On February 6, 2024, the US Centers for Medicare & Medicaid Services (CMS) released a set of frequently asked questions (FAQs) related to Medicare Advantage (MA) coverage criteria and utilization management (UM) requirements. The FAQs provide guidance on new regulatory requirements regarding the use of internal coverage criteria for basic benefits, prior authorization, UM tools and more, which were outlined in an April 2023 final rule and went into effect for coverage beginning on January 1, 2024.
USE OF AI IN COVERAGE DETERMINATIONS
Stakeholders have raised questions concerning the role of artificial intelligence (AI), algorithms and similar tools in making coverage determinations. This discussion has attracted more attention as new technologies emerge and expand across the industry. In addition, several health insurers are now facing class action litigation regarding their alleged use of AI models or algorithms in the review and denial of medical claims.
In the preamble to the final rule, CMS stated that Medicare Advantage Organizations (MAOs) must make medical necessity determinations based on the circumstances of specific individuals, as opposed to relying on an algorithm or software that does not consider individual circumstances. In the FAQs, CMS clarifies that an algorithm or software tool can be used to assist MAOs in making coverage determinations, provided that such tools comply with all applicable coverage determination rules. CMS reasons that “an algorithm that determines coverage based on a larger data set instead of the individual patient’s medical history, the physician’s recommendations, or clinical notes would not [emphasis added] be compliant[.]” CMS specifically notes that algorithms and AI cannot be used to solely deny certain care; in particular:
In each case, the patient’s unique circumstances and present condition must be considered.
CMS also cautions that algorithms and software tools used to deny coverage for basic benefits cannot incorporate coverage criteria beyond that allowed by CMS regulations. Finally, CMS expresses concerns that algorithms and AI technologies can “exacerbate discrimination and bias,” suggesting that MAOs must take care to ensure that their use does not violate the nondiscrimination provisions of Section 1557 of the Affordable Care Act.
INTERNAL COVERAGE CRITERIA: PUBLIC ACCESSIBILITY, CURRENT EVIDENCE AND MORE
The final rule provided that when Medicare coverage criteria are not fully established, MAOs may develop internal coverage criteria for making determinations; however, that criteria must be based on current evidence in “widely used treatment guidelines” or “clinical literature” and must be made “publicly accessible.” (See 42 CFR 422.101(b)(6).) The FAQs elaborate on these requirements for internal coverage criteria, as follows:
OTHER ISSUES
Beyond internal coverage criteria, CMS’s FAQs provide guidance on other topics related to the final rule, including:
CMS ENFORCEMENT IN 2024
CMS announced previously that it would conduct routine and focused program audits in 2024 to assess organizations’ compliance with the new coverage criteria and UM rules. For those who have routine program audits scheduled for 2024, CMS will assess the new requirements during the Part C Organization Determinations, Appeals, and Grievances (ODAG) review and Compliance Program Effectiveness (CPE) review. For those who do not have audits scheduled, CMS will add focused audits specifically targeting the final rule requirements. These focused audits will be limited to ODAG and CPE.
CMS expects to evaluate the UM practices of plans serving nearly 90% of enrollees with MA. CMS may address noncompliance through a variety of compliance and enforcement actions, including issuing notices of noncompliance, warning letters, corrective action plans, and/or imposing civil money penalties and enrollment or marketing sanctions.