New to healthcare compliance? Find practical resources on communication, audits, regulatory change, and program oversight, organized by the work you need to learn.
Continue readingWhat Healthcare Compliance Teams Want from Regulatory Change Management Software
What do healthcare compliance teams actually want from regulatory change management software? YouCompli client survey feedback highlights priorities around streamlined workflows, real-time analytics, regulatory content, training, support, and flexibility.
Continue readingLessons from the Frontlines: A Case Study in Medical Necessity Enforcementย
About the Medical Necessity Series
This is the third in our series of articles on medical necessity. In the first, we described the compliance risks associated with submission of claims for medically unnecessary services.
In the second, we highlighted a case where an organization of long-term care hospitals were alleged to have violated the Federal False Claims Act (FCA) for holding patients in the hospital longer than medically necessary to increase reimbursement from Medicare.
In this next article, we spotlight another recent example of a healthcare provider entity agreeing to pay a six-figure sum to resolve allegations of submission of claims for medically unnecessary services1. This time, the providers consisted of three affiliated skilled nursing facilities (SNF) that were alleged to have submitted claims for medically unnecessary rehabilitation services.
False Claims Act Metrics Make Significance Clear
The Department of Justice has reported that False Claims Act settlements and judgments reached $6.8 billion in Fiscal Year 2025. Over $5.7 billion of that total was derived entirely from the healthcare sector. Most of these healthcare recoveries stem from whistleblower lawsuits targeting corporate billing schemes, upcoding, and medically unnecessary services.
Case Involves SNF Reimbursement Dispute Over Therapy Services
For the period in question, skilled nursing facilities (SNFs) were reimbursed for therapy services based on a patientโs resource utilization group (RUG). The RUG was determined by the amount of services the patient received, such as:
- Physical therapy
- Occupational therapy
- Speech pathology services
In short, the more services provided, the higher the reimbursement. However, as discussed in our two prior articles, if the services donโt meet medical necessity requirements, they should not have been performed or billed in the first place.
Whistleblower Lawsuit Triggers Investigation
As is frequently the case, these allegations were first brought forth through a qui tam, or whistleblower, lawsuit. The whistleblower, or relator, claimed the defendants implemented a five-pronged scheme to fraudulently bill for unnecessary โUltra High Rehab,โ (the most intensive therapy provided by SNFs) and to keep patients in Ultra High Rehab for longer than necessary.
The five prongs of the alleged scheme were:
- Pressure to perform excessive, unnecessary services: The organizationโs leadership exerted pressure on therapy staff to administer excessive Ultra High Rehab and to do so for longer than necessary.
This pressure was exerted not only by administrators who oversaw SNF operations, but also by regional directors of operations who managed the facility administrators. Such pressure was also exerted by directors of rehab (DOR) who managed therapists at each facility, and regional managers who directly managed the DORs.

In other words, management, from top to bottom, spoke to therapists and staff in one voice: increase Ultra High Rehab, regardless of patient need.
- Financial vs. medical reasons to provide care: Instead of letting therapists determine the appropriate level of therapy needed based on their professional evaluation, leadership insisted that each patient’s level of therapy be at least in part determined by whether the patient qualified for lucrative Medicare Part A benefits.
- Care for functional patients: The organizations pressured therapists to continue providing therapy to patients who were fully functional and in no way required intensive therapy. A scheme called “Bridge to Success” was employed which mandated an additional week of Ultra High Rehab be tacked on even after patients were ready for discharge.
- Too sick for care: The organizations pressured therapists to provide therapy to patients who were too sick to benefit from therapy and even to patients who were actually harmed by it.
Since therapy minutes were dictated by management and not assigned based on the professional opinion of evaluating therapists, patients ended up receiving more therapy than they could tolerate, including instances where therapy was forced on patients about to pass away.
- Maximizing minutes: The focus on maximizing therapy minutes to hit therapy goals also resulted in leadership encouraging an array of fraudulent billing practices.
This included:
- Billing non-therapeutic minutes as therapy
- Allowing therapists to bill for therapy without actually providing it
- Encouraging therapists to bill evaluation sessions as therapy.
Widespread Occurrences Involve $14.6+ Billion in Alleged Intended Losses
Federal enforcement actions emphasize the commonality of these practices. The 2025 National Health Care Fraud Takedown alone resulted in criminal charges against 324 defendants nationwide, involving over $14.6 billion in alleged intended losses tied to fraudulent billing and medical necessity abuses.
The most compelling argument for compliance leaders is that medical necessity fraud carries dual liability:
- Financial Risk: Organizations face mandatory treble damages (three times the government’s actual loss) plus steep statutory penalties for every individual false claim submitted.
- Human Risk: Unlike administrative billing errors, medical necessity fraud directly compromises patient care. Overutilization exposes vulnerable patients to unnecessary, exhausting or potentially harmful procedures simply to satisfy corporate revenue targets.

Three Takeaways from Medical Necessity Cases
Much can be learned from the themes of these allegations, even if your organization isnโt an SNF or doesnโt provide therapy services. Medical necessity requirements are common across most healthcare organizations.
Key lessons from this case include:
- Decisions about billing for medical care provided need to be based on clinical and regulatory requirements, especially coverage requirements from Medicare and Medicaid, for example. Such requirements often include statutes about:
- Medicare coverage
- Medicare manuals
- National Coverage Determinations
- Regional Medicare Administrative Contractorsโ Local Coverage Determinations (LCD)
- Regular, focused compliance coding and billing audits may identify aberrant practices. This is especially true for services whose corresponding medical documentation doesnโt support compliance with coding or billing rules.
For example, Medicare reimbursement rules state that routine, non-skilled services arenโt separately reimbursable. In this case, it was alleged that one therapy assistant was coached to include in therapy minutes the time it took him to arrive at a patientโs room starting with the moment he left the therapy department.
- Use data analytics to identify outliers. Most whistleblower cases alleging medically unnecessary services are brought by an individual with knowledge from inside the organization. Many times, the individual is a physician, nurse or other clinician with medical expertise.
This case was different. It was filed by a private analytics firm using publicly available data. Though rare, these cases do exist. If a private firm using public data could find the alleged aberrations, one would hope the organizationโs own compliance professionals would be able to find similar aberrations if given the resources to look. Additionally, the government is using data analytics to identify cases they want to pursue as well.
Apply These Takeaways to Your Own Regulatory Compliance Program
False Claims Act allegations alleging a lack of medical necessity can take many forms. The kind of service or type of provider may also vary, but these key themes appear in many cases. The astute compliance professional will learn from them and apply the principles to the operations and services provided at their own healthcare organization.
The claims resolved by the settlement are allegations only, and there has been no determination of liability.
Explore the full collection
Missed the first two installments? Start with CJ Wolfโs overview of medical necessity compliance risk, then read the second article on a False Claims Act case involving medically unnecessary hospital stays. This third installment continues the series with a recent SNF enforcement example and practical red flags compliance teams can monitor.
First installment downloadable guide is available below:
Second installment downloadable guide is available below:
Whenย Compliance Riskย Isย Driven byย Medical Necessityย Problemsย
Compliance risks associated with medical necessity happen when providers fail to show clinical evidence that a service is essential for a patient’s health. This often leads to legal, financial and operational consequences.ย
Continue readingThe Compliance Leadership Paradox: Why You Must Chooseย Yourย Hardย
Healthcare compliance leadership requires choosing between the “hard” of stagnation and the “hard” of growth. This post by John R. Nocero and Andrea L. Bordonaro explores how to move beyond basic regulatory tasks toward strategic Revenue Integrity and Operational Excellence.
Regulatory compliance leadership isnโt for the faint of heart. Every day, leaders in our field face a fundamental choice that dictates the future of their organizations and their careers. Itโs a choice between two distinct types of “hard.”
One path leads to a plateau of administrative burden, while the other leads to a breakthrough in operational excellence. To move the needle on key compliance metrics, you must decide which challenges youโre willing to embrace.
The Big Job of Regulatory Change Managementย
Regulatory change rarely lives in one department. It touches:
- Complianceย ย
- Revenue cycleย ย
- Legalย
- Clinical operationsย ย
- ITย
- Qualityย
Someone must translate regulatory language into operational tasksย that those teams can execute. That translation step is where many organizations struggle. Well, guess what?ย Youโreย the translation step.ย

Someone must translate regulatory language into operational tasksย that those teams can execute. That translation step is where many organizations struggle. Well, guess what?ย Youโreย the translation step.ย
Pick theย Hardย Workย andย Thenย Doย Itย
The compliance professionalโs goal is to move metrics. Period. Whether itโs an outcome of no findings during a state inspection, ensuring everyone is signed off on education and training modules, or the weekly operational numbers posted for the entire organization to see, itโs your responsibility You know the work needs to happen. The challenge is getting the organization aligned around it. And thatโs hard.
Yourย organizationโs leadersย trustย you toย handleย it, and theyย probablyย seeย youย asย capableย of doingย more. Thisย visibilityย is anย advantage, especiallyย if youย wantย to move up in the organization. But be aware,ย because corporate and everyone else is watching, looking for cracks in theย armorย or making youย out asย theย target.ย ย
Our advice? Choose your hard. Hereโs how.
Choose Your Hard: Two Optionsย ย
We all want an easier professional life. Less stress from daily meetings. More happiness from the validation of receiving praise from a job well done. Fewer complications from multiple people coming to your door every day to solve problems that arenโt yours.
Hereโs the truth nobody likes to admit: Thereโs no easy path. Thereโs only a choice between hard options. So, choose wisely.
As we see it, you have two options:ย
Option 1: Keepย Doingย Whatย Youโreย Doing: The Administrative Burden of Stagnationย
This isnโt difficult. Youโre basically choosing to do the same things youโve been doing in the same manner. Keep leading the daily morning compliance meeting in the same style. Keep walking through the units waving and shimmying around but not really being authoritative or looking for issues. Talking to employees but not finding anything out, just basically wasting time.
And please, avoid the hard conversations around people constantly interrupting you with their problems instead of doing what you get paid to do.
This is hard, but not for the reason you think. This is hard because, well, we know you, youโre busy, but not productive. You are seen, but you arenโt really doing anything. You think youโre managing, but youโre really just walking around.
You Get Creditย forย Movingย theย Needle, Notย forย Inertiaย
You also think you should be promoted and moved up for doing what youโre supposed to do.
Here’s the hard truth. You donโt get credit for the things youโre supposed to do. If youโre supposed to lead orientation, write policies, make presentations, all that is in your job description. Itโs a basic function of your job. Youโre not getting additional credit for that. You get credit for moving the needle, not stagnation.

This version will feel easy in the moment. But over time, it becomes a cycle. Anxiety creeps in. Stress builds quietly. Communication gets messy. You start telling yourself little lies to stay comfortable. You get moments of happiness, but they donโt last because theyโre built on escape, not stability.
When a compliance department functions as a separate silo rather than a strategic partner, the friction is constant. Youโre working hard, but you are not working toward a breakthrough. You are merely surviving the administrative weight of healthcare regulations.
Option 2: Faceย Challengesย Head-on:ย The Discipline of Operationalizing Complianceย
The alternative is the “hard” of growth. This involves the difficult work of Revenue Cycle Management (RCM) integration, fostering cross-functional alignment, and ensuring that compliance is viewed as a driver of healthcare quality and patient safety.
Itย takesย discipline to move beyond the checklist and into thisย strategy.ย Itโsย “hard” because it requiresย changing the culture of an organization, butย itโsย the only path that leads to:ย
- Sustainable Revenue Integrity:ย Moving from reactive auditing to proactive prevention.
- Enhanced Patient Safety:ย Aligning regulatory requirements with frontline clinical care.ย
- Professional Authority:ย Establishingย compliance as a core pillar of the leadership team.ย
Cut the noise. Reduce the dopamine overload. Sit with discomfort instead of running from it. Say the hard things. Build better habits. Run different meetings. If your boss is giving you a directive that you have to go and talk to the director of nursing and get his or her staff to carry out a particular order, donโt walk up to them and go โHey, boss, wants you to do thisโ and tell them exactly the same order that was told to you. Thatโs not changing. Thatโs parroting.
You need to do that a bit differently, such as โboss wants your team to do XYZ. Do you know how to do this? Does your team know how to do this? What are the gaps? What can I do for you right now?โ
Theย Hard Path Is Uncomfortableย butย Pays Off Over Timeย
See the difference? Itโs subtle, but effective. Basketball fans can think of it as the difference between telling your basketball team to run the triangle offense and perfecting the triple-post with all your front court repeatedly until itโs second nature, creating multiple scoring options based on defensive reactions. When you repeatedly do the hard thing, it pays off over the long term.
This hard path is uncomfortable, and at first, it feels worse, not better. Itโs hard to sit in the discomfort. But over time, something starts to change. Your brain slows down. Your emotions stabilize. You stop needing constant stimulation just to feel okay.
And one day somewhere down the line, you realize: Youโre not chasing happiness anymore or trying to be the part. You donโt need to wear a three-piece suit to the corporate board meeting. You can wear a Roman Reigns OTC crewneck. You donโt have to pretend to be the part. You are the part. And you are just experiencing it.
Choosing theย Toughย Option Compoundsย the Benefitsย
The tricky part about Option 2 is that it doesnโt feel like itโs working at first. Thatโs where most people quit. Option 2 is harder. But it compounds. Itโs the difference between escaping your life and actually building one you donโt need to escape from.
Be aย long gamerย becauseย takingย the โeasyโ pathย nowย often becomes the hardest life later.ย And the hard path now?ย Thatโsย the one that sets you free.ย

Andrea has taught first grade in Willoughby, Ohio for 27 years in the sameย classroom that she attended school as a child. She earned a Bachelor of Science in elementary education with a minor in language arts from John Carroll University and a Masterโs Degree in the Art of Teaching and Education from Marygrove College.ย

John builds and fixes quality departments, while currently thriving as the Administrator & Director of Quality, Risk Management and Compliance at River Vista, a behavioral hospital in Columbus, Ohio.
The Q-Kids โ John R Nocero and Andrea L Bordonaro โ are experts at everything quality, regulatory, education training and compliance and love sharing their knowledge on YouCompli.
Follow them on LinkedIn โ for more quality content or send them a message โ theyโd love to hear from you.
Video resource hub
What to Look for in Regulatory Changeย Management Software forย Healthcareย Complianceย
When a new regulation or updateย is enacted, the clock starts ticking toward its inevitable effective date and another compliance deadline.ย Regulatory change managementย is a moving target with constant deadlines and uncertain task status.ย
Continue readingFinancial Literacy: The “Superpower” Every Modern Compliance Leader Needsย
For healthcare complianceย leaders, financial literacy is notย optional.ย Compliance risk often hides in the fine print of financial data, making literacy a prerequisite for effective oversight.ย ย
Toย identifyย anomalies or potential regulatory “red flags,” compliance officers must move beyond a high-level viewย ofย healthcareย financeย and understand how clinical operations translate into financial entries.
Continue readingBeyond the Penalty:ย What Metrics Should Healthcare Compliance Officers Track?ย
This Q&A withย compliance expert,ย Lisaย Herota, RHIA, CHC, CHIAP, CHPS, CCSย covers best practicesย forย a data-savvy compliance leader. Learn about realistic compliance metrics and how to share them effectively.ย Read more about Lisa’s background and experience at the end of this blog.ย
Continue reading11 Educational Resources on Revenue Cycle and Healthcare Complianceย
Revenue leakage from non-compliance with regulations exposesย health systemsย to compliance risks and penalties.ย Weโveย curated eleven resources to help compliance leaders be better preparedย to guide alignment between regulatory compliance processes and revenue integrity goals.
Over halfย of all regulations deal directly with revenue cycle,ย billingย and finance.ย Most providersย stillย lack an effective system or process to monitor, assess, andย validateย compliance with those regulations. As a result, these organizations leave themselves open to significant risks,ย not to mention significant revenue leakage.ย
These resources are a great place to start learning more about the revenue angle of healthcare compliance.
Continue reading










