A pharmacy benefit manager tests a sample of claims during a PBM audit and extrapolates the error rate across the full lookback period, often 12 to 24 months of billing. A pharmacy that draws its own claims sample first, using the same logic a PBM auditor applies, can identify billing errors, missing signature logs, and inventory discrepancies before they surface as a recoupment demand. The exposure runs beyond the sampled claims themselves: an uncorrected pattern can support network termination under the pharmacy's provider agreement, and an identified overpayment carries its own federal reporting deadline. This guide covers how to build a defensible internal sample, correct the systemic cause behind flagged claims, and document that remediation so it holds up as evidence of good-faith compliance if a real audit follows.

Building a Defensible Sample

A defensible self-audit sample mirrors the structure of a PBM's desk or on-site audit, not a handful of convenient claims. PBM auditors run an electronic review across the full claims file, then pull a sample of claims flagged as potentially problematic for manual review, according to Milliman's overview of pharmacy benefit claims auditing. A pharmacy building its own sample should pull claims across the categories PBMs commonly target: high-dollar claims, compounded prescriptions, controlled substances, and the pharmacy's most frequently billed drugs. Because a PBM extrapolates a sample's error rate across the entire lookback period named in the audit notice, an internal sample confined to one drug category or one recent month will miss the pattern a real audit would find.

Correcting the Systemic Cause

A self-audit that stops at the sampled claims corrects the appearance of a problem without closing the exposure. If the sample turns up a recurring deficiency, a signature log missing a date, a prior authorization filed after the fill date, a compounding record missing a beyond-use date, that same deficiency is almost certainly present in claims the sample did not pull. The corrective step is to identify the root cause behind it, such as a point-of-sale system default, a training gap on a specific payer's documentation rule, or a staffing change, and then sweep the full universe of claims affected by that cause, not only the claims the sample happened to select. Pharmacies that can show a corrective action tied to a specific root cause and applied pharmacy-wide are in a materially stronger position if a PBM audit follows and the pharmacy needs to contest an extrapolated finding through an audit appeal.

Documenting Remediation as Compliance Evidence

Correcting the problem is only half the record a pharmacy needs. The HHS Office of Inspector General's General Compliance Program Guidance lists auditing and monitoring, including a documented corrective action process, as one of seven elements of an effective compliance program, not a single memo written after the fact. A remediation file a pharmacy can produce on request should include the date the issue was identified, the root cause, the staff retrained or systems reconfigured, and the error rate before and after the fix. That file matters on a deadline, too: once a pharmacy has identified and quantified an overpayment tied to a Medicare or Medicaid claim, the federal 60-day rule generally requires reporting and returning the funds within 60 days, and missing that window can turn a billing error into False Claims Act exposure.

The documentation created during a self-audit is what proves a pharmacy corrected a problem in good faith before a PBM or government auditor found it.

Why Early Legal Counsel Is Critical

It is critical that pharmacies promptly retain experienced healthcare defense counsel upon receiving a PBM audit notice, government subpoena, or investigative request, and ideally before running an internal self-audit that touches claims tied to a federal program. Early legal intervention can protect the pharmacy's rights, ensure appropriate responses to PBM and government requests, avoid inadvertent admissions in a self-audit file, preserve relevant defenses, and allow counsel to communicate with auditors or investigators on the pharmacy's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the pharmacy to unnecessary risk, particularly once a self-audit finding raises a reporting obligation.

How Health Law Alliance Can Help

Health Law Alliance works with pharmacy owners to structure defensible self-audits, correct the findings pharmacy-wide, and build the documentation that stands up if a PBM or government auditor follows. If your pharmacy has identified a billing pattern through its own review, or has received a PBM audit notice, contact us for a free, confidential consultation. Our attorneys defend pharmacies through the audit, appeal, and, where it applies, the self-disclosure process.