Audit & Enforcement Briefing, August 2026
What changed: the HHS Office of Inspector General added Work Plan item SRS-E-26-004, Medicare Advantage Organizations' Use of Prior Authorization for Post-Acute Care, to its FY2026 Work Plan. OIG will examine how MA plans use prior authorization to gate admissions to post-acute settings, the single biggest driver of hospital discharge delays and SNF admission denials. If your facility is not already logging PA turnaround times and denial-overturn rates by plan, start now. OIG evidence has a track record of becoming CMS rulemaking, and the data you keep today is the appeal leverage of 2027.
What OIG is actually reviewing
Work Plan item SRS-E-26-004 states OIG will review Medicare Advantage organizations' use of prior authorization for post-acute care. That scope lands directly on the workflow every hospital case manager knows: the patient is clinically ready to leave the hospital, the receiving SNF has a bed, and everything waits on a payer decision. This is not a new interest for OIG. Report OEI-09-18-00260, issued April 2022, found that MA organizations sometimes denied prior authorization requests even when the requests met Medicare coverage rules, and that some denials were later reversed. Post-acute transfers featured prominently among the problem cases in that body of work, which is why this follow-on review zeroes in on them.
The discharge bottleneck, mapped
Here is the flow OIG will be looking at, and the exact points where your documentation either exists or does not. Every gold chip marks a data element you should be capturing per plan, per request, starting today.
Patient is discharge-ready
Physician documents medical readiness for a post-acute level of care. The clinical clock starts here, whatever the payer clock says.
LOG: discharge-ready date and timePA request submitted to the MA plan
Case management sends the authorization request for SNF, IRF, LTCH, or home health, with clinical documentation attached.
LOG: submission timestamp, plan, channel, setting requestedPlan utilization review
The MA organization or its delegated vendor reviews the request. This is the interval SRS-E-26-004 puts under the microscope.
LOG: decision timestamp, turnaround in hoursApproved
Patient transfers. Still log the elapsed days between discharge-ready and actual transfer. Approved-but-late is a delay too, and it is invisible unless you record it.
Pended
The plan requests more documentation while the patient occupies an acute bed. Log every additional-information request and the days it adds. Pend cycles are where avoidable days hide.
Denied
Peer-to-peer, then appeal. Log the denial reason verbatim, the appeal level reached, and the final outcome. A denial overturned on appeal is the most valuable data point in this whole flow.
Why OIG scrutiny becomes CMS rulemaking
The reason to act before the report publishes is the pipeline itself. OIG's April 2022 findings in OEI-09-18-00260 fed directly into CMS's Contract Year 2024 Medicare Advantage final rule, CMS-4201-F (April 2023), which required MA plans to follow traditional Medicare coverage criteria and tightened how prior authorization can be used. The same mechanism is now pointed at post-acute care.
OIG issues OEI-09-18-00260 on MA prior authorization and payment denials.
CMS finalizes CMS-4201-F, binding MA plans to traditional Medicare coverage criteria and constraining PA practices.
OIG opens SRS-E-26-004 on MA prior authorization specifically for post-acute care.
Providers holding plan-level turnaround and overturn data enter the resulting enforcement and contracting cycle with evidence, not anecdotes.
OIG reviews collect exactly the kind of plan-level operational data most providers do not keep for themselves. When the report lands, the plans will have their version of the numbers. Hospitals and SNFs that kept parallel logs will be able to corroborate, contest, and, critically, cite their own data in appeals, in payer contract negotiations, and in complaints to CMS account managers.
The operator to-do list
- Stand up a PA log by plan. One row per post-acute authorization request: plan, product, setting requested, submission timestamp, decision timestamp, outcome. A spreadsheet is enough to start. Consistency matters more than tooling.
- Capture discharge-ready versus actual-transfer dates. The delta is your avoidable-day count, and it is the number that translates PA friction into dollars and bed capacity for your CFO.
- Track denial reasons verbatim and overturn rates by plan. A high overturn rate is evidence the initial denials were wrong, which is precisely the pattern OIG documented in OEI-09-18-00260.
- Log every pend cycle. Each additional-documentation request, what was asked, and the days it added. Pends are functionally soft denials and rarely get counted.
- Escalate in writing. Peer-to-peer outcomes, expedited appeal filings, and plan non-responses belong in the record, dated. Verbal-only escalation produces nothing you can cite later.
- Brief compliance and managed-care contracting now. Put SRS-E-26-004 on the agenda so the same dataset serves audit-readiness, contract renewals, and appeal strategy at once.
Sources
This analysis cites government primary sources only:
- HHS OIG Work Plan item
SRS-E-26-004, Medicare Advantage Organizations' Use of Prior Authorization for Post-Acute Care, oig.hhs.gov/reports/work-plan/browse-work-plan-projects/srs-e-26-004 - HHS OIG report
OEI-09-18-00260(April 2022) on Medicare Advantage organizations' prior authorization and payment denials, oig.hhs.gov - CMS final rule
CMS-4201-F(April 2023), Contract Year 2024 Medicare Advantage policy, cms.gov
Turn PA friction into a dataset before OIG does it for the plans
ASP-RCM Solutions builds exactly this discipline into revenue cycle operations for hospitals, SNFs, and post-acute providers: authorization tracking by plan, denial and overturn analytics, appeal management with documented escalation trails, and payer scorecards your contracting team can actually use. If MA prior authorization is delaying your discharges or denying your admissions, we can have your baseline log running before the OIG report publishes.
Talk to our teamRelated reading
RADV-Ready: Building MEAT-Standard Documentation Into the Risk Workflow
RADV audit readiness starts upstream, not at the audit letter. See how an HCC V28 risk workflow runs every cha
Read →BriefingRecapture season has a clock, and it resets every January 1st.
The 2026 chronic-condition recapture checklist our CMS-HCC V28 engine runs on every chart, surfacing suspected
Read →InsightCoding to Survive RADV: the MEAT behind every 2026 HCC
A side-by-side matrix pairing common HCC-driving diagnoses with the exact MEAT evidence an extrapolated 2026 R
Read →