United States: CMS Proposed Rule Reflects Increased Sophistication In Administration Of MA/Part D Programs

Addressing issues ranging from participation in Part D Plan pharmacy networks to compliance training for so-called first-tier, downstream and related entities, the Proposed Rule covers numerous topics with varying degrees of importance for Medicare Advantage Organizations, Part D Plan Sponsors, pharmacy benefit managers, pharmacies, and other health care and administrative service providers.

The Centers for Medicare & Medicaid Services (CMS) on January 10, 2014, published the first "omnibus"-type proposed rule (Proposed Rule) for the Medicare Advantage (MA) and Medicare Prescription Drug (Part D) Programs in more than two years.  Addressing issues ranging from participation in Part D Plan pharmacy networks to compliance training for so-called first-tier, downstream and related entities, the Proposed Rule covers numerous topics with varying degrees of importance for MA Organizations, Part D Plan Sponsors, pharmacy benefit managers, and other health care and administrative service providers participating in the Programs.

This summary of the Proposed Rule addresses several issues of interest for both MA Organization and Part D Plan Sponsors (collectively, Plan Sponsors), as well as for entities with which Plan Sponsors contract.  Other forthcoming On the Subjects will focus on CMS proposals for the Part D Program, risk adjustment data validation (RADV) proposals, and CMS's proposed implementation of Section 6402 of the Affordable Care Act and its overpayment provisions for the MA and Part D Programs.

Comments on the  Proposed Rule are due to CMS by 5 p.m. EST on March 7, 2014.

CMS Proposes Independent Program Audits at Plan Sponsors' Expense

CMS conducts annual performance audits of Plan Sponsors, but resources limit the number of its assessments.  Accordingly, CMS proposes to adopt the authority to require Plan Sponsors to audit themselves.  Plan Sponsors would be obligated to hire an independent auditor, at the Plan Sponsor's expense, to undertake a performance audit in compliance with CMS standards and to report to CMS on deficiencies identified during the review.  CMS's authority also would include directing Plan Sponsors to engage independent auditors to verify corrective action undertaken by the Plan Sponsor to respond to any deficiencies identified in a performance audit.

Several issues related to this proposal go unaddressed, including the qualifications for independent auditors, potential conflicts of interest between auditors and Plan Sponsors, and how CMS would ensure consistency among audits. In light of the fact that audit results factor into past performance reviews (affecting future Program participation opportunities) and quality star ratings (affecting MA Plan payments), and given the issues that have arisen during audits performed by CMS-contracted auditors, the lack of specific information regarding these self-auditing provisions potentially frustrates the ability of Plan Sponsors to provide meaningful comment on details that will be critical if this proposal is adopted.  

CMS estimates in the Proposed Rule that implementation of this independent auditing requirement would cost Plan Sponsors approximately $8.9 million every year.  Given the complexity of the CMS requirements reviewed through program audits, the high cost of consulting and audit firms with specialization in this field, and the internal resources Plan Sponsors will have to dedicate to facilitating these audits, it is possible that the ultimate costs to the industry could be much higher.

Revised Compensation Formula for Agents and Brokers May Decrease Renewal Payments

CMS proposes to revise the independent agent/broker compensation regulations, in part to further minimize incentives to move Medicare beneficiaries among MA and Part D Plans.  To date, Plan Sponsors must limit compensation for initial and renewal enrollments in their MA/Part D Plans to amounts that are equal to or less than the fair market value (FMV) amount adopted by CMS for initial enrollments, or 50 percent thereof for renewals through the sixth renewal year.  To simplify the requirements, CMS would retain the existing FMV ceiling on compensation for initial enrollments, but would reduce the renewal compensation ceiling to up to 35 percent of the FMV, if renewal compensation is paid by the Plan Sponsor.  CMS also removed the six-year compensation cycle requirement, such that agents and brokers may be paid for enrollee renewals indefinitely.

Under the Proposed Rule, the referral fee parameters previously articulated by CMS in sub-regulatory guidance—in particular, the requirement that such payment be included in the determination of compensation paid in connection with a beneficiary's enrollment and subject to the regulatory limits—would be incorporated into regulation.

Next Steps

Plan Sponsors that rely on independent agents and brokers for marketing and enrollment activities may consider evaluating their programs, contracts and other operations that would be affected if CMS finalizes these proposals, in order to come into compliance prior to the launch of CY 2015 marketing on October 1, 2014.

Standardized Compliance Program Training for FDRs Does Not Relieve Administrative Burdens

Plan Sponsors are required to maintain "effective compliance programs," which must include mandatory training and education on the Plan Sponsors' compliance programs for first-tier, downstream and related entities (FDRs).  Plan Sponsors have typically implemented this requirement through Plan Sponsor-specific compliance training obligations, which CMS has acknowledged on several occasions poses challenges for health care providers and other entities that contract with multiple Plan Sponsors and therefore must complete multiple compliance training programs.  Accordingly, CMS proposes to amend the regulatory requirement, obligating the Plan Sponsor to require all FDRs to take CMS's standardized compliance training and accept the certificate of completion of such training.  Under the Proposed Rule, this CMS training would no longer be an option for satisfying the training requirement but in fact would be the only way.  Plan Sponsors would be prohibited from providing Plan Sponsor-specific training in fulfillment of this requirement.

Although the standardized CMS training module may reduce the training burden for providers and other FDRs, Plan Sponsors may not see the same benefits.  Plan Sponsors would, for example, continue to be required to maintain "effective" compliance programs, and a general CMS compliance training may undermine the effectiveness of a compliance program that reflects a Plan Sponsor's specific operations, standards and protocols.  Moreover, CMS proposes to retain the obligation for Plan Sponsors to track FDRs' completion of this CMS training, to maintain supporting documentation in the event of a CMS audit, and to negotiate a contractual provision in connection with the same.  FDRs similarly would remain obligated to provide multiple Plan Sponsors with documentation of CMS compliance training completion.

Further, this proposed change arguably transforms the compliance training component into more of a direct Medicare Program requirement imposed by CMS, rather than an MA or Part D Program requirement reflecting the unique characteristics of the Programs or the Plan Sponsors.  Although it would be reasonable for Plan Sponsors to administer a compliance training requirement (and collect documentation) for administrative service providers and other entities that are not participating providers in the Medicare Program and do not contract with CMS, it is less clear why Plan Sponsors—and not CMS or its Medicare Administrative Contractors—should administer a Medicare compliance training obligation, particularly since these providers also undergo CMS fraud and abuse training as part of their Original Medicare enrollment.

Also of interest is CMS's proposal to adopt a new definition for the MA Program for the term "parent organization," in connection with the agency's proposal to limit new enrollment in certain cost contracts.  CMS does not, however, reference in the Proposed Rule the fact that the term "parent organization" is used in other agency guidance, such as Chapters 9 and 21 of the Prescription Drug Benefit Manual and Medicare Managed Care Manual, respectively, nor reconcile this definition with the existing definition of "related entity."  This proposed definition and its lack of coordination with other terms and requirements potentially could create challenges for Plan Sponsors with multiple legal entities in their corporate enterprise.

Next Steps

Plan Sponsors, providers and other FDRs may consider submitting to CMS information and data describing the administrative burden associated with the current compliance training obligations and the revised approach, to help educate CMS on the burdens that would be eliminated—and those that would remain—under the proposal.  Tracking CMS's final action in this area will be important for updating compliance programs and FDR contracts.

More Changes, Including Business Continuity Obligations, for FDR Contracts?

CMS continues to tinker with FDR contract requirements, setting out in the Proposed Rule an amendment to the record retention and access provision that would provide the U.S. Department of Health & Human Services, the Comptroller General or their designees with the right to audit, evaluate, collect and inspect directly an FDR's records.  The Plan Sponsor would not be permitted to play an intermediary role in facilitating the request for and provision of records between the government and the Plan Sponsor's contractor, notwithstanding the fact that it is the Plan Sponsor's contract with CMS that serves as the basis for CMS seeking the FDR's records.  Rather, CMS indicates in the preamble (but not the regulatory text) that it would provide notice to the Plan Sponsor of any record request.

A separate proposal would impose new requirements for Plan Sponsors' business continuity plans, including obligations related to risk assessments, mitigation strategies, annual testing, training and documentation.  Among the requirements is an obligation for Plan Sponsors to restore "essential functions" within 24 hours after any of the functions fail or stop functioning as usual.  An MA Organization's and a Part D Plan Sponsor's respective "essential functions" are identified in the Proposed Rule, and include benefit authorization and claims adjudication, call centers, and organization/coverage determinations and appeals.  Plan Sponsors that delegate any of these functions likely will have to revisit their contracts, particularly the performance standards, to address any finalized requirements applicable to the FDR.  Coordination of the operational elements of Plan Sponsors' business recovery processes with that of their FDRs also may be an important consideration if CMS moves forward with this requirement.

Next Steps

If finalized, several proposals in the Proposed Rule may require FDRs' cooperation for implementation, and Plan Sponsors likely will not have the resources to modify all contracts immediately.  Identifying now the contracts that should be a high priority for review upon release of final regulations—such as those under negotiation or coming up for renewal, and key service arrangements—may help streamline the contracting process and apply resources effectively and efficiently.  To the extent their contracts do not already do so, Plan Sponsors may consider whether and how to modify FDR contracts to protect Plan Sponsors' ability to learn about any government audit of an FDR that relates to the Plan Sponsors' MA/Part D contracts with CMS, and to know what information is collected, now that Plan Sponsors may not contractually preserve their right to serve as the go-between.

Revised Participation Criteria for MA and Part D Programs

The Proposed Rule exemplifies CMS's continued trend of managing—indeed, limiting—the entities permitted to participate in the MA and Part D Programs under the banner of protecting Medicare beneficiaries.  The following are some examples:

  • CMS proposes to require that entities applying to become Part D Plan Sponsors (whether as an MA Organization offering a Medicare Advantage-Prescription Drug Plan or stand-alone Part D Plan) must have (or have an affiliate that has) at least one full benefit year of experience performing key Part D functions, or have contracted with an FDR that has such experience, within the two years prior to the application deadline.
  • CMS also proposes implementing an "essential operations test" as a new step in the Plan Sponsor application process for entities that are new to the Part D Program.  This test, performed post-application and post-bidding, would assess the ability of applicants to actually perform the required operational functions of a Part D Plan prior to the January 1 launch date of the benefit plan.
  • CMS also proposes to prohibit applications from entities that apply to become a stand-alone Part D Plan Sponsor but withdraw their applications and bids following release of the low-income subsidy benchmark (and prior to finalization of the contract with CMS).  This new requirement is intended to prevent gaming of the competitive bidding system.

Next Steps

These provisions would not be finalized in time for the CY 2015 applications process, but would apply to the CY 2016 application cycle, if finalized.  Organizations that are considering applying to participate in the MA and Part D Programs—alone or through a joint venture with another party—may need to evaluate their strategic plans and partners to accommodate new participation requirements.

Other Proposed Regulatory Changes

  • CMS has proposed regulations to codify its new authority, under Section 6408 of the Affordable Care Act, to impose sanctions on a Plan Sponsor that enrolls an individual or transfers an individual to a new Plan without prior consent (except in limited circumstances).  The statute and these proposed regulations also make it a contract violation for a Plan Sponsor to violate the Part C and D marketing requirements or to employ or contract with any individual or entity that engages in any of the conduct that gives CMS the right to impose intermediate sanctions (as set forth in Section 1857(g) of the Social Security Act). 
  • CMS proposes several modifications to the intermediate sanction and civil money penalty (CMP) provisions, including expanding the bases upon which CMS may impose CMPs.
  • CMS proposes to shorten to 45 days the advance notice it provides before terminating an MA or Part D Plan contract.
  • CMS proposes an administrative appeals process for appealing Part C and Part D Recovery Audit Contractor (RAC) overpayment determinations.  Under the proposal, Plan Sponsors would be permitted to appeal only a RAC's application of the prescribed payment methodology, and not the underlying payment methodology itself.  The proposed three-step appeals process, which involves a reconsideration phase, appeal to a hearing officer and discretionary review by the CMS Administrator, was modeled after the existing RADV audit dispute and appeals process.


The Proposed Rule continues CMS's trend over the past several years to enhance its ability to administer the MA and Part D Programs, as well as to expand and tighten the performance requirements for Program participants.  The increase in performance audits and proposal for self-auditing, as well as CMS's willingness to impose sanctions and CMPs on Plan Sponsors that do not meet the performance standards, ups the ante for Program participants.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

In association with
Related Video
Up-coming Events Search
Font Size:
Mondaq on Twitter
Register for Access and our Free Biweekly Alert for
This service is completely free. Access 250,000 archived articles from 100+ countries and get a personalised email twice a week covering developments (and yes, our lawyers like to think you’ve read our Disclaimer).
Email Address
Company Name
Confirm Password
Mondaq Topics -- Select your Interests
 Law Performance
 Law Practice
 Media & IT
 Real Estate
 Wealth Mgt
Asia Pacific
European Union
Latin America
Middle East
United States
Worldwide Updates
Mondaq Ltd requires you to register and provide information that personally identifies you, including what sort of information you are interested in, for three primary purposes:
  • To allow you to personalize the Mondaq websites you are visiting.
  • To enable features such as password reminder, newsletter alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our information providers who provide information free for your use.
  • Mondaq (and its affiliate sites) do not sell or provide your details to third parties other than information providers. The reason we provide our information providers with this information is so that they can measure the response their articles are receiving and provide you with information about their products and services.
    If you do not want us to provide your name and email address you may opt out by clicking here
    If you do not wish to receive any future announcements of products and services offered by Mondaq you may opt out by clicking here

    Terms & Conditions and Privacy Statement

    Mondaq.com (the Website) is owned and managed by Mondaq Ltd and as a user you are granted a non-exclusive, revocable license to access the Website under its terms and conditions of use. Your use of the Website constitutes your agreement to the following terms and conditions of use. Mondaq Ltd may terminate your use of the Website if you are in breach of these terms and conditions or if Mondaq Ltd decides to terminate your license of use for whatever reason.

    Use of www.mondaq.com

    You may use the Website but are required to register as a user if you wish to read the full text of the content and articles available (the Content). You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these terms & conditions or with the prior written consent of Mondaq Ltd. You may not use electronic or other means to extract details or information about Mondaq.com’s content, users or contributors in order to offer them any services or products which compete directly or indirectly with Mondaq Ltd’s services and products.


    Mondaq Ltd and/or its respective suppliers make no representations about the suitability of the information contained in the documents and related graphics published on this server for any purpose. All such documents and related graphics are provided "as is" without warranty of any kind. Mondaq Ltd and/or its respective suppliers hereby disclaim all warranties and conditions with regard to this information, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. In no event shall Mondaq Ltd and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use or performance of information available from this server.

    The documents and related graphics published on this server could include technical inaccuracies or typographical errors. Changes are periodically added to the information herein. Mondaq Ltd and/or its respective suppliers may make improvements and/or changes in the product(s) and/or the program(s) described herein at any time.


    Mondaq Ltd requires you to register and provide information that personally identifies you, including what sort of information you are interested in, for three primary purposes:

    • To allow you to personalize the Mondaq websites you are visiting.
    • To enable features such as password reminder, newsletter alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
    • To produce demographic feedback for our information providers who provide information free for your use.

    Mondaq (and its affiliate sites) do not sell or provide your details to third parties other than information providers. The reason we provide our information providers with this information is so that they can measure the response their articles are receiving and provide you with information about their products and services.

    Information Collection and Use

    We require site users to register with Mondaq (and its affiliate sites) to view the free information on the site. We also collect information from our users at several different points on the websites: this is so that we can customise the sites according to individual usage, provide 'session-aware' functionality, and ensure that content is acquired and developed appropriately. This gives us an overall picture of our user profiles, which in turn shows to our Editorial Contributors the type of person they are reaching by posting articles on Mondaq (and its affiliate sites) – meaning more free content for registered users.

    We are only able to provide the material on the Mondaq (and its affiliate sites) site free to site visitors because we can pass on information about the pages that users are viewing and the personal information users provide to us (e.g. email addresses) to reputable contributing firms such as law firms who author those pages. We do not sell or rent information to anyone else other than the authors of those pages, who may change from time to time. Should you wish us not to disclose your details to any of these parties, please tick the box above or tick the box marked "Opt out of Registration Information Disclosure" on the Your Profile page. We and our author organisations may only contact you via email or other means if you allow us to do so. Users can opt out of contact when they register on the site, or send an email to unsubscribe@mondaq.com with “no disclosure” in the subject heading

    Mondaq News Alerts

    In order to receive Mondaq News Alerts, users have to complete a separate registration form. This is a personalised service where users choose regions and topics of interest and we send it only to those users who have requested it. Users can stop receiving these Alerts by going to the Mondaq News Alerts page and deselecting all interest areas. In the same way users can amend their personal preferences to add or remove subject areas.


    A cookie is a small text file written to a user’s hard drive that contains an identifying user number. The cookies do not contain any personal information about users. We use the cookie so users do not have to log in every time they use the service and the cookie will automatically expire if you do not visit the Mondaq website (or its affiliate sites) for 12 months. We also use the cookie to personalise a user's experience of the site (for example to show information specific to a user's region). As the Mondaq sites are fully personalised and cookies are essential to its core technology the site will function unpredictably with browsers that do not support cookies - or where cookies are disabled (in these circumstances we advise you to attempt to locate the information you require elsewhere on the web). However if you are concerned about the presence of a Mondaq cookie on your machine you can also choose to expire the cookie immediately (remove it) by selecting the 'Log Off' menu option as the last thing you do when you use the site.

    Some of our business partners may use cookies on our site (for example, advertisers). However, we have no access to or control over these cookies and we are not aware of any at present that do so.

    Log Files

    We use IP addresses to analyse trends, administer the site, track movement, and gather broad demographic information for aggregate use. IP addresses are not linked to personally identifiable information.


    This web site contains links to other sites. Please be aware that Mondaq (or its affiliate sites) are not responsible for the privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of these third party sites. This privacy statement applies solely to information collected by this Web site.

    Surveys & Contests

    From time-to-time our site requests information from users via surveys or contests. Participation in these surveys or contests is completely voluntary and the user therefore has a choice whether or not to disclose any information requested. Information requested may include contact information (such as name and delivery address), and demographic information (such as postcode, age level). Contact information will be used to notify the winners and award prizes. Survey information will be used for purposes of monitoring or improving the functionality of the site.


    If a user elects to use our referral service for informing a friend about our site, we ask them for the friend’s name and email address. Mondaq stores this information and may contact the friend to invite them to register with Mondaq, but they will not be contacted more than once. The friend may contact Mondaq to request the removal of this information from our database.


    From time to time Mondaq may send you emails promoting Mondaq services including new services. You may opt out of receiving such emails by clicking below.

    *** If you do not wish to receive any future announcements of services offered by Mondaq you may opt out by clicking here .


    This website takes every reasonable precaution to protect our users’ information. When users submit sensitive information via the website, your information is protected using firewalls and other security technology. If you have any questions about the security at our website, you can send an email to webmaster@mondaq.com.

    Correcting/Updating Personal Information

    If a user’s personally identifiable information changes (such as postcode), or if a user no longer desires our service, we will endeavour to provide a way to correct, update or remove that user’s personal data provided to us. This can usually be done at the “Your Profile” page or by sending an email to EditorialAdvisor@mondaq.com.

    Notification of Changes

    If we decide to change our Terms & Conditions or Privacy Policy, we will post those changes on our site so our users are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If at any point we decide to use personally identifiable information in a manner different from that stated at the time it was collected, we will notify users by way of an email. Users will have a choice as to whether or not we use their information in this different manner. We will use information in accordance with the privacy policy under which the information was collected.

    How to contact Mondaq

    You can contact us with comments or queries at enquiries@mondaq.com.

    If for some reason you believe Mondaq Ltd. has not adhered to these principles, please notify us by e-mail at problems@mondaq.com and we will use commercially reasonable efforts to determine and correct the problem promptly.

    By clicking Register you state you have read and agree to our Terms and Conditions