A Zone Program Integrity Contractor (ZPIC) was the CMS contractor responsible for investigating suspected fraud, waste, and abuse in Medicare claims from 2003 until CMS began phasing the role out in 2016. Physicians and defense counsel still encounter the term because Unified Program Integrity Contractors (UPICs) absorbed the ZPIC caseload rather than replacing it outright, and years of extrapolation disputes, appeal decisions, and CMS manual language written during the ZPIC era still shape how a current audit gets defended. Knowing which contractor issued a finding, and under what authority, determines which procedural rules actually apply to the response.

The Origin of the Zone Program Integrity Contractor

Congress created the Medicare Integrity Program under Section 1893 of the Social Security Act, 42 U.S.C. § 1395ddd, added by Public Law 104-191 in 1996, authorizing CMS to contract program integrity work out to dedicated entities rather than run it through claims-processing contractors alone. CMS first used that authority to create Program Safeguard Contractors. The Medicare Prescription Drug, Improvement, and Modernization Act of 2003 directed CMS to competitively rebid that structure, and ZPICs replaced the Program Safeguard Contractors soon after, organized into seven geographic zones covering the country. Each ZPIC ran data analysis, medical review, and fraud investigations for Medicare Parts A and B, durable medical equipment, and home health and hospice claims in its zone, with authority to order a payment suspension or refer a case to law enforcement. A ZPIC is distinct from a RAC, which recovers Medicare overpayments after the fact rather than investigating suspected fraud.

How Unified Program Integrity Contractors Absorbed the ZPIC Function

CMS awarded the first UPIC contracts in 2016 and phased the seven ZPIC zones out over the following several years. The UPIC statement of work combined the ZPIC, Program Safeguard Contractor, and Medicaid Integrity Contractor functions into a single contract type, replacing the seven ZPIC zones with five UPIC jurisdictions: West, Southwest, Midwest, Northeast, and Southeast. Qlarant now runs the Western and Southwestern jurisdictions, CoventBridge Group runs the Midwestern jurisdiction, and SafeGuard Services runs the Northeastern and Southeastern jurisdictions, each auditing Medicare Parts A and B, durable medical equipment, home health and hospice, and Medicaid claims within its territory. The consolidation gave a single contractor visibility across a physician's Medicare and Medicaid claims at once, a capability no individual ZPIC had.

A finding issued years ago by a Zone Program Integrity Contractor can still control the extrapolation methodology a Unified Program Integrity Contractor uses against a physician today.

Why ZPIC-Era Guidance Still Circulates

The CMS Program Integrity Manual and the administrative appeal decisions that interpret it were built during the ZPIC years, and CMS did not rewrite that body of guidance simply because the contractor's name changed. Administrative law judges deciding a current UPIC extrapolation challenge still cite ZPIC-era rulings on sampling methodology, and physicians whose audits opened before the transition reached their region may still see the term ZPIC on the underlying claims file or an older local coverage determination dispute referenced in it. Our related analysis, Challenging Extrapolation in Medicare Overpayment Demands, walks through how that ZPIC-era sampling precedent still gets used against a physician today. A physician who receives what looks like a ZPIC audit notice today is very likely dealing with a UPIC, operating under the same Section 1893 authority the ZPIC used, and facing the same body of ZPIC-era precedent.

Why Early Legal Counsel Is Critical

It is critical that physicians promptly retain experienced healthcare defense counsel upon receiving a UPIC audit notice, a payment suspension notice, or any other program integrity inquiry. Early legal intervention can protect the physician's rights, ensure the response addresses the correct extrapolation methodology, preserve rights across The Five Levels of Medicare Overpayment Appeals, and allow counsel to communicate with the contractor on the physician's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the physician to unnecessary recoupment or a law enforcement referral.

How Health Law Alliance Can Help

Health Law Alliance has guided physicians and other providers through 2,000+ audits, including matters that trace back to a ZPIC-era finding a UPIC has since taken over. If your practice has received a UPIC or legacy ZPIC audit notice, our Medicare audit defense team can review the notice, identify which statutory and procedural rules actually govern the contractor's authority, and respond before the deadline runs.