A Unified Program Integrity Contractor (UPIC) audit that opens against a billing entity does not stop there. CMS can pursue an overpayment from the entity while separately examining the practice owner who financed it, a buyer who purchased the practice after the claims were filed, and the ordering or certifying physician whose signature sits on the underlying order. Each of those people faces a distinct legal question, and a defense built only around the entity's overpayment demand can leave the people standing behind it unprotected.
Overpayment Liability and the Practice Owner
An overpayment demand runs against the Medicare-enrolled billing entity, the corporation or LLC that submitted the claims, not against the owner individually. According to healthcare compliance firm Liles Parker, owners of an incorporated or LLC-organized healthcare provider are not automatically personally liable for the entity's debt to CMS, and the government can reach an owner's personal assets only in narrow circumstances, typically by piercing the corporate veil when the owner treated the entity as an alter ego or improperly drained its assets. Absent that showing, the recoupment stays with the entity even if the entity cannot fully pay it.
Change of Ownership and Successor Liability
A pending UPIC overpayment finding does not disappear when the practice changes hands. Under 42 CFR 489.18, a change of ownership automatically assigns the seller's existing Medicare provider agreement to the new owner. The assigned agreement remains subject to the terms and conditions under which it was originally issued, which carries forward any outstanding overpayment liability the seller had not resolved, unless CMS determines the overpayment was caused by the seller's fraud. A buyer who closes on a purchase without confirming whether a UPIC review is open, or what it has already found, can inherit a recoupment the purchase agreement never priced in.
Ordering and Certifying Physician Exposure
The ordering or certifying physician carries a different kind of exposure. Under 42 CFR 424.535(a)(21), CMS can revoke the Medicare enrollment of an individual physician or eligible professional who has a pattern or practice of ordering, certifying, referring, or prescribing Part A or Part B services, items, or drugs that is abusive, poses a risk to beneficiaries, or otherwise fails to meet Medicare requirements. That action reaches the physician's own enrollment and stands apart from any revocation or overpayment action against the entity that billed the claims. For more on Medicare enrollment consequences, see how a UPIC finding affects enrollment status. For DME suppliers specifically, 42 CFR 424.57(c)(28) requires the supplier to keep ordering and referring documentation consistent with 42 CFR 424.516(f), so the physician's order becomes part of the supplier's audit record. When that order carries an illegible signature, CMS's Program Integrity Manual lets the supplier submit a signature log identifying the author, even though the physician never submitted the claim.
When Separate Counsel Is the Right Call
A UPIC finding can name the entity and reach an individual at the same time, and that combination can create a conflict for one attorney representing both. An owner contesting an extrapolated demand and a physician deciding whether to sit for an interview do not always want the same outcome from the same facts. The split between entity and individual liability is not confined to physician practices; the same pattern runs through UPIC reviews of ambulance suppliers and behavioral health providers, wherever an individual's order, certification, or signature sits behind an entity's claim. Once an individual receives a target letter naming them separately from the entity, or once the entity's counsel identifies facts that could shift blame toward a specific owner or physician, that individual needs counsel whose only client is them.
An overpayment demand against the billing entity does not answer whether CMS can also revoke an individual physician's own enrollment for the same ordering pattern.
Health Law Alliance's attorneys have overseen 2,000+ audits and handled 5,000+ matters, with 25+ years of experience.
Why Early Legal Counsel Is Critical
It is critical that healthcare providers, practice owners, and ordering or certifying physicians promptly retain experienced healthcare defense counsel upon learning that a UPIC audit has reached them individually, whether through a records request, a site visit, a payment suspension, or a target letter. Early legal intervention can protect each person's rights, ensure appropriate responses to government requests, avoid inadvertent admissions, preserve relevant defenses, and allow counsel to communicate with investigators on their behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the individual to unnecessary risk.
How Health Law Alliance Can Help
Health Law Alliance represents practice owners, buyers in a pending sale, and ordering and certifying physicians who face exposure alongside the entity under UPIC review, each with counsel aligned to that person's own interest rather than the entity's. If a UPIC audit of your practice has reached you individually, contact Health Law Alliance's UPIC audit defense attorneys for a free, confidential consultation.
