By John Fisher, JD, CHC, CCEP
OIG Advisories Clarify Provider Requirements for Excluded Party List Searches
Legal Obligations, Compliance Risks, and Best Practices for Healthcare Employers
Healthcare employers frequently ask how far their obligation extends when screening employees, contractors, vendors, and other parties against the Office of Inspector General’s exclusion database. The question matters because individuals and entities excluded from federal health care programs may not receive payment for items or services they furnish, order, or prescribe. When a provider employs or contracts with an excluded party, the organization may face civil monetary penalties, repayment exposure, denied reimbursement, and reputational harm. For that reason, exclusion screening is best presented as a practical compliance safeguard rather than a mere administrative formality.
Provider Obligations Under OIG Guidance
The OIG maintains the List of Excluded Individuals and Entities and expects healthcare organizations to use it routinely to confirm that new hires, current employees, contractors, and other covered parties are not excluded. This obligation reaches beyond the initial hiring decision. Screening should be built into credentialing, contracting, vendor onboarding, and ongoing compliance monitoring so that exclusion risk is addressed throughout the relationship.
Risks of Non-Compliance
When screening controls fail, the consequences can be significant. Providers may be subject to civil monetary penalties and may be unable to obtain reimbursement for services performed, ordered, or prescribed by an excluded party. The risk grows when an excluded person or entity remains undetected over time, especially if claims have already been submitted to federal health care programs. These consequences make timely, documented screening an important safeguard rather than a purely procedural step.
Recommended Screening Practices
A practical screening program should define who is screened, when screening occurs, which sources are checked, and how possible matches are resolved. The following practices help translate the organization’s legal obligations into a repeatable compliance process.
- Screen employees, contractors, vendors, and other covered parties before hire, appointment, credentialing, contracting, or vendor engagement.
- Include clinical and non-clinical roles, temporary staff, locum tenens providers, ordering or referring providers, billing companies, management service organizations, and vendors that support patient care, billing, claims, or federally funded program activity.
- Repeat screening after onboarding because exclusion status can change after an individual or entity has already been engaged.
- Use the OIG List of Excluded Individuals and Entities as the primary screening source, and consider whether additional federal or state exclusion databases should be checked based on organizational risk and payer requirements.
- Search all known names when appropriate, including former names, maiden names, aliases, and business names, and document the information used to verify potential matches.
- Escalate potential matches promptly to compliance or legal personnel before allowing the individual or entity to furnish, order, prescribe, or support reimbursable services.
Screening Frequency and Documentation
Because exclusion status can change, screening should continue after the initial engagement. Historically, many organizations performed exclusion checks annually, but current compliance practice favors more frequent review, often monthly or quarterly, because the OIG updates exclusion information on an ongoing basis and provides monthly supplement files. Whatever schedule an organization adopts, it should be documented in written policies and applied consistently. Search logs should record the date of each search, the source checked, the search terms used, the results, and the resolution of any potential match.
Operationalizing Exclusion Checks
To make these expectations work in practice, providers should assign clear ownership for the screening process and train human resources, credentialing, contracting, and compliance personnel on their respective responsibilities. Screening should be integrated into workflow checkpoints rather than handled separately after decisions have already been made. Automated screening tools, vendor attestations, periodic audits, and escalation procedures for potential matches can help demonstrate that the organization has adopted a proactive and defensible process.
Key Takeaways
OIG guidance makes routine excluded party list searches an essential compliance practice for healthcare organizations that participate in federal health care programs. A defensible process begins before engagement, continues on a regular schedule, documents each search, and assigns responsibility for resolving potential matches. By connecting screening obligations to day-to-day workflows, organizations can reduce the risk of penalties, repayment obligations, and denied reimbursement while strengthening the integrity of their compliance programs.
