When Your Compliance Plan Hits a Sour Note
David M. Glaser, Esq.
January 15, 2026
Monitor Mondays listeners know that I end each segment with a song. Normally the topic drives the song, but to start the new year, the
I am indebted to Ronald Hirsch, M.D., who called my attention to an article that recommends that when an organization’s medical records are audited, the entity should ask its counsel to engage another auditor to conduct a parallel review.
The article asserts that your auditor’s findings will then be protected by the attorney-client privilege. While there is a great deal of truth to the article, it misses an important nuance. First, let’s address some key semantics.
When a lawyer engages a consultant to assist the lawyer, it isn’t the attorney-client privilege that protects the information, it is the attorney work- product doctrine. The distinction is important because the attorney work-product protection is narrower than attorney-client privilege. With very limited exceptions, when you consult with an attorney, that consultation is protected. (The most common exception is that failing to protect the confidentiality of the advice waives the attorney-client privilege.
For example, asking a lawyer a question in front of others who do not “need to know” the information will destroy the protection, as will sharing the attorney’s advice with others. The work-product privilege is much narrower and only applies to work done in anticipation of litigation. When you are being audited, it is reasonable to conclude that there is an anticipation of litigation, making it likely that the work-product privilege will apply.
Understanding the distinction between attorney-client and work-product privileges is important, however, because when you conduct your own routine reviews that aren’t in anticipation of litigation, there’s a high likelihood the review doesn’t have any legal protection.
The real disagreement I have with the author of the article, however, is that I recommend waiting for the results of an outside audit before having your expert begin work. If the outside consultant concludes that any charts have been overpaid, the fact that the review is protected by a work-product privilege probably does not prevent application of the 60-day rule. If the outside auditor takes more than 60 days to complete the work, you may find yourself in a position where you’ve voluntarily refunded money based on your hired consultant’s conclusion only to have whoever is auditing you conclude the claim was properly paid.
The bottom line is the article is right that IF you engage an outside consultant to review charts during an audit, it is best to engage them through counsel. But instead of doing that review while you wait for the outside auditor, I would recommend engaging the outside consultant and having them ready to start work the moment you get the review results and not before you get them.
Monitor Mondays listeners know that I end each segment with a song. Normally the topic drives the song, but to start the new year, the
Welcome back everybody after the holidays. As a CPA, I have always been uncomfortable when the word “Audit” is used to describe activity since the term
Please log in to your account to comment on this article.
Accurately determining the principal diagnosis is critical for compliant billing, appropriate reimbursement, and valid quality reporting — yet it remains one of the most subjective and error-prone areas in inpatient coding. In this expert-led session, Cheryl Ericson, RN, MS, CCDS, CDIP, demystifies the complexities of principal diagnosis assignment, bridging the gap between coding rules and clinical reality. Learn how to strengthen your organization’s coding accuracy, reduce denials, and ensure your documentation supports true medical necessity.
Denials continue to delay reimbursement, increase administrative burden, and threaten financial stability across healthcare organizations. This essential webcast tackles the root causes—rising payer scrutiny, fragmented workflows, inconsistent documentation, and underused analytics—and offers proven, data-driven strategies to prevent and overturn denials. Attendees will gain practical tools to strengthen documentation and coding accuracy, engage clinicians effectively, and leverage predictive analytics and AI to identify risks before they impact revenue. Through real-world case examples and actionable guidance, this session empowers coding, CDI, and revenue cycle professionals to shift from reactive appeals to proactive denial prevention and revenue protection.
Sepsis remains one of the most frequently denied and contested diagnoses, creating costly revenue loss and compliance risks. In this webcast, Angela Comfort, DBA, MBA, RHIA, CDIP, CCS, CCS-P, provides practical, real-world strategies to align documentation with coding guidelines, reconcile Sepsis-2 and Sepsis-3 definitions, and apply compliant queries. You’ll learn how to identify and address documentation gaps, strengthen provider engagement, and defend diagnoses against payer scrutiny—equipping you to protect reimbursement, improve SOI/ROM capture, and reduce audit vulnerability in this high-risk area.
Only ICD10monitor delivers what you need: updates on must-know changes associated with the FY26 IPPS, including new ICD-10-CM/PCS codes, CCs/MCCs, and MS-DRGs, plus insights, analysis and answers to your questions from two of the country’s most respected subject matter experts.
Stay ahead of the 2026-2027 audit surge with “Top 10 Audit Targets for 2026-2027 for Hospitals & Physicians: Protect Your Revenue,” a high-impact webcast led by Michael Calahan, PA, MBA. This concise session gives hospitals and physicians clear insight into the most likely federal audit targets, such as E/M services, split/shared and critical care, observation and admissions, device credits, and Two-Midnight Rule changes, and shows how to tighten documentation, coding, and internal processes to reduce denials, recoupments, and penalties. Attendees walk away with practical best practices to protect revenue, strengthen compliance, and better prepare their teams for inevitable audits.
As AI reshapes healthcare compliance, the risk of biased outputs and opaque decision-making grows. This webcast, led by Frank Cohen, delivers a practical Four-Pillar Governance Framework—Transparency, Accountability, Fairness, and Explainability—to help you govern AI-driven claim auditing with confidence. Learn how to identify and mitigate bias, implement robust human oversight, and document defensible AI review processes that regulators and auditors will accept. Discover concrete remedies, from rotation protocols to uncertainty scoring, and actionable steps to evaluate vendors before contracts are signed. In a regulatory landscape that moves faster than ever, gain the tools to stay compliant, defend your processes, and reduce liability while maintaining operational effectiveness.
Get clear, practical answers to Medicare’s most confusing regulations. Join Dr. Ronald Hirsch as he breaks down real-world compliance challenges and shares guidance your team can apply right away.
Federal auditors are zeroing in on Inpatient Rehabilitation Facility (IRF) and hospital rehab unit services, with OIG and CERT audits leading to millions in penalties—often due to documentation and administrative errors, not quality of care. Join compliance expert Michael Calahan, PA, MBA, to learn the five clinical “pillars” of IRF-PPS admissions, key documentation requirements, and real-life case lessons to help protect your revenue.
Happy National Doctor’s Day! Learn how to get a complimentary webcast on ‘Decoding Social Admissions’ as a token of our heartfelt appreciation! Click here to learn more →
CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 1 with code CYBER25
CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24
