BOLO Insights & Legal Updates

Build Your 2027 Medicare Compliance Calendar Before the Year Begins

A useful compliance calendar is more than a list of annual trainings and license expiration dates. For healthcare organizations preparing for 2027, the calendar should assign owners to recurring controls, reserve time to investigate anomalies, and connect operational events to the rules that apply to the provider’s actual services. The final quarter of 2026 is a good time to distinguish fixed deadlines from internal best practices and verify what changes will apply next year.

Begin with the obligations that cannot wait

List professional license renewals, organizational permits, enrollment revalidations or updates, required reports, insurance renewals, and contract notice periods. Each item should identify the specific provider, responsible person, agency or payer, evidence of completion, and escalation date. Do not assume that every provider has the same renewal cycle or that a generic calendar captures contract-specific requirements.

Review the organization’s participation type before importing an online compliance template. A home health agency, pharmacy, laboratory, physician practice and Medicare Advantage contractor can face very different program requirements. A reliable calendar tells staff where to verify each deadline rather than merely printing an unsourced date.

Treat screening and monitoring as recurring processes

The HHS-OIG List of Excluded Individuals/Entities is updated monthly. Employers and contracting organizations should assess whom they screen, when they screen, which data sources they use, how matches are resolved and how the checks are documented. The screening cadence should reflect applicable requirements and risk, not an unsupported assumption that every entity has an identical legal mandate. For a practical implementation reference, see the OIG exclusion-screening checklist.

A meaningful compliance calendar also includes periodic claims audits, complaint trending, refund and overpayment review, contracts with referral sources, privacy and security checks, and high-risk subcontractor oversight. The work product should identify what was tested, findings, decisions and corrective action—not simply record that a committee met.

Allocate training around real operations

Annual training is useful, but a compliance plan should respond to new staff, changes in services, emerging findings and past incidents. A pharmacy may prioritize billing reversals and inventory discrepancies; a home health agency may concentrate on certification and visit documentation; a technology business may need focused access-control and contract training. Each session should have a defined audience and competency goal.

Use internal review results to update the following quarter’s education instead of repeating the same slideshow regardless of findings. If a process owner cannot explain how a rule affects the work, training completion alone does not show that the risk is controlled.

Build a board- or owner-facing quarterly dashboard

For a small practice, the dashboard may fit on one page: open investigations, aging corrective actions, overdue claims reviews, enrollment issues, screening exceptions and contracts requiring attention. Larger groups can add departmental accountability and audit testing. The point is to bring unresolved risks into a decision forum while leaders still have time to act.

HHS-OIG’s General Compliance Program Guidance describes voluntary compliance infrastructure. It is a helpful organizing reference, but a provider should not misrepresent every suggested practice as a mandatory universal rule.

What to collect before taking the next step

  • Current licensing, enrollment and payer-contract roster
  • 2026 audit findings, corrective actions and unresolved complaints
  • List of employees, owners, contractors and referral relationships to evaluate for screening
  • Calendar owners with backup coverage and escalation dates
  • Links to the controlling rule, notice, agreement or agency source for every hard deadline

The best 2027 compliance calendar is a living governance tool: it assigns a task, supplies a reason, captures proof and drives escalation when the result is concerning. BOLO helps organizations identify where a documented process needs legal input instead of treating the calendar as a substitute for counsel.

Official guidance: HHS-OIG General Compliance Program Guidance · HHS-OIG LEIE screening instructions

Related BOLO services: Outside general counsel · Healthcare audits and investigations

Have a time-sensitive question? Contact BOLO Health Law or call 609-200-6677. Educational information only, not individual legal advice; representation requires conflicts review and a signed engagement.

Need counsel for the facts behind the issue?

General legal education cannot assess the records, contract terms, procedural posture or deadlines in your own matter. BOLO reviews select matters involving healthcare providers, regulated businesses and individuals, subject to conflicts, scope and jurisdiction.

Read how BOLO researches and reviews legal content. Do not send confidential records through public inquiry forms. Contact alone does not establish representation or extend any deadline.