Kaiser Permanente Affiliates — $556M MA Risk-Adjustment Settlement

What happened

The largest False Claims Act settlement to date involving Medicare Advantage risk-adjustment allegations. Five Kaiser Permanente affiliates agreed to pay $556 million to resolve allegations that, between 2009 and 2018, they submitted unsupported diagnosis codes for MA enrollees to inflate risk-adjusted payments from CMS.

According to the U.S. Department of Justice, Kaiser developed mechanisms to mine each patient's past medical history for diagnoses that had not been submitted to CMS for risk adjustment. Kaiser then sent "queries" to its providers urging them to add these diagnoses to medical records via addenda — often months, and sometimes more than a year, after the original patient visit.

The government alleged that:

• Many of the diagnoses added by providers had nothing to do with the patient visit in question, in violation of CMS requirements for risk-adjustment submissions
• Kaiser set aggressive physician-specific and facility-specific goals for adding risk-adjustment diagnoses
• The retrospective chart review and addenda process emphasized adding revenue-enhancing codes without ensuring that unsupported diagnoses were corrected or deleted — an asymmetry the government characterized as a one-way ratchet on revenue

Kaiser did not admit liability as part of the settlement.

The case originated as a qui tam action filed by two former Kaiser employees, Ronda Osinek (a medical coder) and James Taylor. The relators alleged that Kaiser pressured physicians to retroactively add diagnosis codes to increase reimbursement rates. The relators received a combined $95 million share of the settlement under the FCA whistleblower provisions.

The settling Kaiser Permanente entities were Kaiser Foundation Health Plan Inc., Kaiser Foundation Health Plan of Colorado, The Permanente Medical Group Inc., Southern California Permanente Medical Group, and Colorado Permanente Medical Group P.C.

Why this matters — for compliance officers

Three things compliance officers at MA-affiliated provider organizations should hold onto from this case:

1. Retrospective chart review is not, by itself, a problem. CMS-permitted chart review is a legitimate compliance activity. What the government targeted was the asymmetry — adding revenue-enhancing codes without symmetric deletion of unsupported existing codes. A defensible chart-review program corrects in both directions.

2. Quota structures are the highest-risk artifact. The government emphasized physician-specific and facility- specific goals for adding diagnoses. Any internal metric that ties physician or department performance to additional diagnosis-code submissions creates an enforcement target. Compliance officers should audit their organization's incentive structures for risk-adjustment-coding metrics.

3. The whistleblower relationship is structural, not incidental. The relators in this case were a medical coder and another former employee. Coding is exactly the function with the closest visibility into the asymmetry between "added codes" and "deleted codes." Operating a compliant program means making coders comfortable raising concerns through internal channels before they consider qui tam.

What ArrowISE learns from this case

Defensibility Index dimensions implicated. This case primarily implicates dimensions adjacent to but distinct from physician-arrangement Stark Law. The pattern is coding-process integrity, not arrangement compensation. However, the structural lesson — that asymmetric processes for revenue-enhancing actions are an enforcement signal — applies directly to the arrangement-compliance domain.

In arrangement compliance, the analogous pattern is FMV opinion refresh asymmetry: rigorously refreshing FMV when compensation goes up, but never refreshing when market rates go down. ArrowISE's FMV Sentinel monitors expiration regardless of direction. See the Defensibility Index methodology for how FMV currency is scored.

Schena-Shield™ pattern rules informed by this case:

ArrowISE today is purpose-built for physician arrangement compliance under Stark Law and the Anti-Kickback Statute. MA risk-adjustment coding integrity is a related but distinct compliance domain. The Kaiser case is included in this library because MA-affiliated provider organizations face derivative liability for upstream payer coding practices, and because the structural patterns — asymmetric process, quota incentives, retrospective revenue capture — recur in arrangement-compliance contexts under different names.

For organizations with MA exposure: compliance officers should treat ArrowISE's arrangement library as covering one of the three high-risk compliance domains (Stark, AKS, MA risk-adjustment), and ensure their MA-coding compliance program independently addresses the patterns SS-MA-01 through SS-MA-03.

The numbers