CUNNINGHAM LAW · WEBSITE PREVIEW FOR REVIEW
Healthcare resources

Cunningham Law · Healthcare

Your Medical Practice Received an Audit Letter. What Now?

Received a healthcare audit letter? Organize the request, records and response responsibilities, then discuss the next steps with Kim Cunningham.

Healthcare worker organizing folders and correspondence; generated editorial image

A practical starting point

Identify the request and its deadline, preserve relevant information and assign one response coordinator. Different agencies and review programs use different rules; do not assume one universal response period.

An official-looking records request arrives during a full clinic day. One person wants to send everything immediately; another wants to wait until the schedule is quieter. Neither reaction replaces reading the request carefully. The first task is to understand what arrived and prevent an avoidable loss of time or information.

This article is an organizational guide for a healthcare practice. It does not tell you how to answer a specific subpoena, investigative demand, audit, or repayment notice. Those documents can raise different legal issues. A request suggesting fraud, an investigation or a disputed obligation deserves prompt attention from qualified counsel.

Identify the sender, program and document

Keep the complete letter, attachments and envelope or original electronic message. Record when and how it arrived. Identify the named agency or contractor, the reference number, the addressee and the stated purpose. Verify unfamiliar contact details through a trusted official channel before transmitting records.

CMS describes Medicare medical review as work that may involve claims analysis and medical records. An Additional Documentation Request (ADR) is one mechanism for obtaining support. That does not make every government letter an ADR. See CMS medical review and education.

In a hypothetical example, staff see the word “Medicare” and reuse a response checklist from an earlier matter. The earlier checklist may concern a different contractor, review stage, or patient period. Use the actual request as the starting document.

Confirm the deadline without guessing

Make the stated due date visible to the coordinator and the appropriate advisor. Read whether the letter measures time from its date, receipt, or another event. If language is unclear, seek clarification promptly by contacting the sender. Do not treat a request for clarification or an extension request as an automatic pause.

CMS explains that ADR response periods depend on the type of review and the reviewing contractor. It also recommends including the ADR letter with the documentation to help match records to the claim. Read the current CMS ADR guidance together with the actual notice. This guide deliberately does not provide a universal countdown.

Preserve records before assembling a response

Preserve relevant originals and consult the appropriate people about systems that overwrite or delete information automatically. Do not backdate, rewrite or silently replace a clinical entry to make a record look more complete. Questions about corrections, late entries or missing records should be raised explicitly with counsel and the responsible clinical team.

An organizational approach is to separate the preserved source material from a working response set. Keep a record of where each item came from and who gathered it. Avoid making uncontrolled copies on personal devices. The right preservation scope and handling rules depend on the request and circumstances; get advice before assuming an ordinary retention process is enough.

Build an index the reviewer can follow

Turn the request into an item-by-item work list. For each item, record its description, custodian, status and the question needing resolution. Use neutral labels such as “located,” “awaiting vendor export” or “scope clarification needed.” Avoid declaring an item unnecessary before the scope has been reviewed.

Check for common practical defects: an unreadable scan, missing reverse pages, an export without attachments or a file that needs a password the recipient does not have. Use a secure method appropriate to the request. Before sending, reconcile the final package against the index and save evidence of transmission or receipt where available.

Keep communications consistent

Assign a response coordinator so the practice does not send competing versions or make inconsistent promises. The coordinator organizes the work; legal and clinical decisions still belong with the appropriate professionals. Staff should know where to route follow-up calls and how to record what was requested.

Review with counsel whether other duties, notices or protections need attention. This article does not resolve privilege, disclosure authority, appeal rights, or notification obligations. HHS OIG's voluntary compliance guidance provides broader context for organized compliance work; it does not determine the response to a particular demand.

Prepare a focused first conversation

Bring the complete request, the date it arrived, the apparent deadline, and a short list of systems or vendors that hold the material. Explain what has already been sent, if anything. Those facts are more useful than a long narrative assembled before the request has been understood.

Kim Cunningham of Cunningham Law, LLC advises healthcare providers on government audits and investigations. Contact Kim to request a free 30-minute consultation. If a deadline is close, say so in general terms and seek prompt assistance; submitting a website form does not extend a deadline or create representation.

Your review checklist

Select the items you want to discuss. This creates a planning agenda, not a compliance score or legal determination. Your selections stay on this page and are not submitted.

0 items selected

Common questions

How many days do I have to respond?

There is no universal period for every healthcare request. Read the notice and confirm the program-specific requirements with the appropriate adviser.

Should we send all our records immediately?

Determine the request’s scope, lawful disclosure process and secure transmission method first. Organizing a response does not mean volunteering unrelated records.

Sources and further reading

General educational information, not legal advice. Application depends on the facts and governing law.

Talk through your practice’s questions.

Kim Cunningham of Cunningham Law offers a free 30-minute consultation. Share a general description of your question so Kim can arrange the next step.

Request a free consultation