OIG & SAM Exclusion Monitoring: Continuous, Not Annual

OIG and SAM exclusion monitoring means checking every provider, and often every employee and contractor, against the federal exclusion lists on a schedule, not just once at hire. A provider who was clear on their start date can be added to a list later, and if your organization keeps billing federal programs for their services, the exposure keeps growing until someone notices. This guide explains what the lists are, why monthly screening has become the norm, where manual checks break down, and what to look for in exclusion monitoring software.

What OIG and SAM exclusions are

Two federal lists come up in almost every healthcare compliance program:

• The List of Excluded Individuals/Entities (LEIE), maintained by the HHS Office of Inspector General. It lists people and organizations excluded from Medicare, Medicaid and other federal health care programs, for reasons such as program-related fraud, patient abuse or a license revocation. OIG updates it monthly.
• SAM.gov exclusions, maintained by the General Services Administration. It records parties excluded or debarred by many federal agencies, not only HHS, and it is updated as agencies report actions.

Many state Medicaid programs also publish their own exclusion or termination lists. Which state lists matter to you depends on where your providers practice and which programs you bill.

Why an annual check is not enough

Federal health programs generally will not pay for items or services furnished, ordered or prescribed by an excluded person. Employing or contracting with an excluded person to provide those services can lead to civil monetary penalties and repayment of what was billed. Because the LEIE changes every month, a once-a-year check can leave up to eleven months in which a newly excluded provider is still seeing patients and generating claims.

That is why most compliance programs screen before hiring or contracting and then every month. Federal rules already require state Medicaid agencies to check the LEIE and SAM when a provider enrolls and at least monthly after that, and many health systems, groups and payers apply the same rhythm to their own staff.

Where manual screening breaks down

Searching the OIG and SAM websites by hand works for a handful of people. It gets harder as the roster grows:

• Someone has to run every name, every month, on every list, and remember to add new hires
• Common names return many results, and LEIE entries often have no NPI, so each one needs a closer look
• Screenshots and spreadsheets are a weak audit trail when you need to show what was checked and when
• When a list is down or a search fails, it is easy to record the provider as clear when they were never screened
• Results sit apart from the rest of the provider's file, so licensing, DEA and enrollment teams do not see them

How to handle a possible match

Most hits on a name search are false positives. A sound review process looks like this:

• Compare the list entry with the provider's full legal name, any former names, date of birth, NPI, license number and location
• For the LEIE, use OIG's online search verification feature when you need to confirm identity
• Record the decision (false positive or confirmed), who made it and the evidence, so it holds up in an audit
• If a match is confirmed, bring in your compliance officer and counsel right away and stop billing federal programs for that person's services until you have advice
• Remember that exclusion periods do not end on their own: an excluded person stays on the list until OIG grants reinstatement

What to look for in exclusion monitoring software

• Coverage of the LEIE and SAM.gov, plus the other lists your program needs, such as OFAC, FDA debarment, Medicare opt-out and the state Medicaid lists that apply to you
• Automatic monthly rescreening of every active provider, and on-demand screening for new hires
• Matching on more than a name, such as NPI and date of birth, with scored possible matches
• A review queue with side-by-side evidence, a recorded decision and reminders until someone decides
• Honest gaps: if a list could not be checked, the record should say not screened, never clear
• Results on the same provider record as licenses, DEA, CAQH and payer enrollments, so one place answers whether a provider is clear to work and bill

How Rivon handles exclusion monitoring

Rivon screens every provider against the OIG LEIE and SAM.gov exclusions, plus OFAC SDN, FDA debarment, Medicare opt-out and the New York Medicaid exclusion list. Lists are refreshed monthly, every active provider is rescreened monthly, and you can screen anyone on demand. Possible matches are scored on NPI, name and date of birth, then sent to a review queue with in-app and email alerts. A reviewer marks each one a false positive, confirmed or resolved, and the decision is kept for audit. Rivon flags; your compliance team decides.

Exclusion monitoring is included on every Rivon plan, including the free plan, and it sits next to license and DEA expiration tracking, primary source verification and payer enrollment for the same provider.