Independent Health — Up-To-$98M MA Risk-Adjustment Settlement

What happened

Independent Health Association and its affiliate Independent Health Corporation, headquartered in Buffalo, New York, agreed to pay up to $98 million to resolve allegations that they violated the False Claims Act by knowingly submitting or causing the submission of invalid diagnosis codes to Medicare for Medicare Advantage Plan enrollees.

The settlement structure is unusual and worth understanding: Independent Health will make $34.5 million in guaranteed payments through 2028, with contingent payments of up to $63.5 million over four years if certain financial conditions are met. The settlement amount is based on Independent Health's ability to pay — a structural feature that signals the underlying alleged liability may have been larger than the cash settlement reflects.

The conduct at issue spanned 2011 through at least 2017. The government alleged that Independent Health created a wholly-owned subsidiary, DxID LLC, specifically to conduct retrospective chart review and identify diagnoses that had not been submitted to CMS for risk adjustment. DxID then "nudged" providers to fill out addenda to add those diagnoses to medical records retroactively.

The government's allegations included:

• DxID conducted retrospective chart review to identify additional diagnosis codes that could be submitted for risk adjustment even when insufficient support existed in the medical record
• DxID nudged providers to file addenda retroactively, creating documentation paths to support diagnosis-code submissions after the original encounter
• The pattern continued for at least six years before the qui tam action was filed

DxID ceased operations in 2021. The settlement also includes a $2 million payment from Betsy Gaffney, the former CEO of DxID, personally.

The qui tam case was filed in 2012 by Teresa Ross, a former employee of Group Health Cooperative (now Kaiser Foundation Health Plan of Washington). The government joined the case in 2021. Ross will receive a relator share of at least $8.2 million. The case originated from her experience with DxID at Kaiser before the same vendor relationship extended to Independent Health.

Independent Health also entered into a five-year Corporate Integrity Agreement (CIA) with HHS-OIG. The CIA requires Independent Health to hire an Independent Review Organization to annually review a sample of its Medicare Advantage patients' medical records and associated internal controls to help ensure appropriate risk-adjustment payments.

Why this matters — for compliance officers

Three things compliance officers at MA-affiliated provider organizations should hold onto from this case:

1. Vendor-relationship liability is now explicitly on the table. The DOJ's enforcement focus is no longer limited to Medicare Advantage Organizations themselves. Coding vendors (DxID), executive-level vendor decision-makers (Gaffney personally), and downstream physician practices can all be swept into the same settlement. If your organization uses a coding vendor or risk-adjustment analytics partner, the vendor's practices become your enforcement surface.

2. "Ability to pay" settlements signal hidden severity. The structure here — $34.5M guaranteed plus up to $63.5M contingent — indicates the government's underlying damages model was substantially larger than the cash settlement. For comparable conduct at a financially stronger defendant, the headline number would have been higher. Compliance officers should not treat ability-to-pay settlements as setting the "market" for similar conduct.

3. The Corporate Integrity Agreement is the operational consequence. The five-year CIA imposes Independent Review Organization oversight, annual chart-review audits, and documentation standards that materially increase compliance cost for the duration. Every CIA in this space sets the operational template for what defensible risk-adjustment compliance looks like — reading the published CIA terms is one of the cheapest ways to understand what HHS-OIG considers adequate going forward.

What ArrowISE learns from this case

Defensibility Index dimensions implicated. As with the Kaiser case, Independent Health primarily implicates Medicare Advantage coding-process integrity rather than the Stark Law / AKS arrangement compliance that is ArrowISE's core domain. The pattern is vendor-driven retrospective documentation enhancement, not arrangement compensation.

However, this case adds one structural lesson that does translate directly to ArrowISE's domain: vendor relationship visibility. When DxID was the source of the unsupported diagnosis codes, Independent Health nevertheless bore primary FCA liability. The analogous pattern in arrangement compliance is the FMV valuation vendor: when an outside valuation firm produces an FMV opinion that proves to be unreliable or stale, the contracting hospital still owns the resulting Stark exposure. ArrowISE's Defensibility Index captures the FMV opinion issuer, date, and refresh schedule explicitly — making vendor-relationship attribution visible in the same record as the underlying arrangement.

Schena-Shield™ pattern rules informed by this case:

Independent Health, like Kaiser, sits adjacent to ArrowISE's core Stark/AKS arrangement-compliance domain. Both cases are included in this library because MA-affiliated provider organizations face derivative liability for upstream payer coding practices, and because the structural lessons — especially vendor-relationship attribution — recur in arrangement compliance under different names.

The numbers