly retain experienced healthcare defense counsel upon receiving a program integrity audit notice, an overpayment finding, or an adverse managed care review. Early legal intervention can protect the provider's rights, shape the response to the department's or the plan's requests, avoid inadvertent admissions, and preserve relevant defenses. Delaying representation, particularly past the 30-day window to request an administrative hearing, can affect the outcome of a matter and expose the provider to unnecessary risk.
How Health Law Alliance Can Help
Health Law Alliance's attorneys have overseen 2,000+ audits and handled 5,000+ matters, with 25+ years of experience. The firm defends healthcare providers against state Medicaid program integrity audits and managed care plan audits nationwide. If your Kentucky practice or pharmacy has received a Medicaid overpayment notice or an adverse managed care audit finding, contact us for a free, confidential consultation through our Medicaid audit defense page.





