Most independent practices have a binder. Someone assembled it years ago, it sits on a shelf, and nobody has opened it since. That is not a compliance program. That is a document.

A real program has an owner, a schedule, and evidence that it runs. If a payer or a regulator asks what you do to prevent improper billing, you need an answer with dates attached to it.

The Office of Inspector General has long described seven elements of an effective compliance program. We build against that framework because it is the standard you will be measured against.

Policies that reflect how your practice actually operates, not a template downloaded from somewhere with another practice name still in the footer.

Someone owns this. In a small practice that is usually the administrator, and they need to know what the role requires.

Documented, recurring, and role appropriate. Front desk staff need different training than providers.

A way for staff to raise a concern without going through the person the concern is about.

The element practices skip most often. Periodic chart and claim review, on a schedule, with the findings written down.

Consistent consequences, applied the same way regardless of who is involved.

What happens when you find something. Investigation, correction, repayment where required, and a change that prevents recurrence.

• HIPAA privacy and security, including risk analysis and breach response planning
• OSHA requirements applicable to a clinical setting
• Fraud, waste, and abuse, including the billing practices most likely to create exposure
• Corporate compliance program design and annual review
• Employment and human resources practices as they intersect with compliance obligations
• Payer specific requirements that carry contractual compliance terms

We are billing people first, which shapes where we focus. The compliance risk that actually ends practices is usually billing conduct, not paperwork.

Independent practices without dedicated compliance staff. Groups that have grown past the point where informal oversight works. Practices entering a payer contract or a private equity transaction where compliance posture is going to be examined.

And practices that already found something and need help responding correctly.

Cyndi Walker holds the Certified Healthcare Business Consultant credential and has worked in medical billing for more than forty years. Medicus carries corporate accreditation from HBMA and the National Society of Certified Healthcare Business Consultants.

We are not a law firm and we do not provide legal advice. What we provide is practical compliance structure from people who have watched what happens when it is missing.

For most practices it is either a contractual requirement, a condition of participation, or simply the difference between a manageable problem and an unmanageable one. The cost of building it is small compared to the cost of not having it when you need it.

A working program for a small practice typically takes six to ten weeks. Most of that is gathering how you actually do things now, which takes longer than writing the policies.

No. We build the operational program. Where a question is genuinely legal, we will tell you it is legal and recommend you take it to counsel.

You address it. That may mean a corrected claim, it may mean a voluntary refund, and in some situations it means involving counsel. We will help you understand the scope and the options.

• Chart Review and Clinical Audit Services for the auditing element
• Coding Education and Training for the training element
• Clinical Documentation Improvement to reduce the underlying risk
• Quality Payment Program Support

Let us look at what you have and tell you honestly where the gaps are.