What OIG Says About E/M Coding Accuracy

The Office of Inspector General (OIG) at the Department of Health and Human Services is the federal agency responsible for protecting the integrity of Medicare, Medicaid, and other federal healthcare programs. Their compliance guidance has direct implications for how urgent care groups approach coding accuracy — and most operations leaders have either never read it or are working from a secondhand understanding of what it requires.

The core recommendation: independent coding reviews

The OIG's Compliance Program Guidance for Individual and Small Group Physician Practices explicitly recommends that physician practices conduct regular coding reviews performed by someone other than the provider who documented the encounter. The guidance states that practices should have their coding reviewed by a qualified party on a periodic basis to identify errors and prevent them from becoming embedded in organizational practice.

This is not a mandate — the OIG's compliance guidance is voluntary. But it establishes the standard of care that practices are measured against if coding accuracy is ever questioned during a government audit, a payer audit, or a compliance investigation. A practice that has never conducted an independent coding review is in a meaningfully different position than one that has a documented audit on file.

What the OIG is actually concerned about

The OIG's compliance guidance addresses both overcoding and undercoding, though for different reasons.

Overcoding is the obvious concern. Billing for a higher level of service than the documentation supports constitutes a false claim under the False Claims Act. The penalties are severe — up to three times the overpaid amount plus per-claim fines. The OIG actively investigates patterns of overcoding, particularly for E/M services, and has brought enforcement actions against practices that systematically bill at code levels unsupported by documentation.

Undercoding receives less attention in enforcement actions, but the OIG's guidance explicitly identifies it as a compliance concern. Systematic undercoding can indicate a lack of coding competency, which raises questions about the overall accuracy and integrity of a practice's billing. It also suggests that the practice has not implemented the internal controls that the OIG considers part of an effective compliance program.

The practical implication is that a practice cannot defend its coding accuracy by saying "we code conservatively." Conservative coding is still inaccurate coding if it doesn't match the documentation. The OIG standard is accuracy — not caution.

What an effective compliance program looks like

The OIG outlines seven elements of an effective compliance program for physician practices. Several of them bear directly on coding accuracy:

Written standards and procedures. A practice should have documented coding policies that reflect the current E/M framework, including the 2021+ MDM-based code selection criteria.

Designated compliance oversight. Someone within the organization should be responsible for monitoring coding accuracy. This doesn't require a full-time compliance officer in a small practice, but it does require someone with the authority and resources to identify and address coding issues.

Education and training. Providers should receive periodic training on coding requirements, including updates when guidelines change. The 2021 E/M overhaul was the most significant change in decades, and many practices have not formally trained their providers on the new framework.

Internal monitoring and auditing. This is where the independent coding review recommendation lives. The OIG expects practices to periodically review their coding patterns and compare billed codes to documentation. The frequency and scope of these reviews should be proportional to the size of the practice and the risk profile of its coding patterns.

Response to detected offenses. When a coding review identifies errors, the practice should have a documented process for correcting them — whether that means provider education, policy changes, or refiling claims.

What this means for urgent care operations

Urgent care groups occupy a particular risk position in E/M coding. Visit volumes are high. The complexity range is narrow — most visits fall between Level 3 and Level 4, precisely the boundary where coding accuracy matters most. And the provider workforce often includes physician assistants and nurse practitioners who may have received less formal coding education than physicians.

An independent baseline audit addresses the OIG's core recommendation directly. It produces a documented, defensible record of coding accuracy at a specific point in time. It identifies whether the practice has a systematic pattern of over- or undercoding. And it provides the foundation for targeted education — the exact corrective mechanism the OIG describes in its compliance guidance.