
In May 2025, the Centers for Medicare & Medicaid Services (CMS) announced a Risk Adjustment Data Validation (RADV) audit program overhaul.
CMS will begin auditing every eligible Medicare Advantage (MA) plan each year, rather than focusing on a limited sample. This changes how CMS monitors the accuracy of diagnosis coding and risk adjustment in the MA program.
For healthcare practices, especially those in value-based or risk-sharing arrangements, this shift introduces new and immediate risks. Practices will likely face increased demands for medical records, greater scrutiny of documentation, and a higher risk of payment clawbacks.
This article breaks down what healthcare providers need to know about the RADV program’s expansion and how practices can prepare.
| Date | Milestone |
| May 21, 2025 | CMS announces RADV program expansion |
| Sept 1, 2025 | CMS plans to increase audit workforce to 2,000 coders |
| Early 2026 | CMS expects complete audit backlog of PY 2018-PY 2024 |
The Centers for Medicare & Medicaid Services (CMS) conducts Risk Adjustment Data Validation (RADV) audits. They verify the accuracy of diagnosis codes submitted by Medicare Advantage (MA) plans. These codes determine patient risk scores, which directly influence the amount that CMS pays each MA plan for each enrollee.
The risk adjustment model aims to provide higher payments for members with complex health conditions. To calculate these payments, MA plans submit diagnosis codes collected from provider medical records. CMS expects providers to support each code with clear clinical documentation. This must show that the condition was present, evaluated, and addressed during a patient encounter.
RADV audits assess whether the submitted diagnosis codes meet this standard.
During an audit, CMS requests a sample of medical records from an MA plan. Certified coders review these records to determine if the documentation supports the diagnoses that contributed to the enrollee’s risk score. If a provider does not properly document a diagnosis, CMS considers it invalid and may classify the related payment as an overpayment.
To support a diagnosis code in a RADV audit, the provider’s documentation must meet specific criteria. This includes identifying the condition by name, providing evidence that it was evaluated or treated, and ensuring the record is signed and dated by a credentialed provider. Records that are incomplete, vague, or missing key elements may result in the disallowance of the diagnosis.
The audit process typically includes notice to the MA plan, a period for record submission, a formal review, and the potential for repayment if CMS finds errors. While CMS conducts these audits at the plan level, the supporting documentation comes directly from provider records. This makes provider compliance and documentation accuracy critical components of a successful RADV audit outcome.
The expansion of the RADV program is driven by increased federal concern about the accuracy and sustainability of Medicare Advantage (MA) payments.
According to this MedPac Report, the MA program covered more than 33.1 million beneficiaries in 2024 and paid over $453 billion to MA plans in 2023. As the program has grown, so has scrutiny of payment calculations.
CMS has identified problems with unsupported diagnosis codes used to determine patient risk scores. These can lead to overpayments from CMS to MA plans. According to federal estimates, MA plans may be overbilling the program by as much as $17 billion each year.
To address these concerns, CMS is intensifying its efforts to ensure that all submitted diagnoses are backed by valid clinical documentation. By expanding the RADV program, CMS aims to improve payment accuracy, reduce fraud and waste, and protect the long-term financial integrity of the MA program.
CMS’s May 2025 announcement introduced several major policy shifts that affect how audits are conducted, how fast they occur, and the scale of documentation expected.
The expansion of the RADV program will have a direct impact on healthcare providers, particularly those serving large Medicare Advantage populations or participating in risk-based contracts.
Although audits are conducted at the plan level, MA plans rely heavily on provider documentation to support the diagnosis codes that drive their payments. As a result, providers may face financial, operational, and contractual consequences tied to RADV findings.
Many Medicare Advantage contracts contain clauses that allow plans to recover payments from providers if CMS identifies overpayments during an audit. These clawbacks may apply retroactively and can result in significant financial exposure.
Although CMS conducted relatively few Medicare Advantage audits before 2019, enforcement activity has increased significantly in recent years. In 2021 alone, CMS recouped more than $223 million in overpayments from just six Medicare Advantage plans.
In 2022, CMS recovered another $134.7 million from twelve Medicare Advantage plans, reinforcing the agency’s growing focus on audit-based enforcement and financial accountability.
Smaller practices may be particularly vulnerable, as they may not have the reserves to absorb sudden losses or withheld payments. Proactive risk management, including chart audits and contract review, is essential to limit exposure.
Medical records must meet specific standards in order to support the diagnosis codes submitted by MA plans. If records do not meet these criteria, CMS may disallow the code and treat the payment as an overpayment.
CMS expects:
Even small errors, such as missing signatures or vague documentation, can result in disallowed codes.
The expanded RADV program places a significant burden on Health Information Management (HIM) teams, who are on the front lines of responding to audit-related documentation requests. As CMS ramps up audit frequency, expands sample sizes, and accelerates review timelines, HIM departments will face growing pressure to locate, review, and submit large volumes of records accurately and quickly.
This operational load presents multiple challenges:
Without added support, HIM departments may become a bottleneck in audit response efforts, increasing organizational risk. Proactively bolstering HIM capacity is essential to protecting both compliance and revenue.
RADV audits carry more than administrative or financial consequences. When CMS identifies patterns of unsupported diagnosis codes, it may refer those findings to the Department of Justice (DOJ).
These referrals can lead to enforcement actions under the False Claims Act (FCA). These often result in multimillion-dollar settlements or penalties for both health plans and providers.
Recent high-profile cases include:
These cases illustrate how legal liability may extend beyond plans to providers and third-party vendors. Even if a provider is not the primary target, inadequate documentation or improper coding practices can trigger audits, recoupments, reputational harm, and litigation.
To prepare for the expanded RADV audit program, healthcare practices should take proactive steps to reduce risk, improve documentation accuracy, and build internal capacity to respond quickly to record requests.
Start by auditing medical records for patients covered under Medicare Advantage, especially those in risk-sharing or capitated arrangements. Focus on high-volume or high-risk cases where coding complexity may be greater.
When reviewing records, check for:
If your team identifies issues, correct them within allowable timeframes and document the actions taken. Keeping a record of remediation efforts demonstrates a commitment to compliance and may help during future audits.
Educating providers, coders, and administrative staff is essential to reduce the risk of diagnosis-related errors during a RADV audit. Everyone involved in documenting, coding, or managing patient records should understand how CMS evaluates audit validity and what constitutes compliant documentation.
Effective RADV training should include:
Integrate RADV readiness into annual compliance programs and new hire onboarding. Use real-world examples, coding audits, and chart reviews to reinforce best practices. Ongoing education helps ensure that documentation practices are consistent, defensible, and aligned with evolving audit expectations.
CMS typically requires providers and Medicare Advantage plans to submit requested medical records within 25 weeks of receiving a RADV audit notice. While this timeline may seem manageable, retrieving records from multiple systems, validating them, and ensuring audit-ready quality can become overwhelming as audit volume grows.
Practices need a reliable, repeatable process to gather and submit documentation quickly and accurately. To prepare, healthcare practices should:
With built-in tracking, workflow automation, and compliance safeguards, ChartRequest helps reduce administrative pressure and improve audit readiness. Practices using ChartRequest can meet RADV deadlines more efficiently without adding or overwhelming staff.
The RADV program overhaul represents a fundamental change in how CMS audits and enforces the accuracy of diagnosis coding in Medicare Advantage.
For healthcare providers, this shift introduces new layers of financial, administrative, and legal responsibility. Practices must prepare for increased audit volumes, stricter documentation standards, and rising contractual risks.
While preparation cannot eliminate the challenges of RADV audits, it can help ensure that your practice remains compliant, responsive, and financially stable as the program scales up.
ChartRequest helps healthcare organizations respond quickly and securely to audit record requests, with automated workflows that reduce administrative burden and ensure timely compliance.
Our solutions support providers through complex medical record audits, so your team can focus on delivering quality care.
Find out if ChartRequest is right for your organization with a personalized consultation.