How the OIG’s First Compliance Guidance in 27 Years Rewrites the Rules for Retrospective Programs
27 Years of Silence, Then This
On February 3, 2026, the OIG published its Medicare Advantage Industry-wide Compliance Program Guidance, the first update to MA compliance guidance since 1999. For 27 years, the MA industry operated without updated federal compliance direction even as enrollment grew from under 10 million to over 33 million beneficiaries, risk adjustment payments expanded to over $615 billion annually, and coding practices evolved in ways the original guidance never anticipated.
The 2026 ICPG isn’t a suggestion. It’s the OIG’s formal articulation of enforcement priorities based on decades of audits, investigations, and enforcement actions. It identifies specific high-risk practices, names the compliance structures it expects organizations to maintain, and signals where enforcement attention will concentrate. For retrospective risk adjustment programs, the guidance is specific and direct.
What the Guidance Says About Chart Reviews
The ICPG flags three retrospective practices as suspect for inflating risk scores: chart reviews that only add diagnoses without removing unsupported ones, in-home health risk assessments that generate diagnoses never considered in patient care, and EHR prompts designed to surface diagnosis codes for risk adjustment purposes rather than clinical decision-making.
On chart reviews specifically, the guidance warns that failing to remove unsupported codes is a compliance failure, not just an operational gap. This is significant because it frames deletion as an obligation, not an option. Plans that run add-only programs aren’t just missing an opportunity to clean their data. They’re failing to meet a compliance expectation the OIG has now formally published.
The guidance recommends that plans audit high-risk diagnosis codes both before and after CMS submission. That’s a two-phase validation process: pre-submission review to catch problems before they’re submitted, and post-submission surveillance to catch problems that develop after submission as documentation ages or conditions change.
What the Guidance Means for Program Design
The ICPG effectively creates a compliance blueprint for retrospective programs. Plans can evaluate their own operations against what the OIG explicitly identified as expected practices and high-risk activities. The gap analysis is straightforward: does your program only add codes? That’s flagged. Does your program remove unsupported codes? That’s expected. Do you audit high-risk diagnoses before and after submission? That’s recommended.
Plans that aligned their programs to these standards before the guidance was published are in strong compliance positions. Plans that didn’t now have a documented standard they’re measurably failing to meet. The guidance doesn’t create new law, but it creates the framework OIG will use to evaluate compliance during investigations, audits, and enforcement actions.
The timing matters. The guidance arrived alongside $670+ million in DOJ settlements, OIG audits with 80-91% error rates, and congressional investigations. It’s not an isolated document. It’s the compliance framework that contextualizes everything else the government has done in risk adjustment enforcement over the past two years.
The Retrospective Program Checklist
Every Retrospective Risk Adjustment program should be evaluated against the ICPG’s explicit standards: two-way coding that adds and removes, pre-submission MEAT validation, post-submission surveillance, audit of high-risk diagnosis categories, and evidence trails that document every coding decision. Plans that meet these standards are aligned with the OIG’s published expectations. Plans that fall short now have a public document that quantifies exactly how far short they fall, and that document will be referenced in every future enforcement action.
