Why Managing Compliance Risk Is Like Eating Spinach 

The overwhelming pace and complexity of healthcare regulatory change have become so routine that the constant grind now poses a distinct compliance risk to the organization it’s intended to protect. 

Yet, many hospitals still treat regulatory change as a routine monitoring activity, failing to adopt the systems thinking and discipline necessary to truly mitigate the risk.  

This article by a top healthcare compliance expert explains what it takes to make that transformation. (She also explains what spinach has in common with compliance risk assessment.) 

Beyond Spinach: A Systems Thinking View of Regulatory Change  

’Tis the season! Compliance risk assessment season, that is.  

Many healthcare organizations are in the middle of this annual “eat your spinach” preventative exercise, with compliance folks wandering the halls asking executives what keeps them up at night.  

This year, a CFO for one of my hospital clients raised a significant risk that is so ever-present it’s often treated as a constant rather than a risk. The pace and complexity of regulatory change in healthcare are so familiar that they’re easy to overlook as a distinct risk.  

Regulatory Change Complexity as Permanent Risk  

For those who do recognize and record risk, this one almost certainly hits near the top of the scoring index. Regulatory change in healthcare isn’t an occasional disruption. It’s a permanent condition of the operating environment.  

Despite recognizing it as a top risk year after year, many organizations still manage regulatory change as a monitoring activity rather than applying systems thinking. Updates are tracked. Summaries are circulated.  

But when change actually occurs, the organization is left to work out (often manually and inconsistently) what the change means and what to do next.  

Systems Thinking Brings Structure to Reducing Compliance Risk 

From a systems-thinking perspective, this is a structural failure, not an execution problem.  

A persistent, high-scoring risk should not rely on individual effort, institutional memory, or ad hoc judgment calls to be managed effectively. It should be supported by infrastructure that reliably converts inputs into outputs.  

In this case, the input is regulatory change. The needed outputs are: 

• Applicability analysis 
• Operational decisions 
• Documented rationale 
• Accountable follow-through 

Failing to Operationalize Compliance Leaves You Open to Risk 

That’s where many regulatory compliance programs feel the strain. The risk isn’t failing to notice regulatory change. The risk is failing to operationalize it in a consistent, defensible way, especially across multiple departments, leaders, and decision points.  

From Effort-Based Compliance to System-Based Compliance 

Coming out of risk assessment season, this creates an opportunity to ask a more fundamental question: Do we actually have a system for managing regulatory change, or do we just know it’s a problem?  

Seen this way, the value isn’t the technology itself. It’s the shift from effort-based compliance to system-based compliance. And with systems and technology, you can do all this in a way that is repeatable and reviewable.  

In short, “eating your spinach” and doing annual assessments is good discipline. Relying on systems is how you stay healthy the rest of the time.  

About the Author 

As principal for AlloImpact LLC, Lisa Estrada provides Strategic Interim Compliance Leadership to hospitals, health systems, health industry vendors, and other healthcare organizations when a leadership vacancy or transition creates an inflection point—turning the moment into an opportunity to pivot, strengthen, and systematize.  

Whether bridging a CCO gap, stabilizing during mergers or growth, responding to heightened regulatory scrutiny, or modernizing a program that’s outgrown its practices, she helps teams build frameworks and cultures that endure. 

Lisa’s work centers on building systems that make compliance durable. By designing and helping teams implement repeatable, resilient processes that scale and stand under scrutiny, Lisa helps organizations move beyond heroics, so compliance keeps working even when key people change. 

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

The post From Manual to Scalable: How to Manage Healthcare Compliance Risk  first appeared on YouCompli.

A good healthcare compliance program is all about reducing risk, both in patient care and in financial reimbursement. This detailed blog by compliance expert, CJ Wolf, will bring you up to date on the compliance risks associated with certain anesthesia services.   

The OIG just published audit results and report (July 31, 2025) outlining the issues in this area. This article is a summary of that report, along with what it might mean for compliance professionals.  

The implications can be huge. For example, OIG concluded that Medicare paid $45.7 million for anesthesia services provided during the SPM procedure sessions that were at risk for noncompliance with Medicare requirements.  

What to Know About Anesthesia, Compliance and the Latest OIG Audit 

The U.S. Department of Health and Human Services Office of Inspector General (OIG) recently released a nationwide audit report highlighting potential improper payments for anesthesia services provided during select spinal injection procedures  

It is only under rare circumstances that Medicare Part B covers the cost of anesthesia during certain spinal pain management (SPM) procedures. In fact, a prior OIG audit found that 27% of billed anesthesia services during SPM procedures did not have supporting medical documentation that would justify the use of anesthesia.  Given these circumstances, the OIG decided to perform the more recent nationwide audit and publish its findings. 

Goal of OIG Audit Regarding Medicare Part B Payments 

The OIG’s goal in the audit was to identify Medicare Part B payments to physicians for anesthesia administered during selected SPM procedures that were at risk for noncompliance with Medicare requirements. 

The specific SPM procedures included in the audit were: 

• Facet-joint injections 
• Facet-joint denervation (aka radiofrequency ablation) 
• Epidural steroid injections 
• Sacroiliac joint injections 

Medicare Coverage Only in Rare Circumstances 

As mentioned, it is only in rare circumstances that Medicare covers the cost of certain anesthesia services provided during SPM procedures. The types of anesthesia services that could potentially be covered under these rare circumstances include: 

• Moderate sedation: Administration of a drug-induced depression of consciousness during which a patient responds purposefully to verbal commands, either alone or accompanied by light tactile stimulation. No interventions are required to maintain the enrollee’s airway, and spontaneous ventilation is adequate. 

• General anesthesia: Administration of a drug-induced loss of consciousness during which a patient is not arousable, even by painful stimulation. The ability to independently maintain breathing is often impaired. The patient often requires assistance in maintaining an open airway that allows for adequate airflow and proper oxygenation of the lungs. Positive pressure ventilation may be required because of depressed spontaneous ventilation or drug-induced depression of neuromuscular function. 

• Monitored anesthesia care: This is a specific anesthesia service for a diagnostic or therapeutic procedure. Indications for monitored anesthesia care include the need for deeper levels of analgesia (i.e., the inability to feel pain) and sedation than can be provided by moderate sedation. Monitored anesthesia care falls between moderate sedation and general anesthesia. 

MAC LCDs Published for Select SPM Procedures 

Medicare Part B claims are adjudicated and paid by Medicare Administrative Contractors (MAC).  MACs are charged with ensuring proper payment of claims.  They are to safeguard Medicare funds against improper medical coding and billing, fraud and abuse. One way they do this is by publishing local coverage determinations (LCDs) which outline when certain services are, or are not, covered. 

The MAC LCDs for the selected SPM procedures explain that the use of moderate sedation, general anesthesia, and monitored anesthesia care is usually unnecessary or rarely indicated for these procedures. However, individual consideration may be given in rare cases when documentation clearly established the need for such anesthesia. 

Audit to Confirm Compliance with Limited Coverage Rules 

The OIG wanted to confirm compliance with these limited coverage rules for anesthesia services billed along with the SPM procedures. To do so, they identified an audit period consisting of claims for SPM procedure dates of service between May 2, 2021, and August 31, 2023, during which Medicare paid for 3.9 million sessions of SPM procedures.   

For this audit period, physicians billed for anesthesia services nearly 18% of the time. The MACs paid $46.2 million for the anesthesia services or 99.5% of the time that anesthesia was billed during the same SPM procedure session. 

Then, the OIG identified and selected a nonstatistical sample of 28 sessions where both anesthesia and the selected SPM procedures were billed. To verify compliance, the OIG obtained the supporting medical documentation for these sessions and had an independent medical reviewer determine whether the anesthesia was medically necessary and met the rare circumstances when Medicare would cover the anesthesia service.  

Medical Records Fail to Document Necessity 

For 20 of the 28 sampled sessions, the medical reviewer determined the supporting medical records did not document a rare circumstance in which administering anesthesia was reasonable or necessary for the specific SPM procedure.   

One such example included a session where a physician administered moderate sedation to a patient during an epidural steroid injection session. The medical records provided by the physician stated that this type of anesthesia was administered because of the patient’s anxiety, which is not a medically necessary indication meeting coverage criteria according to the LCD. The medical records also did not have evidence of failed oral sedation, which could have necessitated moderate sedation. 

The OIG stated they could not provide an overall estimate of improper payments for the entire audit period because the sample they used was a nonstatistical sample. However, they concluded that Medicare paid $45.7 million for anesthesia services provided during the SPM procedure sessions that were at risk for noncompliance with Medicare requirements. 

OIG Recommendations Include Provider Education 

One of the more significant recommendations the OIG made for CMS and the MACs is to  

• Educate providers on the coverage criteria 
• Review claims for improper billing of anesthesia services 

For providers, this means your MAC may begin auditing such claims. 

Compliance Tip for Anesthesia Billing 

Compliance professionals should assess how often their organizations bill anesthesia services at the same time as the SPM procedures and review the medical records to determine if the sessions meet the rare circumstances found in the LCD requirements for coverage of both services. 

More Resources about Compliance Risks 

Continue learning about the complexities of Medicare reimbursement and compliance in these other piece by CJ Wolf. 

Compliance Risks Associated with Outlier Payments 

In some circumstances, payers like Medicare, for example, will reimburse additional amounts beyond the prospective payment rate. These additional payments are called “outlier payments.” Outlier payments provide additional reimbursement for cases of exceptionally costly treatments.   

How to Avoid Compliance Risk in Peripheral Vascular Reimbursement   

Peripheral vascular disease (PVD) reimbursement is fraught with potential compliance pitfalls. This expert-written blog addresses the pressing concern of compliance risks in PVD reimbursement. It provides insights into regulatory trends, recent investigations and best practices. It provides insights into regulatory trends, recent investigations and best practices. 

CJ Wolf, MD, M.Ed. is a healthcare compliance professional with over 22 years of experience in healthcare economics, revenue cycle, coding, billing, and healthcare compliance. He has worked for Intermountain Healthcare, the University of Texas MD Anderson Cancer Center, the University of Texas System, an international medical device company and a healthcare compliance software start up. Currently, Dr. Wolf teaches and provides private healthcare compliance and coding consulting services as well as training.   

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

The post Know the Compliance Risk for Certain Anesthesia Services  first appeared on YouCompli.

In this blog, experts offer the real scoop on audit readiness in healthcare. Learn the unfiltered truth about compliance audits and what audit etiquette means. Get essential tips on preparing for audits, the role of healthcare compliance auditors, and what to do (and what not do) during an audit.  

What Does Audit Readiness Mean? 

Let’s say a regulator shows up at your door tomorrow. What’s the first thing your team scrambles to find? Is it evidence of task completion? Maybe a list of applicable regs? Updated policies? How about proof of communication to stakeholders? We saw a post this week asking for a current audit preparedness playbook because so many organizations think they’re ready, until they aren’t. 

Raw Truth about Compliance Audits 

Here’s the raw, unfiltered truth; no organization is ever ready for an external auditor or inspector. Ever. If you were, no one would panic when the FDA shows up at the door unannounced, or the state shows up in your lobby. “The state showed up the other day, and I knew why they were coming so I wasn’t unprepared.”  

The truth is you do your best, and you also expect the worst because they’re an auditor or inspector. Duh. It’s what they do.  

It’s like when you hear a funny rattle in your car. You take it to the mechanic. You know he’s gonna find SOMETHING. That’s his job. If you didn’t hear the rattle, you wouldn’t have taken it to him. You’re just hoping it is a minor repair rather than a total overhaul. Same with your audit, your auditor, and the rattle in your compliance practices. 

What to Know About the Healthcare Compliance Auditor 

Auditing is a formal, independent way to investigate regulatory compliance of a system or process within an organization. In accordance with regulations or industry best practices, an auditor assesses the adherence, adequacy and absence of certain processes.  

What a Healthcare Compliance Auditor Does 

• Identifies errors, omissions and irregularities.  
• Investigates the intent of possible wrongdoings. 
• Provides information regarding auditing procedures.  
• Submits reports to investigating authorities. 

Okay, A Compliance Audit Is Scheduled – What to Do? 

Once you know an audit is coming, use these five steps to prepare your organization. 

1. Make sure you can have as many of your team members available for the audit as possible, in case the auditor wants to schedule interviews with them.  
2. Provide a few date options for the auditor to choose from. A regulatory body like CAP, CLIA or FDA does not have to give warning of an audit and can arrive unannounced, but most audits are not unannounced. You have time to prep. Use it.  
3. Ask for an audit agenda as soon as you can. Review it.  
4. Alert the team that an audit will occur. This allows time to prepare any project-specific documents that may not be complete.  
5. About a week out from the audit, do a facility walkthrough to make sure there is nothing out of place. Do it two days out and then the day before. Yes, this much. You have people in your office. They move things.  

Once you have these steps under control, preparation becomes a case of do’s and don’ts. In other words, audit etiquette. 

What Is Audit Etiquette? Best Practices for Compliance Behavior 

Audit etiquette covers all the best practices required to facilitate smooth external audits. These vary slightly based on the health system’s existing compliance processes and experience facilitating them.  

In most cases though, following these techniques for what to do and what to avoid will drive positive, less stressful outcomes.  

What to Do in a Compliance Audit 

• Do listen to an auditor’s question and think before responding.  
• Do answer only the question that is asked. Stop talking.  
• Do ask for clarification if you don’t understand the question.  
• Do answer only those questions relative to your job.  
• Do be honest and pleasant. 
• Do treat the auditor with respect and courtesy at all times.  
• Do dress in business casual attire. 
• Do prepare to talk to the auditor and anticipate questions. 
• Do have quality obtain copies of taped conversations. 
• Do provide well-ordered, clear documents. 
• Do understand your policies and procedures. 
• Do keep computers locked when away. 
• Do close security-controlled doors. 
• Do keep paperwork organized and out of sight when possible. 
• Do escort the auditor at all times while on the premises. 

What Not to Do in a Compliance Audit 

Don’t guess. Say you don’t know or that you need to consult an SOP or defer to someone who is more suitable to answer the question. If you want to consult an SOP, describe the procedure in general terms with the auditor and then walk them through the details. Just saying “I have to consult my SOP” gives the impression that you aren’t trained. 

Here are other things NOT to do in an audit:  

• Don’t try to answer for someone else. 
• Don’t answer for another department or specialty. 
• Don’t offer additional information. Again, stop talking.  
• Don’t elaborate – answer only what is asked. 
• Don’t use hedge words (examples: I think, usually, normally). 
• Don’t guess when asked a question. 
• Don’t sign anything without legal approval.  
• Don’t argue with the auditor or inspection. Clarify anything the auditor misunderstood.  
• Don’t be rude or disrespectful to the auditor. 
• Don’t huddle. 
• Don’t panic. 
• Don’t lie. 

Practice Compliance Audit Etiquette with Confidence 

Regulatory bodies will give a report prior to leaving the audit. Ensure you engage with the necessary teams to give sufficient responses and have a plan for any noted observations. The observations and responses in a report will generally be the first items looked at in the next audit. Make sure you stay on top of these action plans and complete the items you have committed to. 

Also remember that auditors may be experts or novices based on the type and scope of the audit being performed. Do not assume you are the smartest person in the room when communicating with an auditor. Understand that the inherent authority of the auditor is dictated by the interested party they are advising. Their ability to influence a decision (that may have a significant impact on your organization) is the foundation of a desired outcome for you. That’s one reason why we recommend practicing good audit etiquette. 

More Resources about Compliance and Audit Readiness 

• Three Strategies to Align Compliance with Revenue Cycle 
• Audit Expectations and Challenges 
• Healthcare Audit? Stay Ready. Don’t Get Ready. 
• How to Use TPE Plans for Compliance Auditing and Monitoring 

John R. Nocero, Ph.D., and Andrea L. Bordonaro, MAT, blog on LinkedIn as “The Q-Kids,” discussing everything related to clinical research education, inspiration, and professional connection. 

Andrea has taught first grade in Willoughby, Ohio for 27 years in the same classroom that she attended school as a child. She earned a Bachelor of Science in elementary education with a minor in language arts from John Carroll University and a Master’s Degree in the Art of Teaching and Education from Marygrove College. 

John builds and fixes quality departments, while currently thriving as the Administrator & Director of Quality, Risk Management and Compliance at River Vista, a behavioral hospital in Columbus, Ohio.

---

The Q-Kids – John R Nocero and Andrea L Bordonaro – are experts at everything quality, regulatory, education training and compliance and love sharing their knowledge on YouCompli.

Follow them on LinkedIn – for more quality content or send them a message – they’d love to hear from you.

---

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

The post Audit Readiness? How about Audit Etiquette?  first appeared on YouCompli.

A conflict of interest (COI) in healthcare occurs when a person or organization involved in medical decision-making, such as a doctor, researcher or healthcare administrator, has a secondary interest (financial, professional or personal) that could compromise or influence their objectivity and clinical judgment.  

This secondary interest has the potential to affect decisions about diagnosis, treatment, or research in a way that’s not aligned with the best interests of the patient or public health.  

Key Components of a Conflict of Interest 

Key elements of a conflict of interest include: 

• Financial ties, such as relationships with pharmaceutical companies or medical device manufacturers 
• Personal or professional relationships that can bias medical decision making 
• Institutional interests that influence financial or strategic decisions 

Why COI Must Be Addressed 

The identification and mitigation of COI in healthcare is critically important because they directly affect the quality of patient care, the integrity of medical research, and the overall trust in healthcare systems.  

Here’s why it’s essential to avoid conflicts of interest: 

1. Protect Patient Health and Safety 

When a healthcare provider has financial or personal incentives that conflict with the patient’s best interests, it could lead to recommendations for unnecessary treatments or suboptimal care. This can directly harm patients, either through unnecessary side effects, prolonged treatments, or missed opportunities for better outcomes.   

Patients trust healthcare providers to make decisions based on their health needs, not on external incentives. If a physician is influenced by financial or personal gain, it undermines this trust and can result in patient harm. 

2. Ensure Clinical Objectivity and Best Practices with Evidence-Based Decisions 

In healthcare, clinical decisions should be grounded in the best available scientific evidence. COI can distort clinical judgment, leading to decisions based on profit motives or personal interests, rather than sound evidence or best practices. 

When decisions are made objectively, based on the best evidence and clinical standards, it ensures optimal outcomes for patients and trust in the system. 

3. Reducing Healthcare Costs by Avoiding Unnecessary Procedures 

COI can lead to overutilization of tests, procedures and treatments that are not medically necessary, inflating healthcare costs for individuals and insurance systems. Unnecessary treatments contribute to the rising cost of healthcare and can create financial burdens on patients, insurers and the healthcare system as a whole.  

Mitigating COI can lower costs by ensuring that treatments are based on necessity and effectiveness, not financial incentives. 

4. Preventing Fraud and Abuse in Healthcare Through Ethical Integrity 

COI can open the door to fraudulent practices, such as billing for unnecessary services, overprescribing medications, or manipulating patient data for personal gain.  

Addressing COIs protects the integrity of the healthcare system, ensuring that resources are used appropriately and that the system is not exploited for financial gain. 

Impact of Conflicts of Interest on Healthcare Systems 

Role of Compliance Officer in COI Management 

The compliance officer helps ensure transparency, ethical decision-making, and accountability, thereby protecting patients and maintaining system integrity. The compliance officer’s role in mitigating COI risk involves: 

Monitoring: Ensuring healthcare professionals and organizations disclose any potential COI, particularly financial or personal interests, that could influence decisions. 

Policy Enforcement: Implementing and enforcing clear COI policies and procedures, including guidelines for recusal or divestment when conflicts arise. 

Education and Training: Providing ongoing education to staff about identifying and managing COI to maintain ethical standards.  

Auditing and Reporting: Regularly auditing practices for compliance with COI regulations and reporting any violations to ensure corrective actions. 

An Unfortunate Example of a Deliberate COI 

In 2015, Dr. Farid Fata was sentenced to 45 years in a federal prison by U.S. District Judge Paul Borman. Dr. Fata, who had built an empire of upscale cancer clinics, intentionally misdiagnosed patients and illegally billed Medicare for the treatment.  

He grossly over-treated, under-treated, and misdiagnosed hundreds of patients by telling them they had cancer when they did not. He administered too much or improper treatment to others who did have cancer and continued to give chemotherapy to terminal patients who no longer needed it.  

Over $34M in Billings from Fraudulent Treatments 

About 550 patients have been identified as victims, with 34.7 million in billings to patients and insurance companies, and 17.6 million paid for work Dr. Fata admitted was unnecessary. Prosecutors say Dr. Fata was notorious for treating all his patients personally and keeping other medical professionals away.

The U.S. Attorney’s office said Dr. Fata, “is the most egregious fraudster in the history of the country, measured not only by the millions of dollars he stole but by the harm he inflicted on his victims.”   

This case is one of the most extreme, but it highlights a powerful conflict of interest where financial incentives result in harmful over-treatment of patients. Financial pressure or incentives, whether directly or indirectly tied to volume of procedures, can lead some physicians to recommend unnecessary treatments. These actions exploit the trust of patients, who rely on the expertise of their doctors for decisions that can affect their health, safety, and financial well-being.¹

Conflicts Embedded in Medical Guidelines and Standards 

A unique and mind-blowing aspect of COI in healthcare that few people realize is how deeply conflicts can be embedded in medical guidelines and “evidence-based” standards themselves, shaping the very definition of disease and thresholds for treatment in ways that drive profit more than health. 

When a physician prescribes a statin or a glucose-lowering drug, it feels like a purely clinical decision. But that decision is based on guidelines often crafted by panels with financial ties to drug manufacturers. Even physicians who believe they’re making objective decisions may be following protocols shaped behind the scenes by corporate influence. 

Medical guidelines—the foundation of diagnosis and treatment—are often written by experts who have financial ties to pharmaceutical or device companies whose products benefit from more liberal definitions of disease.   

The assumption is that practitioners and patients need guidance for medical decision making. But in many cases, it’s the interests of pharmaceutical and medical device companies subtly shaping the physician’s practice by influencing how diseases are defined. It seems like medicine is in control, but often, industry tailors the rules of the game through guideline panels, research funding and educational influence. 

Workforce Awareness Needed to Reduce COI 

Members of a healthcare organization’s workforce need to understand what constitutes a Conflict of Interest. COI occur when personal, financial, or professional interests interfere with objective decision-making that affects patient care, research, or organizational integrity.  

The workforce also needs to be aware of disclosure requirements, because they must disclose any potential COI to the compliance officer or management, especially financial relationships with outside entities. Workforce members have an ethical responsibility to prioritize patient welfare, transparency and integrity over external interests in all decisions. 

How Employees Should Respond to COI Suspicions 

If an employee suspects a COI might be an issue, they should promptly report suspicions to the compliance officer, management or through confidential reporting channels. If they are uncertain, the workforce member can seek advice on whether a situation constitutes a COI and how to proceed. This ensures accountability and maintains ethical standards in the organization. 

A solid conflict of interest mitigation process is crucial for a healthcare organization because it ensures patient safety, maintains ethical decision-making, prevents financial exploitation, and preserves public trust. Without it, the integrity of care is compromised, risks to patient health increase, and the organization’s reputation and legal standing are jeopardized. 

1. https://www.justice.gov/archives/opa/pr/detroit-area-doctor-sentenced-45-years-prison-providing-medically-unnecessary-chemotherapy  ︎

Susan is a healthcare compliance leader with over four decades working in a variety of administrative and managerial capacities, including strategic planning, regulatory oversight, revenue cycle risk mitigation, denial and appeal management, privacy and information security, healthcare advocacy, clinical department leadership, provider practice administration, risk management, and quality outcomes.  Currently, Susan provides compliance and privacy consulting services to a variety of healthcare organizations, including program implementation, policy and procedure development, compliance and privacy training, and regulatory oversight administration.  

Susan is a Certified Internal Auditor (CIA), Certified Healthcare Compliance (CHC), Certified Professional Coder (CPC) and holds a Certification in Risk Management (CRMA).  

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

• One Compliance Pro’s Regulatory Change Management Process    by Amy Laufmann, MBA
• Five ways to show how healthcare Compliance delivers value by Jerry Shafran
• Revenue Cycle Management Compliance: Ensuring… by Maya Turner, CPMA, CPCO, CFPC, CPC, CPC-I, AAPC
• 12 key metrics for compliance officers looking to… by Kenneth Zeko, JD, CHC
• Transforming Compliance to a Department of Yes  by Lisa Herota, RHIA, CHC, CHPS, CCS Compliance & Privacy Officer
• Three Strategies to Align Compliance with Revenue Cycle  by CJ Wolf, MD
• How the Three Lines Model Strengthens Healthcare Compliance by Kenneth Zeko, JD, CHC
• Mitigating Conflicts of Interest that Drive Profit… by Susan Thomas
• Navigating Compliance Responsibility: A Foundation… by Amy Laufmann, MBA
• New Regulation– Now What? Step-by-Step Guide to… by Amy Laufmann, MBA

The post Mitigating Conflicts of Interest that Drive Profit Over Health  first appeared on YouCompli.

With its emphasis on risk management, compliance training is pivotal in protecting both employees and organizations from legal and ethical pitfalls. By having a good understanding of compliance, employees help safeguard the company against lawsuits and reputational damage.  

In this practical blog, two experts – one in education and one in compliance – offer advice and analogies to improve your compliance education practices.   

Compliance orientation educates new staff members about company policies, procedures, and various regulations that govern their specific roles. Ongoing compliance training ensures that as regulations evolve, all employees are appropriately educated on implications and requirements. Read on to learn what it takes to consistently hit the mark with all your compliance education.  

Make Employees Fit to Perform with Training and Orientation 

Training and orientation requirements are very much like starting an exercise program. All too often, people want to try the double-split; train twice a day; and eat nothing but cucumbers, fish and broccoli for months on end, when you haven’t worked out since high school. Yo, since high school, bro – and you want to jump into the bodybuilding lifestyle like it’s the deep end of the pool? 

The most important thing really is to not think too hard on any of it because the basic point remains the same: Eat a lot of healthy food and train everything really hard. Eat more and do recovery stuff if you are under-recovering and eat less if you are getting fluffier than you would like. Then do it for years and years and years. 

What Compliance Training and Physical Training Have in Common 

A full employee training program should promote a comprehensive understanding of regulatory compliance and safety, along with continuing education and professional development. Then do it for years and years and years – just like physical training.  

Initial training is the introduction to an employee’s duties, with some sort of competency assessment, if needed. Ongoing courses are typically basic information that employees must complete to finish any job-related training. 

Why Do Orientation Programs Fail? Isn’t it Obvious?  

We’ve explained why training and education for new employees are similar to phys ed programs. So, much like your exercise program, why doesn’t your compliance orientation strategy always work? There are multiple reasons why programs fail. Do any of these sound similar? 

1. Too Much, Too Fast 

Your orientation plan gets done because you have to do one. As we’ve talked about before, these sessions are often “death by PowerPoint” and didactic lectures, and newcomers have no idea what’s going on. There’s so much information being thrown at them rather than interacting that after several days in a classroom, new employees feel like they’re drinking from a fire hose instead of being onboarded appropriately.  

2. Where’s My Stuff? 

We shouldn’t have to say this reason, but it’s true. Sometimes the employee doesn’t even have a defined workspace or workstation when they arrive. Once, when we got to work, the laptop we were supposed to have was still in use by the person we were replacing. We were like, well, how am I supposed to learn then if they’re still working on the computer that I’m going to use? HR was like, just watch them over their shoulder and do that they do.  

All of that left us feeling extremely disillusioned. If you didn’t even plan for us to be there, not to mention, if you can’t provide the basic work equipment, we’ll spend more time trying to find it than actually being productive.  

3. Poor Coordination 

Lastly, a lot of great ideas exist only on paper but are never fully implemented effectively on the ground. For example, you want all the leadership team to present during orientation, but you didn’t really check everyone’s schedule for orientation week.  

Now you have a huge gap in the day when the Director of Healthcare Informatics is supposed to teach, but they’re meeting with the VP of Corporate Compliance regarding consenting best practices. You didn’t know that because you didn’t check, and now you have a lull in the agenda, or you scramble to have other presenters move up, giving them very little time in their work schedule to be ready to present.  

Don’t do this. It’s a knee-jerk reaction that makes you look horribly disorganized, to the point where the employee says, “Why do I want to work here again?” 

What to Do Instead for Strong Compliance Training: Three Tips 

1. Concretely define responsibilities.  

In other words, who is doing what. These duties have to be set in stone. For example, the hiring manager will be responsible for ensuring appropriate training and competency assessments of staff; ensuring all essential staff are trained on appropriate Standard Operating Procedures (SOPs) before performing any work; providing notifications to appropriate departments that a new employee is starting; creating and maintaining job descriptions and ensuring all direct reports are current on all training requirements. We’ve actually seen some hiring managers become responsible for identifying and conducting appropriate competency testing for their employees.  

Yes, you need to get this specific. Otherwise, this won’t work.  

2. Have the organization prepared for their arrival. 

We can’t stress this one enough. For example, before a new employee starts, HR should work with all relevant departments to make sure they’re set up on all applicable electronic systems, such as an Outlook e-mail set up. IT or a reasonable designee needs to be responsible for ensuring the computer set-up is completed; an ID badge is already created, and all applicable accounts are accessible and ready before the employee starts.  

It’s a little thing but it goes a long way.  

3. Make sure the training program is ready. 

Ensure all required training is sent to applicable systems for the new employee, so they don’t have to fumble around for it. Ensure all your presenters are ready, and the orientation schedule is adhered to. If it can’t be for whatever reason, think of additional training tasks you can add, such as a facility tour, Q&A with new employees, department-specific training, or shadowing opportunities.  

This keeps new employees eager to learn, while your experienced employees are still involved in onboarding.  

Don’t Take Shortcuts with Compliance Education

Many people take shortcuts with their exercise programs such as doing half-reps or taking fancy, expensive fat burners. Don’t do the same with your compliance training program, such as giving a few presentations and having them sign off on some SOPs and then tossing them into the fire of a busy shift.  

During the first week of employment, your job is to build comfort and confidence within your employees so they can perform the job. Always remember that some things can be covered in a manual, but it takes time on the floors or at your desk for new employees to pick up the ins and outs.  

Develop the Muscle of Knowledge: Optimize Compliance Training 

By actively committing to effective compliance training, health systems mitigate risks and protect their reputation while empowering employees to uphold the highest standards of conduct.  

Reach out for ideas on how to standardize, track and measure compliance education for your organization.  

And in the meantime, if you’d like to learn a little more on your own, we recommend these resources: 

• Building a Quality Education Program That’s Good Enough 

• Best Practices for Better Training in Healthcare Compliance 

• Best Practices for Documenting Compliance Training in Healthcare 

• Five Strategies for Aligning Human Behavior With Your Compliance Program 

John R. Nocero, Ph.D., and Andrea L. Bordonaro, MAT, blog on LinkedIn as “The Q-Kids,” discussing everything related to clinical research education, inspiration, and professional connection. 

Andrea has taught first grade in Willoughby, Ohio for 27 years in the same classroom that she attended school as a child. She earned a Bachelor of Science in elementary education with a minor in language arts from John Carroll University and a Master’s Degree in the Art of Teaching and Education from Marygrove College. 

John builds and fixes quality departments, while currently thriving as the Administrator & Director of Quality, Risk Management and Compliance at River Vista, a behavioral hospital in Columbus, Ohio.

---

The Q-Kids – John R Nocero and Andrea L Bordonaro – are experts at everything quality, regulatory, education training and compliance and love sharing their knowledge on YouCompli.

Follow them on LinkedIn – for more quality content or send them a message – they’d love to hear from you.

---

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

• One Compliance Pro’s Regulatory Change Management Process    by Amy Laufmann, MBA
• Five ways to show how healthcare Compliance delivers value by Jerry Shafran
• Revenue Cycle Management Compliance: Ensuring… by Maya Turner, CPMA, CPCO, CFPC, CPC, CPC-I, AAPC
• 12 key metrics for compliance officers looking to… by Kenneth Zeko, JD, CHC
• Transforming Compliance to a Department of Yes  by Lisa Herota, RHIA, CHC, CHPS, CCS Compliance & Privacy Officer
• Three Strategies to Align Compliance with Revenue Cycle  by CJ Wolf, MD
• How the Three Lines Model Strengthens Healthcare Compliance by Kenneth Zeko, JD, CHC
• Mitigating Conflicts of Interest that Drive Profit… by Susan Thomas
• Navigating Compliance Responsibility: A Foundation… by Amy Laufmann, MBA
• New Regulation– Now What? Step-by-Step Guide to… by Amy Laufmann, MBA

The post Three Tips for Strong Compliance Education Practices  first appeared on YouCompli.

The Nurse Who Slipped Through: A Tale of Missed Screenings and Million-Dollar Consequences 

ABC Health, a mid-sized midwestern provider, was thriving. With a regional flagship hospital, six outpatient clinics, a home health division, and a solid reputation for quality care, the CEO had just signed a five-year partnership with a major insurance network.  

There didn’t seem to be any cause for worry. The compliance officer insisted they ran exclusion screenings every quarter—plenty often, the executive claimed. 

Tech Failure Leads to “Minor” Exclusion Screening Lag 

But in Q3, the exclusion screening software glitched. It missed a monthly sync. Then a second. By the third missed month, the compliance officer dismissed it as “a minor lag,” promising the HR department everything would be rerun soon. 

Unfortunately, even a seemingly small glitch can have major consequences for healthcare compliance. 

ABC Health hired a new nurse in October. Her references checked out. She had a glowing record of employment. However, as it turns out, two years ago, she was convicted of Medicaid fraud while working under a different name in the southwest. She was on the OIG Exclusion List under her maiden name. 

But no one screened her for her maiden name at any time. 

Billings Accrue for Excluded Individual Over 11 Months 

The nurse worked at ABC Health for eleven months. In that time, she administered care to over 200 Medicare patients. ABC Health billed CMS more than $1.2 million for services in which she had direct or indirect involvement. 

In August of the following year, a whistleblower complaint hit the OIG hotline. An old colleague recognized the nurse’s face on ABC Health’s website. An investigation followed swiftly. The OIG cross-checked full names and dates of birth, matched alias records, and confirmed: ABC Health had employed an excluded individual. 

A Perfect Storm of Compliance Failure 

What followed was a perfect storm: 

• CMS demanded full repayment of $1.2 million in federal reimbursements. 
• Civil monetary penalties were levied—$20,000 for each false claim filed involving the excluded nurse. 
• The DOJ initiated False Claims Act proceedings, arguing gross negligence in compliance. 
• The state Medicaid program joined the fray, adding $400,000 in additional penalties. 

As this example shows, the fines, penalties, and reputational damage from exclusion failures are significant.  

Exclusion Screening as Compliance Practice and Risk Protection 

The OIG has the authority to exclude individuals and entities from federally funded healthcare programs pursuant to the Social Security Act and maintains a list of all currently excluded individuals and entities called the List of Excluded Individuals/Entities (LEIE). Anyone who hires an individual or entity on the LEIE may be subject to civil monetary penalties (CMP).  

Exclusion screening is critically important for healthcare provider organizations because failing to do it properly can result in severe legal, financial and reputational damage.  

Here are five reasons why you should take a look at your exclusion screening practices: 

1. It’s a Legal Requirement. 

Federal law prohibits payment by Medicare, Medicaid or other federal healthcare programs for any item or service furnished by an excluded individual or entity. This includes not just direct patient care but indirect services (e.g., billing, transportation, administrative work). 

2. Non-Compliance = Massive Penalties 

If your organization hires or contracts with an excluded individual, you must repay all related federal reimbursements. Plus, you could face: 

• Civil Monetary Penalties (CMPs) — up to $20,000 per item/service 
• False Claims Act liability 
• Exclusion from federal healthcare programs, particularly Medicare and Medicaid 

3. Exclusions Are Not Always Obvious. 

Individuals can be excluded under different names, maiden names or aliases. Not all exclusions stem from obvious crimes. Some involve license issues, fraud or administrative findings. 

4. Exclusions Can Happen at Any Time. 

A person not excluded today could be excluded tomorrow. That’s why ongoing, monthly screening is so essential, not just one-time checks during hiring. 

5. It Protects Patients and Upholds Trust. 

Exclusion screening helps prevent unqualified or unethical individuals from delivering care. It’s a cornerstone of patient safety and organizational integrity. 

Regular exclusion screening isn’t just good compliance practice. It’s a regulatory safeguard that protects your organization from fraud, fines and harm to organizational credibility and business integrity. 

So, What Happened at ABC Health? 

The ABC Health board fired the compliance officer; the CEO resigned, and ABC Health declared bankruptcy within six months. The company’s name became a case study in compliance seminars across the country.  

And in a final twist, what happened to the nurse? She vanished before investigators could issue a subpoena. Her exclusion had never expired.  

Moral of the Story: In healthcare compliance, skipping or delaying exclusion screening isn’t just an oversight—it’s a significant risk with high-stake consequences. 

How to Avoid Exclusion Screening Problems 

How can problems like these be avoided? One way is better tracking and management of compliance processes using a tool like YouCompli. Know what the responsibilities are and verify when they are completed. Then confidently manage ongoing compliance processes to avoid situations like what happened to ABC Health.  

Reference Material:   

• U.S. Department of Health & Human Services. Office of Inspector General. Exclusions Program.   
• Background Information.  https://oig.hhs.gov/exclusions/background.asp  
• Exclusions FAQs.  https://oig.hhs.gov/faqs/exclusions-faq/  
• The HIPAA Journal. “What are the HHS OIG Background Check Requirements?”  https://www.hipaajournal.com/hhs-oig-background-check-requirements/  
• U.S. Department of Health & Human Services. Office of Inspector General. Special Advisory Bulletin on the Effect of Exclusion from Participation in Federal Health Care Programs. (May 8, 2013).  https://oig.hhs.gov/exclusions/files/sab-05092013.pdf  

Susan is a healthcare compliance leader with over four decades working in a variety of administrative and managerial capacities, including strategic planning, regulatory oversight, revenue cycle risk mitigation, denial and appeal management, privacy and information security, healthcare advocacy, clinical department leadership, provider practice administration, risk management, and quality outcomes.  Currently, Susan provides compliance and privacy consulting services to a variety of healthcare organizations, including program implementation, policy and procedure development, compliance and privacy training, and regulatory oversight administration.  

Susan is a Certified Internal Auditor (CIA), Certified Healthcare Compliance (CHC), Certified Professional Coder (CPC) and holds a Certification in Risk Management (CRMA).  

Download our Latest White Paper

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

Our in-house team works tirelessly to monitor U.S. regulators, carefully read the regulations in their entirety, and translate the information into simple regulatory intelligence you can use. We deliver model procedures and expert tools that can be used to fulfill your business requirements. Everything is validated by a third-party law firm.   

Sign up for our Weekly Newsletter

The post Exclusion Screening Failure Causes Compliance Nightmare  first appeared on YouCompli.

Traditionally, many healthcare compliance programs have left the work of patient safety and quality to other departments. However, according to the Health and Human Services (HHS) Office of Inspector General (OIG), “Entities should incorporate patient safety/quality oversight into their compliance programs.”   

OIG’s recent emphasis on patient safety and quality is not necessarily a call for compliance programs to take over these efforts. Rather, it’s a reminder that a compliance program should be designed to address the significant risks health care organizations face, which includes patient safety and quality of care.  

How to Incorporate Quality and Safety into Compliance Practices 

How can your compliance program answer the OIG’s call and include patient safety and quality in your oversight efforts? This blog explores four practices to integrate safety/quality concerns into compliance practices. 

1. Build a Strong Compliance Committee 

2. Provide Safe Reporting for Safety/Quality Concerns 

3. Get Your Governing Board Involved with Quality of Care 

4. Nurture Relationships with Quality and Safety Leaders 

Four Ways to Drive Greater Connection Between Compliance and Safety/Quality 

1. Build a Strong Compliance Committee 

Most mature compliance programs have a compliance committee in some form or fashion. To build stronger safety and quality representation, include individuals responsible for quality assurance and patient safety as members of the committee. 

A strong compliance committee should ensure that appropriate auditing and monitoring of patient safety and quality take place on a regular basis. The OIG goes as far as suggesting that “Compliance committees of entities directly furnishing patient care, particularly entities such as hospitals, long-term care facilities, and other entities providing residential care, should also assess staffing for nursing, therapy, and other clinical services to ensure that the entity has the appropriate quantity, quality, and composition of care providers.” 

2. Provide Safe Reporting for Safety and Quality Concerns 

Compliance programs establish lines of communication for reporting concerns, and anyone aware of patient safety or quality concerns must know how to report such incidents or issues. They must also have confidence they won’t face retaliation.  

Awareness of incidents involving safety or quality is often the first step in developing a correction plan, so it’s essential that those who report know how their information is protected. 

Steps have been taken at the federal level to encourage reporting and analysis of medical errors. The Patient Safety Act and Rule provide federal privilege and confidentiality protections for patient safety information called the Patient Safety Work Product (PSWP). PSWP includes data, reports, records, analyses and written or oral statements related to patient safety events.  

More about the types of protections at the federal level can be found here: https://www.hhs.gov/hipaa/for-professionals/patient-safety/index.html  

 

3. Get Your Governing Board Involved with Quality of Care 

Governing boards of healthcare entities have ultimate accountability for ensuring quality of care, and their involvement can also ultimately benefit compliance outcomes.  

There are many resources available to educate your board on their responsibilities related to quality. These include: 

• “Corporate Responsibility and Health Care Quality: A Resource for Health Care Boards of Directors”
• “Driving for Quality in Acute Care: A Board of Directors Dashboard”
• “Driving for Quality in Long-Term Care: A Board of Directors Dashboard” 

Read and share these with board members to help them stay informed more easily.  

4. Nurture Relationships with Quality and Safety Leaders 

Compliance departments aren’t expected to take over the detailed, day-to-day management of quality and patient safety programs. However, it’s essential that compliance leaders develop productive working relationships with leaders and in-house experts within the organization’s quality and patient safety programs. 

One way to develop productive working relationships is to better understand what quality and safety leaders do. A good resource for learning more about the standards, goals and language often used by quality and safety leaders is the Institute for Healthcare Improvement or IHI (https://www.ihi.org/).  

This organization offers both introductory, intermediate and advance learning opportunities for those who want to become better-versed in quality and patient safety topics. The IHI Open School (https://www.ihi.org/education/ihi-open-school) is a great place to start. And for those looking for more formal recognition, the IHI offers certifications, such as the Certified Professional in Patient Safety (CPPS). 

Compliance, Quality and Safety — Together for Common Good 

The call for compliance programs to become more involved in an organization’s patient safety and quality efforts is getting louder from agencies such as the OIG. It’s also smart business practice.  

In summary, this blog has covered four ways to begin the process: 

• Considerations for your compliance committee 
• Ensuring confidentiality of incident reports 
• Involving the governing board  
• Broaden understanding of what safety/quality leaders do 

With these practices in your toolkit, you’ll be on the path to a stronger, more effective compliance program.  

And to help with overall regulatory analysis and operations, learn more about how YouCompli compliance software can support your mission. The tools include capabilities to easily map and track responsibilities across functions.  

CJ Wolf, MD, M.Ed. is a healthcare compliance professional with over 22 years of experience in healthcare economics, revenue cycle, coding, billing, and healthcare compliance. He has worked for Intermountain Healthcare, the University of Texas MD Anderson Cancer Center, the University of Texas System, an international medical device company and a healthcare compliance software start up. Currently, Dr. Wolf teaches and provides private healthcare compliance and coding consulting services as well as training.   

---

27 Ungated Resources for Compliance Leaders and Teams 

Compliance professionals sometimes feel undervalued in comparison to other functions in their organization. They think leaders and colleagues don’t really understand what they do.  

These resources will help. Packed with ideas, tips and recommendations, these pieces were written by professionals with many years of compliance experience. 

You can quickly skim for articles that relate to your needs and interests. Bookmark this page as a reference for future questions or projects.

Visit Now

---

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

The post Four Ways to Integrate Compliance with Safety/Quality Efforts  first appeared on YouCompli.

Compliance in healthcare isn’t just about meeting regulatory requirements – it’s about protecting patients, maintaining trust, and ensuring operational efficiency. Too often, compliance is treated like a separate function and oftentimes a bit disconnected from department heads, operations and leadership.  

In my experience, the most successful healthcare organizations take a very different approach: compliance is seen not as an obstacle, but as a partner in driving quality care and achieving business goals. The function is embedded into decision making, planning and daily operations at all levels. 

Integrating compliance into core business operations strengthens both the compliance program and the broader organization. Below we will identify practical ways to achieve that integration and review the many benefits of taking this approach. 

Gaining Leadership Alignment and Buy-In for Compliance  

Integration begins at the top. When leadership views compliance as a strategic priority – not just a checkbox for audits – it creates a culture where compliance is valued, understood and actively supported. 

Healthcare leaders set the tone by: 

• Including compliance officers/leaders in business planning and strategic discussions. 
• Allocating budgets for compliance initiatives and technologies. 
• Incorporating compliance-related KPIs into department and organizational scorecards. 

Compliance leaders, in turn, support the organization by: 

• Offering proactive guidance on regulatory risks and opportunities. 
• Identifying areas of noncompliance that could lead to penalties or reputational harm. 
• Streamlining interactions with external agencies by helping departments stay prepared and responsive. 

Leadership support encourages compliance to be viewed as a collaborative partner, not a gatekeeper or enforcer. With executive backing, compliance becomes increasingly more effective in helping teams achieve both operational and regulatory goals. 

Map Compliance Reviews into Operational Workflows 

Many organizations make the mistake of layering compliance reviews onto existing workflows as an afterthought. This often results in inefficiencies, confusion or missed steps.  

The better approach is to integrate compliance directly into operational processes by including it as part of how the work gets done. Compliance teams should collaborate with department managers to map out how compliance requirements intersect with day-to-day operations. Identify who is responsible for each compliance-related step, and document those responsibilities clearly. When compliance is built into job roles and routine activities, it becomes less burdensome, more efficient and more effective.  

Leverage Technology for Integration and Execution 

Technology plays a crucial role in streamlining compliance operations. The right tools can automate regulatory tracking, standardize documentation, assign accountability, and provide visibility to monitor progress. 

Start by reviewing your current technology and assess: 

• Are there opportunities to embed compliance tasks into systems staff already use (like EHRs, HRIS, LMS, etc.)? 
• Are alerts and reminders automated? 
• Do you have a centralized platform to manage and track regulatory changes? 

Tools like YouCompli are designed specifically to close the gap between regulatory updates and operational execution. By automating the distribution of new rules, assigning tasks to appropriate staff, and tracking completion, compliance becomes an operational process, not an isolated initiative. 

Utilize your existing tools to their fullest potential and explore additional solutions available to support gaps and increase your team’s ability to drive value. 

Communicate and Train Continuously for Proactive Compliance 

Ongoing training is critical, not just to meet regulatory requirements, and it can’t be just annual courses or a quarterly newsletter. Ongoing, direct engagement drives true integration of compliance into an organization. While required training has its place and is necessary, the real connection comes from consistent communication and face-to-face collaboration. 

Here’s what should be included in a collaborative training strategy: 

• Rounding Onsite: Compliance staff should be visible in every part of the organization. Walking the floors, attending team huddles, and participating in department meetings builds relationships and surfaces real-life challenges experienced by your staff. 
• Microlearning Moments: Short videos, quick reference guides and FAQ weekly emails are easy to digest and keep compliance top of mind. 
• Feedback Loops: Ask frontline teams where they’re experiencing friction or confusion with compliance activities. Their insights are invaluable for improving training and processes. 
• Transparency: Share compliance metrics, compliance wins/achievements and areas of specific focus for improvement. 

Regular interaction builds trust and encourages staff to view compliance as a source of support and clarity, not just a department responsible for shining a light on everything that’s going wrong. It positions the compliance team to be viewed as a responsive partner, not just a rule enforcer.  

How to Measure What Matters in Healthcare Compliance 

Let’s face it, you can’t manage what you don’t measure, but you also don’t want to measure everything and anything that can be quantified. Too often, compliance success is evaluated only in terms of audit scores or survey readiness. However, true integration requires broader, more operationally focused metrics. 

Consider including: 

• Time-to-completion or regulatory change tasks/work 
• Staff engagement with compliance training and communications  
• Compliance team onsite/rounding activities 
• Feedback from departments on compliance collaboration 
• Risk mitigation outcomes, such as reduction in repeat findings or survey citations 

Use dashboards and reports to monitor not just outcomes, but how embedded is compliance in your daily operations? Are staff clear on their roles? Are tasks being completed proactively? Is the organization staying ahead of regulatory changes? 

The Benefits of Integrating Compliance into Organizations 

When compliance is an integrated part of a healthcare organization, woven like a fabric within each level, every department wins by: 

• Improving patient outcomes and safety: Policies and procedures align with the latest standards, reducing the chance of preventable harm. 
• Reduced Risk Exposure: Noncompliance is identified and resolved early – before it becomes a liability. 
• Operational Efficiency: Fewer redundancies, less rework, and more clarity for staff. 
• Stronger Culture of Integrity: Compliance becomes everyone’s job, not just the compliance team. 
• Regulatory Readiness: Survey prep becomes an ongoing practice rather than a stressful scramble. 

Make Small Changes to Integrate Compliance into Your Organization  

Compliance is about following the rules, but also so much more. It’s about making the rules part of how care is delivered, how work is done, how business decisions are made, and ensuring the people in the organizations are supported.  

When compliance is fully integrated into everyday operations, it empowers staff, improves performance and protects patients. Just like making any lasting changes, you don’t need to do everything listed above all at once, and most likely you can’t, as these gains take time and effort.  

Start by making small changes. Begin with building key relationships, listening and gathering all the information you need to know to be successful in your integration goals and efforts. Most importantly, never lose track that compliance can become a seamless part of your organization’s operations and a key driver of success. 

Want to keep going and learn more about growing the value of healthcare compliance? Try the ideas and advice in this white paper: “DOUBLING YOUR IMPACT: DEMONSTRATING COMPLIANCE’S VALUE AND SHAPING CULTURE Best Practices for Proving It in Five Key Areas.”        

Amy Laufmann is client success manager at YouCompli. She has 10+ years of experience in healthcare compliance and operations, and is passionate about helping healthcare organizations operate better and deliver better patient outcomes.  

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

Sign-up for our Weekly Newsletter

---

27 Ungated Resources for Compliance Leaders and Teams 

Compliance professionals sometimes feel undervalued in comparison to other functions in their organization. They think leaders and colleagues don’t really understand what they do.  

These resources will help. Packed with ideas, tips and recommendations, these pieces were written by professionals with many years of compliance experience. 

You can quickly skim for articles that relate to your needs and interests. Bookmark this page as a reference for future questions or projects.

Visit Now

---

The post Beyond the Checklist: Integrate Compliance into Everyday Operations  first appeared on YouCompli.

How do you become a more valuable compliance professional?  

By becoming a more knowledgeable business professional! 

That requires a solid understanding of how your organization works and drives value. Then you focus on contributing to those goals and becoming more valued. 

That’s our theme this year at the HCCA Compliance Institute in Las Vegas — how to become more valuable by concentrating on the Business of Compliance. We’re attending again as part of our mission to: 

• Transform compliance professionals into business professionals. 
• Make the compliance role more valuable to the business. 

What the Business of Compliance Means 

In healthcare, compliance touches many areas. That’s why the Business of Compliance approach also covers a lot of ground: 

• Regulatory Lifecycle Management & Change Management  
• Business & Compliance Leadership  
• Financial & Revenue Cycle Impact 
• Quality & Patient Safety  
• Regulatory Trends & Emerging Healthcare Issues 

If you’re interested in any of these, check out the Business of Compliance webinar series we produced with HCCA. (Find information about accessing those sessions.) Now we’re going to dive into the topic in person in Booth 526 at the Compliance Institute and at our Vendor Spotlight session on April 30. 

The Reality of Healthcare Compliance 

Being a healthcare compliance professional involves navigating a complex landscape where law, risk, operations, ethics and patient care intersect. These professionals play critical roles in preventing reputational and financial risks that could jeopardize their organization and its ability to serve patients effectively.  

By ensuring adherence to regulations and ethical standards, compliance teams safeguard not only the institution’s viability but also the trust and safety of patients. This multifaceted responsibility underscores the importance of compliance in fostering a culture of integrity and accountability within the healthcare sector. 

The Compliance Image Problem 

Unfortunately, compliance departments often struggle with a negative reputation, commonly being viewed as “The Department of No.” This perception sometimes leads to exclusion from strategic planning, creating an unnecessary barrier to collaboration and innovation.  

Compliance teams are frequently seen as reactive, responding to issues as they arise, rather than proactively engaging in risk management and organizational strategy. This image problem undermines their potential value within the organization and hampers the development of a culture that prioritizes compliance as a vital component of business success. 

It’s a tough job, and there’s a real need for high-level strategic training for compliance professionals to reach their full potential. 

What the Healthcare Business Cares About 

To become more valuable to the organization and overcome negative perceptions, compliance pros must understand and deliver on what the business cares about.  

Strategic thinking – Pivotal role in navigating the complex and ever-changing healthcare industry. Professionals who can envision long-term goals while effectively planning for the future are essential to organizational success.  

Cross-functional collaboration – Fosters teamwork across departments, bringing together diverse expertise around patient care and operational efficiency.  

Outcomes over effort – Highlights the importance of measurable results that improve both patient health and organizational performance.  

Actionable insights from data – Healthcare organizations rely on data-driven decisions to optimize processes, enhance patient experiences, and ultimately achieve better health outcomes.  

Together, these business values lead to a framework for effective compliance leadership and innovation within healthcare organizations. 

YouCompli Software Enables Metrics that Matter 

With confident data and metrics, compliance professionals can prove quantifiable value to their organizations. YouCompli aggregates and reports activity at an organizational level, providing comprehensive visibility into compliance efforts.  

• Centralizes and tracks regulatory change 
• Assigns tasks and ensures accountability 
• Aggregates and reports activity across the org 
• Enables KPI development and dashboarding 

Leveraging technology such as YouCompli Software significantly enhances the ability to capture and analyze critical metrics about compliance value. This robust platform centralizes and tracks regulatory changes, ensuring compliance professionals are always informed of the latest requirements and prepared with action plans. 

Compliance: From Enforcer to Executive 

Compliance professionals are poised to make a significant shift from being seen as mere enforcers of regulations to becoming integral executives within their organizations. By aligning compliance efforts with the broader business goals, healthcare compliance professionals can play a vital role in supporting operational success while ensuring regulatory adherence.  

To facilitate this transformation, adopt a proactive, rather than reactive, mindset, anticipating compliance challenges and addressing them before they escalate. Embracing this shift from enforcer to executive will position compliance professionals as essential leaders who contribute to the overall mission and success of their organizations. 

We’ll be speaking with lots of compliance professionals in booth #526, as well as at our Vendor Spotlight presentation at 10 AM on April 30. Do stop by and let’s talk about you and the Business of Compliance.   

You’ll also find useful information in this HCCA-CI quick guide to help you prepare for your trip to the Compliance Institute. See you there!

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

---

27 Ungated Resources for Compliance Leaders and Teams 

Compliance professionals sometimes feel undervalued in comparison to other functions in their organization. They think leaders and colleagues don’t really understand what they do.  

These resources will help. Packed with ideas, tips and recommendations, these pieces were written by professionals with many years of compliance experience. 

You can quickly skim for articles that relate to your needs and interests. Bookmark this page as a reference for future questions or projects.

Visit Now

---

The post Ditch the “Department of No” & Embrace the Business of Compliance  first appeared on YouCompli.