Healthcare exclusion screening: a practical guide

What is exclusion screening?

Exclusion screening is the process of comparing people and organizations connected to healthcare work with government sources that identify parties barred from specified health programs or activities. HHS OIG maintains the List of Excluded Individuals and Entities (LEIE). An OIG exclusion generally means federal healthcare programs cannot pay for covered items or services furnished by the excluded party, or furnished at their medical direction or on their prescription.

The payment restriction can reach work beyond hands-on patient care when that work is payable directly or indirectly by a federal healthcare program. OIG examples include certain billing, management, support, and contracted services. Whether a particular role or payment is affected depends on the facts and applicable program rules.

Exclusion screening supports credentialing, vendor oversight, and program-integrity controls. It is one part of a broader compliance program, not a substitute for checking licenses, sanctions, enrollment status, or other requirements that apply to a role.

Who may need to be screened?

Start with the work and the funding: identify people or entities whose items or services may be paid for, directly or indirectly, by a federal healthcare program. OIG recommends assessing job categories and contractual relationships, then screening the people who perform under relevant roles or arrangements.

• Employees, clinicians, temporary staff, and volunteers with relevant duties.
• Contractors, subcontractors, staffing agency personnel, and outsourced billing or coding teams.
• Vendors or entities furnishing services connected to federally reimbursed care.
• For Medicaid enrollment checks, people with ownership or control interests, agents, and managing employees as specified by federal and state rules.

OIG advises evaluating contractors and subcontractors with the same role-based analysis used for employees. If a vendor performs screening on your behalf, obtain and retain evidence that defines who was checked, against which sources, and when.

Federal and state sources are different

The LEIE is OIG’s source for its own active exclusions. OIG recommends using it as the primary source for OIG exclusion status because it is maintained by OIG and contains exclusion details. The System for Award Management (SAM) also contains federal exclusion and debarment records; debarment is a separate action and should not be confused with an OIG healthcare exclusion.

Some Medicare Advantage organizations must also consult CMS’s Preclusion List for applicable payment decisions. Medicaid agencies check federal databases under 42 CFR § 455.436, and states may have their own Medicaid exclusion, termination, or disqualification sources. A federal search does not establish that a person is clear under every state, payer, or licensing rule.

Build your source set from the states where you operate, the programs that reimburse your services, contract terms, and the roles you identified. Exclia publishes its current list coverage on the coverage page and maintains state requirement guides; review those alongside official agency instructions.

How often should screening happen?

OIG recommends checking before hiring or contracting and periodically checking current employees and contractors. OIG updates the LEIE monthly and says monthly checks best minimize potential overpayment and civil monetary penalty liability. OIG also states that federal law does not set a required LEIE-check frequency for every provider’s workforce. Monthly screening is therefore a widely used risk-control practice, not a universal federal mandate for every employer.

A distinct rule applies to state Medicaid agencies: 42 CFR § 455.436 requires the agency to check specified provider records and associated people against federal databases, including LEIE, no less frequently than monthly. States may impose additional screening duties on providers. Check your state Medicaid agency’s rules, managed care contracts, and payer requirements before setting a cadence.

A practical policy commonly includes pre-engagement checks, recurring checks on a defined schedule, and an additional check when a relevant enrollment or contract event occurs. Record the reason for your cadence and reassess it when your sources or obligations change.

Treat a potential match as a lead

A similar name does not prove identity. Names can be common, records may use a former name, and source entries can contain limited identifying information. OIG recommends searching names used by the person and keeping the initial search and follow-up verification. Use appropriate identifiers and source details to distinguish people, following privacy and security policies for sensitive data.

1. Pause any automated adverse decision based solely on a name similarity.
2. Compare available identifiers, aliases, provider details, and exclusion dates.
3. Use the source agency’s verification process when identity remains uncertain.
4. Escalate confirmed or unresolved results to the designated compliance owner.
5. Document the decision, supporting evidence, reviewer, and any next steps.

The appropriate response depends on the person’s role, the item or service involved, program payment, state rules, and contract terms. If a possible match is confirmed, promptly involve compliance and legal counsel to assess payment, reporting, and remediation obligations. OIG explains that the end of an exclusion period alone does not reinstate eligibility; written reinstatement notice is required.

See Exclia’s guide on what to do when a screening search returns a potential match for a more detailed follow-up workflow.

Keep an audit-ready record

OIG recommends documenting the initial name search and additional searches used to verify a potential match. A useful screening record also makes the process repeatable and shows what information supported the result.

• Person or entity screened, relevant names searched, and appropriate identifiers.
• Source or list name, version or retrieval date, and screening date.
• Search result and verification steps, including why a possible match was cleared.
• Reviewer, escalation, resolution, and any resulting action.
• Vendor attestations or reports when screening is delegated.

Set access, retention, and handling rules for screening records, especially where they contain sensitive identifiers. Keep evidence in a controlled location and align retention with applicable law, contracts, and your organization’s record policy.

Manual and automated screening

Manual screening can work for a small population: staff search official sites, verify results, and record each check. It requires a reliable calendar, consistent identity review, and a way to preserve evidence as lists are updated.

Automated screening can help manage larger populations by standardizing recurring checks, organizing potential matches, and retaining screening history. Automation does not make a name match a confirmed exclusion or transfer the organization’s responsibility. Confirm source coverage, update timing, identity resolution, audit exports, and review controls before relying on a tool.

Try Exclia’s free exclusion checker for an individual lookup, see which sources Exclia covers, or review plans for ongoing screening.

Frequently asked questions

Official sources

Consult current agency material and the rules applicable to your programs and states. The summary above was prepared from these primary sources:

• HHS OIG: Exclusions Program and LEIE
• HHS OIG: Effect of Exclusion Special Advisory Bulletin
• 42 CFR § 455.436: Federal database checks
• HHS OIG: LEIE database and monthly supplements
• U.S. General Services Administration: SAM.gov Exclusions
• CMS: Medicare Advantage and Part D Preclusion List
• HHS OIG: Exclusions FAQs and reinstatement