Weighing Privilege for Internal Coding Reviews

Weighing Privilege for Internal Coding Reviews

It’s virtually axiomatic that if you’re performing a review of your coding, the review should be done under attorney-client privilege. I have said this before on Monitor Mondays and written about it here. But increasingly, I believe that I was wrong, and most coding reviews should not be done under privilege. Let me explain why.  

Under the 60-day rule, you must report and return an overpayment within 60 days of its identification. Consider the implications of this in the context of a coding review. If you find a problem, you are going to have to disclose it to the government, whether that review is done under privilege or not. The main reason people think of using a privilege is so you don’t have to disclose the bad things you uncover. But since you have to return the overpayment and describe why it happened when there is an overpayment, the privilege isn’t going to have much of an impact. 

There is very little upside to the privilege. 

Next, imagine you perform a review and find that everything is good and there is nothing to disclose to the government – but then an employee raises concerns about the topic you’ve reviewed. In fact, let’s say that they have gone to the government and said that they raised the complaint to you, but you didn’t take them seriously. 

When the government contacts you, you will want to share your internal review and say “we did take the complaint seriously, and we looked, and we think it is fine!” You will want to justify your decision not to refund the money. But if the review was done under privilege, you’re going to need to waive attorney-client privilege to share the report. That’s possible, but it comes with complications. The scope of a privilege waiver can be quite complicated. In theory, one can waive privilege with respect to topic A while maintaining privilege with respect to topic B – but in practice, things get materially more complex.  

This can happen in a variety of ways. For example, perhaps you engaged the consultant to review your physicians’ compensation and coding. The review found that their coding was great, but suggested that a couple of physicians are at the upper end of the fair-market value range, and it suggests reforms. It is far from clear that you can release the coding portion of the report while declining to release the compensation portion. 

I still think there are some benefits of using privilege during a coding review. For example, I often want to tweak the wording of the report, and privilege can prevent a poorly drafted report from being circulated. But increasingly, I think coding reviews may be best done without invoking privilege.  

That doesn’t mean all compliance reviews should be unprivileged. For a compensation review, or an investigation into possible kickbacks, I’m still definitely a fan of using the privilege. In those situations, duty to report is very, very different. If the question is medical necessity, I think privilege still likely makes sense.  But when it comes to coding reviews, I think Carly Simon might be on to something, and that it’s best when “we have no secrets; we tell each other everything.” Essentially, that is what the 60-day rule winds up requiring.

EDITOR’S NOTE:

The opinions expressed in this article are solely those of the author and do not necessarily represent the views or opinions of MedLearn Media. We provide a platform for diverse perspectives, but the content and opinions expressed herein are the author’s own. MedLearn Media does not endorse or guarantee the accuracy of the information presented. Readers are encouraged to critically evaluate the content and conduct their own research. Any actions taken based on this article are at the reader’s own discretion.

Facebook
Twitter
LinkedIn

David M. Glaser, Esq.

David M. Glaser is a shareholder in Fredrikson & Byron's Health Law Group. David assists clinics, hospitals, and other health care entities negotiate the maze of healthcare regulations, providing advice about risk management, reimbursement, and business planning issues. He has considerable experience in healthcare regulation and litigation, including compliance, criminal and civil fraud investigations, and reimbursement disputes. David's goal is to explain the government's enforcement position, and to analyze whether this position is supported by the law or represents government overreaching. David is a member of the RACmonitor editorial board and is a popular guest on Monitor Mondays.

Related Stories

When Better Numbers Don’t Mean Better Care

When Better Numbers Don’t Mean Better Care

A hospital’s mortality ratio improves. Its case mix index rises. More encounters include complications or comorbidities. Those results deserve attention, but they also deserve a

Read More

Leave a Reply

Please log in to your account to comment on this article.

Featured Webcasts

Inpatient Ulcers and Gangrene: Avoid FY 2027 ICD-10-CM Coding, Sequencing, and Documentation Errors

Avoid costly inpatient coding errors involving ulcers and gangrene. This practical FY 2027 ICD-10-CM webcast clarifies pressure injury staging, non-pressure ulcer severity, diagnosis sequencing, documentation requirements, and POA reporting. Through real-world cases, gain the confidence to make defensible coding decisions, reduce denials, strengthen compliance, and support accurate reimbursement.

November 4, 2026

One Chart, Five Truths: How CDI Prevents the Same Diagnosis from Becoming Five Different Outcomes

What happens when everyone reviews the same chart, but reaches a different conclusion? In this case-based clinical documentation integrity (CDI) webcast, Penny Jefferson examines how documentation involving clinical support, timing, causation, linkage, and terminology can produce very different outcomes for ICD-10 coding, reimbursement, quality, risk adjustment, medical necessity, denials, and compliance. Using cases involving postoperative respiratory failure, severe malnutrition, and encephalopathy, you’ll learn the practical CLEAR framework to help attendees learn to evaluate whether a diagnosis is codeable, consistent, specific, reportable, and ultimately defensible across the different teams and systems that rely on the medical record.

September 30, 2026

Mastering Spinal Fusion Coding for Inpatient Facilities: ICD-10-PCS Precision, Documentation, and MS-DRG Impact

Spinal fusion cases are among the most complex inpatient procedures to code, where even minor ICD-10-PCS errors can affect MS-DRG assignment, reimbursement, compliance, and audit outcomes. This practical webcast provides a step-by-step framework for interpreting operative reports, assigning accurate ICD-10-PCS codes, recognizing documentation gaps, and confidently coding complex fusion procedures. You’ll leave with practical tools that improve coding accuracy, reduce denials and audit risk, and strengthen documentation-driven reimbursement decisions.

July 29, 2026

AI, Audits, and the Future of the Revenue Cycle

Artificial intelligence is rapidly transforming healthcare revenue cycle operations, from coding and auditing to compliance and denials. Join industry leaders Pam Warren (MaineHealth) and Raemarie Jimenez (AAPC) for a live fireside chat exploring how AI is changing workflows, workforce roles, payer-provider dynamics, and compliance risk—and what organizations should be doing now to prepare.

Webcast Only Available On ICD10monitor Subscription – Subscribe Below

June 17, 2026

Trending News

Featured Webcasts

Radiation Oncology Fundamentals: Coding, Billing & Compliance for Hospital Outpatient & Professional Services

Join Michael Calahan, PA, MBA for this radiation oncology coding and compliance webcast as he explains the fundamentals of coding, billing, reporting, and documentation for hospital outpatient and professional services. Learn how the 2026 radiation therapy coding changes affect current practices, how to distinguish technical and professional services, and how to address bundling, units, frequency, modifiers, and documentation requirements. Michael will also help you identify radiation oncology coding and billing vulnerabilities that could lead to denials, overpayments, repayment demands, or federal audit exposure.

October 20, 2026

Preparing for 2027: Inpatient & Outpatient Policy Changes for Case Management and Utilization Review

The 2027 CMS policy changes will impact case management, utilization review, reimbursement, and patient status decision-making long before they officially take effect. Join nationally recognized physician advisor Dr. Ronald Hirsch as he explains the finalized and proposed inpatient and outpatient rule changes, expanding bundled payment initiatives, payment updates, and evolving payer expectations. Gain practical guidance to help your organization prepare early, strengthen compliance, reduce reimbursement risk, and confidently navigate the transition to 2027.

September 17, 2026

The Two-Midnight Rule: Strengthening Compliance Through the Fundamentals, 2026 Updates, & 2027 Proposed Changes.

The Two-Midnight Rule continues to be one of Medicare’s most closely monitored compliance areas and now the rules are changing again. Join compliance expert Michael Calahan for a practical review of the latest 2026 policy updates, the proposed 2027 OPPS changes affecting inpatient-only procedures, and the best practices hospitals need to reduce audit risk, strengthen admission decisions, and protect reimbursement. Leave with actionable strategies you can immediately apply to improve compliance and confidently prepare for increased federal and Medicare Advantage scrutiny.

August 11, 2026

Trending News

Prepare for the 2025 CMS IPPS Final Rule with ICD10monitor’s IPPSPalooza! Click HERE to learn more

Get 15% OFF on all educational webcasts at ICD10monitor with code JULYFOURTH24 until July 4, 2024—start learning today!

This Memorial Day, we honor those who gave all for our freedom. Take 20% off sitewide through May 29 with code MEMORIAL26 at checkout

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 1 with code CYBER25

CYBER WEEK IS HERE! Don’t miss your chance to get 20% off now until Dec. 2 with code CYBER24