Contents
Contents
A PACE audit by the Centers for Medicare & Medicaid Services can lead to corrective action, sanctions and a later release. An accepted plan records what the organization intends to fix. Validation tests the correction. A sanction release restores the enrollment or payment status specified in the notice. If you worked on the service logs, the audit submission or the promised correction, you may know whether the care changed along with the paperwork.
This page follows the audit through its findings, correction plans and enforcement decisions. Our page on PACE whistleblower evidence follows the underlying requests, care records and payments that an insider may know firsthand.
CMS’s PACE4DC notice described one participant with 19 services not provided or scheduled. Six remained outstanding for that same participant after an opportunity to correct. CMS also found failures to track approved care, consider recommendations and categorize service determination requests correctly.
A PACE CMS audit examines compliance with the organization’s contract, including access to necessary services, drugs and participant protections. The CMS audit overview describes review of service determination requests, appeals and grievances, provision of services, personnel, compliance and quality improvement. The review reaches both health care and the system supposed to make it happen.
CMS and the state administering agency share oversight. During the first three contract years, comprehensive annual reviews include an on-site visit, financial soundness and capacity to provide required services. Reviews after that trial period use risk assessment. PACE4DC’s initial comprehensive review brought its undelivered services into that oversight process.
The payment structure explains why this matters to someone inside the business. PACE, the Program of All-Inclusive Care for the Elderly, receives prospective monthly Medicare and Medicaid payments and assumes financial responsibility for the integrated care benefit. Staff, transportation, specialists, hospitals and other services sit inside that responsibility. An undelivered service leaves the participant without care the program is paid to provide. We examine both what happened to the service expense and what the organization represented to the agencies paying it.
CMS begins with an engagement letter identifying the audit scope, submission requirements and dates. Pre-field meetings cover document requests, access to medical-record systems and the elements under review. The organization supplies information about previously disclosed problems and their correction, quality-improvement plans, committee minutes and the requested data.
The 2026 protocol’s initial data collection covers at least six months before and including the engagement letter, with expansion available to CMS. The audit universes are the sets of records from which CMS selects cases: service requests, appeals, grievances, personnel, medical records, on-call coverage and contracted providers. A service-request universe and an original request answer different questions. One shows what the organization submitted for review. The other shows what the participant asked for.
CMS checks the universes for completeness and formatting and can request revisions. The overview allows a maximum of three attempts to provide complete, accurate universes and says CMS uses the last submission. For an employee who prepared those files, the important comparison is between the submitted version and the records it summarizes, including any request that disappeared along the way.
CMS selects targeted samples for field work. The 2026 protocol provides for an initial sample of up to 40 service-request, appeal and grievance cases and up to 25 clinically significant medical records, with substitution and expansion available. Those selections focus the review on particular risks.
CMS tests selected cases through desk review, remote medical-record access, webinars and, where applicable, observations of care and operations. Auditors can ask for additional records and discuss potential findings in daily debriefs. An appointment entered in a scheduler’s system, the specialist’s report and the team’s response can each tell a different part of the care story.
A root-cause analysis explains why the failure occurred. An impact analysis identifies the participants or personnel affected beyond the initial example. CMS may test that analysis against additional case files or medical records. If the analysis is missing, incomplete or invalidated, CMS’s overview says the full scope cannot be measured and the affected number remains unknown.
CMS then classifies the findings. A Corrective Action Required finding calls for correction to strengthen controls, prevent recurrence or resolve participant impact. An observation is a finding of noncompliance for which CMS does not require a corrective-action plan. Separately, the enforcement division can review the audit documentation to decide whether a penalty, sanction or termination is warranted.
The draft report gives the organization an opportunity to challenge a condition or its classification. CMS’s overview gives the organization ten business days to comment, then calls for CMS to consider those comments before issuing the final report. The meaningful comparison is the original finding, the organization’s response and what CMS ultimately retained or changed.
A PACE corrective action plan describes how the organization will fix identified noncompliance. It addresses root causes, changes to systems, remediation, responsible staff and measurable monitoring. Corrective action can follow an audit, ongoing monitoring, participant or caregiver complaints, or another program deficiency identified by CMS or the state.
CMS’s overview requires plans for findings classified as Corrective Action Required within ten business days after the final report. CMS reviews each plan for reasonableness and either accepts it or seeks more information. The organization should begin implementation immediately after acceptance, with full implementation expected within 60 days.
The same overview says CMS closes the audit once the plans are accepted. We see the gap for participants still waiting for care. The audit can close before the fix is finished.
A PACE sanction can restrict new Medicare enrollment or specified payments, while CMS can also impose civil money penalties. The PACE enforcement rules authorize action for substantial failures to provide necessary care, unlawful disenrollment, enrollment discrimination and falsified information, among other violations. Each remedy has its own reach.
The enrollment suspension concerns new Medicare beneficiaries. The specified payment-suspension authority concerns people enrolled after CMS gives notice of the violation. A separate provision allows CMS or the state to condition continuation of the agreement on timely corrective action, withhold some or all payments until correction, or terminate the agreement.
Termination can follow significant uncorrected deficiencies or a determination that the organization cannot ensure participant health and safety. The rules also require arrangements to transition participants’ care when an agreement ends. These decisions affect access to the program and the flow of government payments, so the operative notice and the identified contract matter more than the broad label of enforcement.
A PACE sanction release records CMS’s decision to end the specified restriction after assessing correction. Validated correction supplies the evidence for a PACE sanction release: CMS reviews whether the organization fixed the failures behind the restriction. For suspension to end, the rules require CMS to be satisfied that the cause has been corrected and the violation is unlikely to recur.
CMS’s findings against InnovAge Sacramento concerned specialist access, missing contracts, delayed reports and recommendations, and ordered services canceled or delayed without documented reasons. Its Colorado findings concerned delayed scheduling, specialist follow-up and failures to share clinical information with the interdisciplinary team. The shared company name did not make those one administrative proceeding.
The original Sacramento notice imposed the enrollment suspension. CMS released that sanction effective November 21, 2022. Colorado’s original notice imposed its suspension, and CMS released the Colorado sanction effective January 23, 2023.
Both sequences included organizational attestation, validation and CMS’s determination that the sanction-related deficiencies were sufficiently corrected. Both releases preserved monitoring and correction of matters outside the sanction’s scope.
For someone responsible for a service tracker, that distinction is concrete. A plan can promise to monitor overdue referrals, while the working tracker shows which referrals remain outstanding. The PACE4DC notice described service and appointment trackers that the organization acknowledged it had not implemented after earlier corrective work. The promised control and the control in use are both part of the story.
PACE4DC’s attestation claimed correction. CMS reviewed a validation audit and ongoing monitoring before restoring normal enrollment effective February 26, 2026. The attestation supplied the organization’s account. The release followed the agency’s assessment of correction.
CMS’s notice for PACE Partners of Northeast Florida described recurring problems across successive audits. The organization lacked executed contracts with 14 required specialties. The notice also described pending neurology and dental care, inadequate service tracking and insufficient specialist oversight.
The organization attested to correction. CMS released the enrollment sanction effective August 6, 2025 after validation and monitoring. The letter retained work on initial audit conditions outside the sanction and continued post-sanction monitoring. Restored enrollment and continuing corrective work appear in the same decision.
A civil money penalty is an administrative amount imposed for violations. An audit repayment demand identifies money the agency seeks to recover. The findings behind the amount tell an insider which conduct the agency examined. The payment or collection record answers what money actually changed hands.
CMS’s Collabria Care penalty notice imposed $48,833 in April 2026 for failures involving necessary services, tracking and care-plan implementation. CMS identified 21 instances of untimely arranging or scheduling, alongside other service and recommendation failures.
The April 2025 notices imposed $47,596 on each of Suncoast PACE, LIFE Northwestern Pennsylvania and BoldAge PACE. The same amount covered different findings: Suncoast’s undelivered or undocumented consultations, LIFE Northwestern Pennsylvania’s missing interdisciplinary-team input, and BoldAge’s failures to ensure and document approved care.
The New York State Office of the Medicaid Inspector General took a different approach in its Total Senior Care final audit. It examined reported home-health and personal-care payments overlapping hospital or skilled-nursing-facility stays. Its May 2025 report demanded repayment and specified a recovery route separate from claim voids or adjustments. That distinction matters to a finance employee who knows whether the audit debt was actually returned.
A CMS sanction restricts program activity, and a company accrual records an accounting estimate. A settlement requires an agreement resolving the claims. InnovAge’s annual filing for the year ended June 30, 2026 reported approximately $37 million in litigation accruals, substantially all related to government investigative demands. It said the negotiations remained subject to government approval.
A release of an enrollment restriction answers whether that restriction ends. An agreement resolving a False Claims Act case identifies the claims and payment terms being settled. For an insider considering reporting PACE program fraud, the useful question is how the conduct and the government money connect across those documents.
The connection runs from the original request and care decision through the organization’s representation to the government and the affected payment or repayment obligation. The request, assessment, interdisciplinary-team decision, schedule and delivery record show what care was sought, approved and provided. The audit universe, response and correction attestation show what the organization told its reviewers.
A whistleblower’s complaint against InnovAge alleged withheld service-request information and requests to falsify logs. It connected falsified or omitted information in annual audits and the correction process to continued government reimbursement.
Payment records then identify the participant month, accepted enrollment or payment input, reconciliation and any return. The people handling those records may work in different departments. If an organization falsely claims correction to restore enrollment, we examine who knew, what the agency relied on and which new participant payments followed.
We work with insiders to connect who knew about the problem, what was submitted and why it mattered to payment. A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers. Our PACE fraud questions and answers address the nearby care and capitation questions.
If you know why an audit submission, correction attestation or payment record does not match the care delivered, speak with our PACE whistleblower experts. We connect your knowledge of the work to the representations and government payments that can support a case, and bring in healthcare fraud whistleblower lawyers who understand PACE capitation. We stay beside you as partners from that first conversation through the case.