Exclusion screening · Acute care

Exclusion screening for hospitals & health systems

A hospital does not keep one roster. It keeps three: the employed workforce on payroll, the privileged independent practitioners who admit and bill under their own numbers, and the vendors and contractors moving through the building every day. The medical-staff office has to confirm every one of them is clear of federal and state exclusion lists, then confirm it again the following month. Provider Signals monitors all three rosters against 50+ sources, continuously, on one account.

No credit card required · All 50+ sources on every plan · Includes all-state Medicaid
3,567
of the 5,121 community hospitals in the U.S. now belong to a multi-hospital system, so one compliance team often owns rosters across many sites.
$153K
Sharp Healthcare paid the OIG to resolve allegations it employed one excluded nurse whose work was billed to federal programs.
$25,595
the OIG civil monetary penalty per item or service furnished by an excluded individual a hospital employs or contracts with.
Screened against 50+ federal & state sources — on every plan, including Free. See the full list →

Three payrolls, one liability

The OIG does not distinguish between how a hospital pays the people inside it. A nurse on the W-2 payroll, a privileged cardiologist who bills Medicare under an independent number, and a contract respiratory therapist supplied by an agency all create the same exposure: if any of them furnishes an item or service that a federal program pays for while excluded, the hospital absorbs the penalty. That makes the screening population far larger than the employee directory most facilities start with. A mid-size hospital can credential several thousand individuals, and a system multiplies that count across every facility it operates. With 3,567 of the 5,121 community hospitals now part of a multi-hospital system, a single compliance office frequently owns the entire population across many sites at once.

The privileged medical staff are the population most often left off a screening spreadsheet. These practitioners are not employees, yet they admit patients, order tests, and submit claims under their own provider numbers. An exclusion against one of them does not just bar their own claims; it can taint the facility charges attached to their orders. Treating the medical staff as outside the screening boundary is the gap that turns into a settlement.

What the medical-staff bylaws put on the clock

Hospital screening lives inside the medical-staff office, and the bylaws set the rhythm. Privileges are granted at initial appointment, renewed at reappointment on a cycle that runs every two years for most facilities, and the months between those two events are where exclusion status quietly changes. The OIG updates its List of Excluded Individuals/Entities every month and recommends screening at that same monthly frequency, precisely because a clinician who was clear at appointment can be added to the LEIE long before their file comes up for renewal.

A reappointment packet that verifies exclusion status once, then files it for 24 months, leaves a two-year window open. Provider Signals closes it. A practitioner added when primary-source verification begins is re-checked automatically every month of their privileging cycle, so the dated evidence in the credentials file is current on any day a surveyor or payer asks for it, not just on the day the packet was signed.

The names that arrive at the loading dock

Vendor and contractor screening is the blind spot. The OIG has been explicit that exclusion liability reaches individuals and entities a provider contracts with, not only those it employs, which sweeps in staffing-agency clinicians, contracted therapists, billing and coding firms, transcription services, durable-equipment suppliers, and the personnel who deliver and service them. Those names rarely flow through the medical-staff credentialing process; they arrive through purchasing and supply chain, sometimes literally at the loading dock, and they almost never land on the same screening roster as the clinical staff.

Because liability follows the federal dollar rather than the badge type, a coding contractor on the LEIE is as costly as an excluded nurse. Provider Signals lets a hospital hold employees, privileged practitioners, and contracted vendors on one continuously monitored list, so the supply-chain population is screened on the same cadence as the clinical one instead of being checked once at onboarding and forgotten.

What one overlooked name costs

An exclusion case does not require a fraud scheme. It requires a single excluded person whose work touched a federal claim. In December 2024 Sharp Healthcare in San Diego paid the OIG $153,072.64 over allegations that it employed one excluded nurse whose services were billed to Medicare and Medicaid. CenterPointe Hospital in Missouri paid $55,452.56 on the same theory, and the OIG enforcement log keeps adding hospital and health-system names quarter after quarter. The arithmetic behind those numbers is what makes the risk serious for a high-volume biller:

  • Up to $25,595 per item or service furnished by the excluded individual, the current OIG civil monetary penalty under 42 CFR part 1003.
  • Treble damages of up to three times the amount claimed, plus assessment in lieu of damages.
  • Overpayment recovery on everything the excluded person touched, layered with False Claims Act exposure.

"Per item or service" is the phrase that scales the exposure. A single excluded clinician working a few months can represent hundreds of separate billed encounters, each one its own penalty unit. Exclusions also sit on state Medicaid lists, not only the federal LEIE, so a provider reinstated federally can still be sanctioned in a given state. Provider Signals includes all-state Medicaid coverage on every plan, where most tools price it as an add-on.

A screen sized to a system, not an enterprise contract

The established exclusion-screening vendors are priced for procurement departments, often $15,000 to $200,000 a year, and many still treat all-state Medicaid coverage as an upgrade tier. A large academic system can absorb that. A critical-access hospital, a community facility, or a system trying to standardize one process across every entity usually cannot justify the cost or the sales cycle. Provider Signals delivers the same continuous, all-source monitoring on a self-serve account, sized to the actual roster.

CategoryProvider SignalsTypical incumbent
All state Medicaid listsIncluded, every planOften an add-on
Continuous re-screeningYesVaries / batch
Self-serve sign-upFree in minutesSales cycle
Entry pricingFree up to 10, then from $120/mo~$15K–$200K/yr

Continuous monitoring is what keeps every population current between the bylaws milestones. See how the engine works on the exclusion screening overview, compare other segments on the industry hub, or size your roster on the pricing page.

How we match your roster

Exclusion screening is only as good as its matching. We match each person or entity against every source using the full identifier set together — NPI, first name, last or organization name, city, state, and ZIP — never one field alone. NPI alone misses records (the OIG LEIE and many lists don’t carry an NPI for every entry); a name or a location alone produces false matches on common names. When a source record has no NPI, we fall back to name plus location.

Because accuracy depends on your input, provide complete, correct details for every roster entry. When more than one possible match is found, we show you all candidates with their source records so you can confirm, select, or merge — we never auto-flag anyone as excluded. Always verify a match against the primary source before taking any action.

Frequently asked questions

How do you match my roster to the exclusion lists?

We match on the full identifier set together — NPI, first name, last or organization name, city, state, and ZIP — not on any single field. NPI alone misses entries (the LEIE and other lists don’t include an NPI for every record), and names or locations alone cause false matches, so when a source has no NPI we fall back to name plus location. The more complete and accurate your roster details, the more precise the match.

What happens when there’s more than one possible match?

We present every candidate match with its source record and let you select or merge the correct one — we never automatically mark a provider as excluded. A potential match is a prompt to verify against the primary OIG or SAM source, not a final determination. This keeps a human in the loop and protects against acting on a misidentification.

Which people actually have to go on the screening roster?

Everyone whose work can reach a federal claim. That means employed staff, the privileged independent practitioners who bill under their own numbers, locums and residents, allied-health providers, and the contractors and vendors a hospital does business with. The OIG ties penalty liability to the federal dollar, not the badge type, so a coding contractor on the exclusion list is as costly to overlook as an employed nurse.

We verify exclusions at reappointment. Isn't that enough?

No, because a two-year reappointment cycle leaves roughly 23 months uncovered. The OIG refreshes its exclusion list monthly and recommends screening on that same schedule, since a practitioner cleared at appointment can be added long before their file is reviewed again. Continuous monitoring keeps the credentials file current between bylaws milestones rather than only on the day the packet is signed.

Do contracted vendors really count, or just clinical staff?

They count. The OIG has stated that exclusion liability reaches parties a provider contracts with, which pulls in staffing agencies, billing and coding firms, equipment suppliers, and similar contractors. These names usually move through purchasing rather than credentialing, so they are easy to miss. Provider Signals lets you hold them on the same continuously monitored list as your clinical roster.

Can one account cover every hospital in a system?

Yes. Rosters from each facility, clinic, and employed group sit under a single account, with alerts routed to the compliance owner responsible for each one. A system team works from one monitored view instead of running a separate spreadsheet and process at every site.

What does a single missed exclusion actually cost?

The OIG civil monetary penalty currently runs up to $25,595 per item or service the excluded person furnished, on top of treble damages, repayment of affected claims, and possible False Claims Act exposure. Real cases show the scale: Sharp Healthcare settled for $153,072.64 over one excluded nurse, and CenterPointe Hospital settled for $55,452.56.

Are state Medicaid lists covered, or only the federal LEIE?

Both. Every plan includes all state Medicaid exclusion and sanction lists alongside the OIG LEIE, SAM.gov, OFAC, and Medicare Opt-Out. A provider reinstated federally can still appear on a state list, so all-state coverage matters; many vendors charge extra for it, while Provider Signals includes it by default.

Sources: AHA, Fast Facts on U.S. Hospitals · HHS-OIG, Sharp Healthcare $153,072.64 settlement · HHS-OIG, CenterPointe Hospital $55,452.56 settlement · Federal Register, Annual CMP Inflation Adjustment (42 CFR 1003) · HHS-OIG, Exclusions Program (monthly LEIE updates).

Screen the whole roster, every month.

Start free in minutes, or build a plan sized to your system.

Provider Signals™ Risk — part of NPI Data Services, a product of VBC Risk Analytics, Inc. — does not provide legal advice. We are not a consumer reporting agency, and our screening tools are not FCRA background checks; use them as part of, not a substitute for, your own compliance program and counsel’s guidance. See our Terms.