Yesterday’s New York Times headline read that “Medicare Is Faulted on Shift to Electronic Records.”  The story describes an Office of Inspector General (OIG) report, released November 29, 2012, that faults the Centers for Medicare and Medicaid Services (CMS) for not providing adequate oversight of the Meaningful Use incentive program. Going after “waste, fraud, and abuse” always makes good headlines, but in this case, the story is not so simple.

For those not intimately familiar with the CMS policy, in 2009, Congress passed the Health Information Technology for Economic and Clinical Health (HITECH) Act.  The program, administered through CMS and state Medicaid programs, created financial incentives for doctors (and other eligible professionals) and hospitals to adopt and “meaningfully use” a certified electronic health record (EHR).  To receive financial incentives, which began to be paid in May 2011, doctors and hospitals “attest” that they have met the meaningful use requirements, providing an affirmation for which they are held legally accountable.

The process works as follows: health care providers visit a CMS website, register, and enter data demonstrating that their EHRs are “certified” and that they met each of the individual requirements for meaningful use. Then they attest that that all the data they entered is true.  For example, a physician might have to report, to meet just one of the 20 meaningful use measures, how many prescriptions she wrote over the past 90 days, and how many she wrote electronically.  My conversations with colleagues suggest that it can take a lot of time for providers to gather all the data they need to “attest” to meeting Meaningful Use.  Then, CMS runs logic checks to ensure that the numbers entered make sense and, if there are no errors, they cut the provider a check. Through September, 2012, CMS paid out about $4 billion in incentives to 82,000 professionals and more than 1,400 hospitals.

What The Office Of Inspector General Recommended …

The Office of Inspector General examined how carefully CMS is overseeing this program, with particular interest given the reliance on self-reporting of meaningful use, and found areas for improvement.  Several of the OIG recommendations for improving oversight are sensible, measured, and very likely to improve the integrity of the program.  For instance, OIG recommends that CMS provide detailed guidance to providers about what constitutes adequate documentation to support their attestation.  This is the equivalent of the IRS providing guidance on what documentation you need to prove that your tax deductions are legitimate.  Another reasonable OIG recommendation is that certified EHRs be able to produce automated reports about all the functions required to meet meaningful use.  I suspect this will not be particularly onerous for EHR vendors to meet.

… And Where OIG Went Wrong

Where the OIG goes astray is their recommendation that CMS “obtain and review supporting documentation” from selected doctors and hospitals prior to payment.  This is the equivalent of the IRS asking a large chunk of Americans to send in their receipts and detailed explanations along with their 1090s before they get their refund.  Based on the screening tool discussed in the OIG report, about 100,000 physicians and 800 hospitals would be subject to creating these detailed reports with a large amount of supporting evidence each year — and CMS would need to add a substantial number of staff to review all these reports before making any payments.

CMS chose not to concur with this recommendation, and I think CMS is right. There is little evidence to date of any fraud, waste, or abuse in the EHR incentive program.  Were they to follow this OIG recommendation, CMS would effectively make waste in the program more likely.

This is not to say that there are not areas in which CMS should be more aggressive in their oversight.  Indeed, CMS pays out more than $500 billion in taxpayer money each year for medical care, and there is ample evidence that a substantial proportion of that money goes to health care services that harm our nation’s elderly while providing little clinical benefit — that’s the real “waste, fraud, and abuse.” We continue to pay billions for poor quality and unsafe care.  CMS needs to develop more sophisticated and nuanced approaches to ensuring that it pays more for better care, pays less for poor quality care, and protects not only the taxpayer dollar, but also the health of Medicare beneficiaries.  That’s worth getting aggressive about.

CMS’s Approach On EHR Payments Strikes The Right Balance

Given that there is no evidence that doctors and hospitals are systematically committing federal fraud by reporting that they are meaningfully using EHRs when they are not, CMS has instead planned a post-payment audit.  And if physicians or hospital executives are found to have deliberately and consciously lied in order to get incentives, they should be prosecuted.  If they made an honest mistake — and given the complexity of meaningful use criteria, this is a real possibility — they should give the money back and potentially pay a fine.  But creating a huge new burden will dissuade many providers from even adopting EHRs, and continuing to rely on paper records is no way to deliver health care.  The cost of the latter to the American public, in terms of duplicate tests, medical errors, and general poor quality care, is far more substantial.

In each regulatory decision, there is a balancing act:  have too few checks and there will be widespread fraud; be overly heavy-handed and you may end up penny-wise and pound-foolish.  The approach that CMS seems to be taking is, in the famous words of President Reagan, “trust, but verify.”  Trust that providers are being honest – but verify through selected audits.  It appears to get the balance right. This approach was good enough for President Reagan’s dealings with the Soviet Union and I suspect that it’s good enough for CMS’s dealings with doctors and hospitals.

Ashish Jha, MD, MPH is the C. Boyden Gray Associate Professor of Health Policy and Management at the Harvard School of Public Health. He blogs at An Ounce of Evidence.

Share on FacebookTweet about this on TwitterShare on Google+Share on LinkedIn

7 Responses for “Trust But Verify: Why CMS Got It Right on EHR Oversight”

  1. Curly Harrison, MD says:

    Part of meaningful use are transfer of care documents, filled out by the doctors.

    These are NASTY, and provide nothing that is meaningfully useful.

    Talking about “waste, fraud, and abuse”, for a hospital to have been paid millions for its vendor to put in such crap is indeed, “waste, fraud, and abuse”

    The doctors are being abused in all of this and the patients suffer as a result.

  2. Whatsen Williams says:

    What a flawed concept! There is not any data to support any of the MU requirements.

    This is just another experiment on the doctors and the patients, while screwing the taxpayers, regardless of how the system is gamed.

    The HIT vendors are financially raping the USA and its citizens.

  3. Doctor McDonald says:

    I just finished clicking out transition of care document for a patient at a hospital that collected $ millions from the US for Attesting to MU.

    The process is tedious, user unfriendly, and error promotion, and increases utilization.

    The highest paid professionals are serving as clerks to click in meaningfully useless information for the government, enabling the hospitals and their executives to load up on the cash.

    A sham on America. Theft by deception.

    Who are you to critique the OIG? The OIG did not go far enough, for it neglected the safety of the patients in this infrastructure experiment.

  4. BobbyG says:

    Gotta love all this angry wailing and foot stomping.

    “Who are you to critique the OIG?”

    Well, he’s a physician with an extensive Sheet that can be assessed for his Cred. Unlike you.

    This particular OIG thing is mostly about fiscal cliff politics (i.e., preserving their budgetary seat at the table). No mystery about the timing here. The CMS “Figliozzi Letters” have already gone out. MU audits are ensuing (one of our REC clients got one).

  5. southern doc says:

    “The cost of the latter to the American public, in terms of duplicate tests, medical errors, and general poor quality care, is far more substantial.”

    And which of the above have proven to be significantly ameliorated by EMRs?

  6. Wow. I had no idea. I’m an anesthesiologist. Somebody else does all this stuff. I’ll tell you what meaningful use is – it’s using something that means something. If a doctor has to document and attest to 20 different meaningful use measurements, she has no time to do anything meaningful, like taking care of her patients. If EMRs are supposed to save money, they can’t be requiring everyone to hire more people to keep track of all the regulations. CMS, you can keep your money. I’m going to go do something meaningful.

Leave a Reply


Founder & Publisher

Executive Editor

Editor, Business of Healthcare

Contributing Editor

Contributing Editor

Business Development

Editor-At-Large, Wellness

Editor-At-Large, Europe



The Health Care Blog (THCB) is based in San Francisco. We were founded in 2003 by Matthew Holt. John Irvine joined a year later and now runs the site.


Interview Requests + Bookings. We like to talk. E-mail us.

Yes. We're looking for bloggers. Send us your posts.

Breaking health care story? Drop us an e-mail.


We frequently accept crossposts from smaller blogs and major U.S. and International publications. You'll need syndication rights. Email a link to your submission.


Op-eds. Crossposts. Columns. Great ideas for improving the health care system. Pitches for healthcare-focused startups and business.Write ups of original research. Reviews of new healthcare products and startups. Data-driven analysis of health care trends. Policy proposals. E-mail us a copy of your piece in the body of your email or as a Google Doc. No phone calls please!


Healthcare focused e-books and videos for distribution via THCB and other channels like Amazon and Smashwords. Want to get involved? Send us a note telling us what you have in mind. Proposals should be no more than one page in length.

If you've healthcare professional or consumer and have had a recent experience with the U.S. health care system, either for good or bad, that you want the world to know about, tell us about it. Have a good health care story you think we should know about? Send story ideas and tips to

REPRINTS Questions on reprints, permissions and syndication to



Affordable Care Act
Business of Health Care
National health policy
Life on the front lines
Practice management
Hospital managment
Health plans
Specialty practice
Emergency Medicine
Quality, Costs
Medical education
Med School
Public Health

Electronic medical records
Accountable care organizations
Meaningful use
Online Communities
Open Source
Social media
Tips and Tricks


Health 2.0
Log in - Powered by WordPress.