Coding Audits: A Compliance Necessity

Coding audits provide insight into the process of coding itself.

The U.S. Department of Health and Human Services (HHS) Office of Inspector General (OIG) has developed several healthcare compliance programs, and within the key elements of these programs you will find forms of auditing, along with monitoring. Auditing is viewed in the regulatory world as a mainstay for compliance, integrity, and fraud identification and/or avoidance.

One of the purposes of auditing is to identify a Medicare overpayment (whether fee-for-service or managed care). A Medicare overpayment is a payment that exceeds proper amounts established via regulation and/or statute. Errors occur, mistakes happen, and because our healthcare system is very “code-dependent,” we cannot function ethically without the inclusion of coding audits in our operations and compliance activities.

When we (you) think of coding audits, do you think of the following?

  • An official examination and validation of the medical record documentation and coding
  • A systematic review of the medical record, including the clinical coding, along with a written analysis and report of findings

I have heard and observed a variety of reactions to the words “coding audit.” Often, those reactions and words are not too positive, to be honest. But this is where we really need to change the perception, reaction, and attitude about coding audits. They need to be viewed as a compliance necessity, a quality assurance activity, an educational opportunity, and a helpful way to improve accuracy. Basically, coding audits are a good thing, and a good activity to perform.

Coding audit frequency will depend on the occurrence of coding changes (ICD-10-CM/PCS and CPT®), regulatory changes, compliance issue discovery, and also if there are ongoing patterns and trends identified in prior audits. Thus, we should not and cannot perform our clinical coding without having coding audits conducted regularly – or at a minimum, semi-annually. Being proactive rather than reactive when it comes to coding audits is really a best practice.

Although coding audits typically are conducted with the review and analysis of the medical record documentation and coding, they really are more than this, and should also include a review of coding (or CDI – clinical documentation integrity) policies and procedures, and even a review of the coding operational functions, along with the query process (forms) – so keep all of that in mind.

Coding audits provide insight into the process of coding itself, and how and why a particular code may or may not have been selected (root cause analysis). In addition, there is a 95-percent (or higher) accuracy standard across the industry for clinical coding against which we want to benchmark ourselves. It is like a scorecard or report card, and this is certainly beneficial to any facility, department, and individual performing the coding to have a goal to strive for – or even exceed.

Understanding all the aspects of a coding audit are beyond the scope of this article, but there are some key steps that are important to include when developing your coding audit plan, or having one performed.

 Seven Key Steps to Coding Audits:

  • Identify who will perform the coding audit, internal or external auditing staff (or both); select those who have the experience and qualifications.
  • Develop the scope of the coding audit: setting types (inpatient, outpatient, physician office, etc.). Also, determine the volume of records (number of encounters), making sure the audit size is relevant and time frame appropriate (by quarter, one specific month, etc.). Also, decide whether the audit will be random versus focused (or a combination). Define a coding variance or error so there are no surprises at the end of the audit.
  • Determine the type of coding audit: pre-bill/prospective and/or retrospective (after the claim/bill has been paid). Ensure that both diagnosis and procedure (both ICD-10-CM/PCS and CPT) codes are audited.
  • Secure auditing resources and tools: ICD-10-CM/PCS guidelines, code books, editions of the American Hospital Association (AHA) Coding Clinic, the CPT code book, American Medical Association (AMA) CPT Assistant, Centers for Medicare & Medicaid Services (CMS) manual, CMS transmittals, etc. (software tools as well). Request the coding policies and procedures as well as query forms or templates. Also, request the workflow (document) of the coding process to gain a clear understanding of the process and data flow.
  • Perform chart review and process (auditing function): while performing the review (reading over the medical record documentation and the clinical coding), often, the claim/UB will also be utilized. Also, document the findings on an audit worksheet tool, and provide a written explanation of the findings and justification (quote official sources).
  • Create an audit summary (include patterns and trends), along with recommendations (include next audit time frame). Ensure these include a written narrative summary report, verbal (virtual) presentation of the audit findings, etc. Allow time for the coding staff to review the findings and provide their input and/or response (this should be done in a timely manner – not more than 7-8 business days). Keep in mind that this is “educational,” not punitive.
  • Implement corrective action and resolution of coding errors (variances): this includes any rebilling of overpayments (rebill within 60 days of the overpayment confirmation) or underpayment that resulted from the changes in the clinical coding. Document this process and confirm its completion. If there are systemic patterns or trends, you may need to include your compliance and legal staff to help determine future corrective actions (refunds) or audits.
  • Provide/conduct education: the health information management (HIM) coding staff, CDI staff, and also physicians; discuss with physician liaison. All of these should receive education that is supportive and helpful.

It’s also a great practice for auditors and coding staff to regularly to view the Program for Evaluating Payment Patterns Electronic Report (PEPPER), which is a free tool developed by the TMF Health Quality Institute, under contract with CMS. Using clinical coding data, PEPPER results in “summarizing provider-specific Medicare data statistics for target areas often associated with Medicare improper payments due to billing, MS-DRG coding, and/or admission necessity issues.” The PEPPER can offer a way to focus your audit targets and compare and contrast the information with national or state data. I have found PEPPER to be helpful when developing a coding audit plan, as well as when conducting post-audit education.

Also, look at the topics that the Medicare Recovery Audit Contractors (RACs) have published, as this may again provide an area of focus for your coding audit. You can find these targets or topics online at: https://www.cms.gov/Research-Statistics-Data-and-Systems/Monitoring-Programs/Medicare-FFS-Compliance-Programs/Recovery-Audit-Program

The OIG helps us by conducting coded data analysis and performing audits when they identify a compliance risk. Although published reports by the OIG on “coding” often are extremely focused and specific, there is something to learn and gain from reading through these reports.

Ultimately, coding audits should be performed in all healthcare settings, on all lines of service, and across all payors. This includes auditing any “automated” or computer-generated coding as well. In the healthcare world of regulatory scrutiny, driven by fraud, waste, and abuse, coding audits are necessary and essential to include in your compliance program or plan.

Facebook
Twitter
LinkedIn

Gloryanne Bryant, RHIA, CDIP, CCS, CCDS

Gloryanne is an HIM coding professional and leader with more than 40 years of experience. She has an RHIA, CDIP, CCS, and a CCDS. For the past six years she has been a regular speaker and contributing author for ICD10monitor and Talk Ten Tuesdays. She has conducted numerous educational programs on ICD-10-CM/PCS and CPT coding and continues to do so. Ms. Bryant continues to advocate for compliant clinical documentation and data quality. She is passionate about helping healthcare have accurate and reliable coded data.

Related Stories

When Better Numbers Don’t Mean Better Care

When Better Numbers Don’t Mean Better Care

A hospital’s mortality ratio improves. Its case mix index rises. More encounters include complications or comorbidities. Those results deserve attention, but they also deserve a

Read More

Leave a Reply

Please log in to your account to comment on this article.

Featured Webcasts

Inpatient Ulcers and Gangrene: Avoid FY 2027 ICD-10-CM Coding, Sequencing, and Documentation Errors

Avoid costly inpatient coding errors involving ulcers and gangrene. This practical FY 2027 ICD-10-CM webcast clarifies pressure injury staging, non-pressure ulcer severity, diagnosis sequencing, documentation requirements, and POA reporting. Through real-world cases, gain the confidence to make defensible coding decisions, reduce denials, strengthen compliance, and support accurate reimbursement.

November 4, 2026

One Chart, Five Truths: How CDI Prevents the Same Diagnosis from Becoming Five Different Outcomes

What happens when everyone reviews the same chart, but reaches a different conclusion? In this case-based clinical documentation integrity (CDI) webcast, Penny Jefferson examines how documentation involving clinical support, timing, causation, linkage, and terminology can produce very different outcomes for ICD-10 coding, reimbursement, quality, risk adjustment, medical necessity, denials, and compliance. Using cases involving postoperative respiratory failure, severe malnutrition, and encephalopathy, you’ll learn the practical CLEAR framework to help attendees learn to evaluate whether a diagnosis is codeable, consistent, specific, reportable, and ultimately defensible across the different teams and systems that rely on the medical record.

September 30, 2026

Mastering Spinal Fusion Coding for Inpatient Facilities: ICD-10-PCS Precision, Documentation, and MS-DRG Impact

Spinal fusion cases are among the most complex inpatient procedures to code, where even minor ICD-10-PCS errors can affect MS-DRG assignment, reimbursement, compliance, and audit outcomes. This practical webcast provides a step-by-step framework for interpreting operative reports, assigning accurate ICD-10-PCS codes, recognizing documentation gaps, and confidently coding complex fusion procedures. You’ll leave with practical tools that improve coding accuracy, reduce denials and audit risk, and strengthen documentation-driven reimbursement decisions.

July 29, 2026

AI, Audits, and the Future of the Revenue Cycle

Artificial intelligence is rapidly transforming healthcare revenue cycle operations, from coding and auditing to compliance and denials. Join industry leaders Pam Warren (MaineHealth) and Raemarie Jimenez (AAPC) for a live fireside chat exploring how AI is changing workflows, workforce roles, payer-provider dynamics, and compliance risk—and what organizations should be doing now to prepare.

Webcast Only Available On ICD10monitor Subscription – Subscribe Below

June 17, 2026

Trending News

Featured Webcasts

Radiation Oncology Fundamentals: Coding, Billing & Compliance for Hospital Outpatient & Professional Services

Join Michael Calahan, PA, MBA for this radiation oncology coding and compliance webcast as he explains the fundamentals of coding, billing, reporting, and documentation for hospital outpatient and professional services. Learn how the 2026 radiation therapy coding changes affect current practices, how to distinguish technical and professional services, and how to address bundling, units, frequency, modifiers, and documentation requirements. Michael will also help you identify radiation oncology coding and billing vulnerabilities that could lead to denials, overpayments, repayment demands, or federal audit exposure.

October 20, 2026

CMS Compliance & Audit Readiness Bundle

Get two essential perspectives on CMS compliance for $199.

The Two-Midnight Rule helps you navigate short-stay admissions, patient status, and evolving 2026-2027 requirements, while CMS CRUSH explores the next wave of program integrity, payment oversight, and data-driven scrutiny.

Two RACmonitor webcasts. One practical approach to preparing for increased CMS oversight.

September 20, 2026

Preparing for 2027: Inpatient & Outpatient Policy Changes for Case Management and Utilization Review

The 2027 CMS policy changes will impact case management, utilization review, reimbursement, and patient status decision-making long before they officially take effect. Join nationally recognized physician advisor Dr. Ronald Hirsch as he explains the finalized and proposed inpatient and outpatient rule changes, expanding bundled payment initiatives, payment updates, and evolving payer expectations. Gain practical guidance to help your organization prepare early, strengthen compliance, reduce reimbursement risk, and confidently navigate the transition to 2027.

September 17, 2026

Trending News

Prepare for the 2025 CMS IPPS Final Rule with ICD10monitor’s IPPSPalooza! Click HERE to learn more

Get 15% OFF on all educational webcasts at ICD10monitor with code JULYFOURTH24 until July 4, 2024—start learning today!

This Memorial Day, we honor those who gave all for our freedom. Take 20% off sitewide through May 29 with code MEMORIAL26 at checkout

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 1 with code CYBER25

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24