🚧 Under construction — VoTechWorks is being built. A free tech program — complimentary, as our commitment to get America working.
voTechWorksGrade 13 · a vocational technology learning center, by urbanicity
newSchoolWorks.com › VoTechWorks › Health & Personal Services › Medical Billing & Coding › Capstone Project: Integrated Medical Billing & Coding Case Portfolio › Lesson 2
HLT-MEDI67-08 · Lesson 2 · 42 clock hours · lab

Claim Preparation, Compliance Audit, and EHR Documentation

Objective. Using their coded capstone encounters, students prepare accurate CMS-1500 and UB-04 claim forms in the practice management software, conduct a self-audit against a compliance checklist, and produce a written compliance summary that identifies errors, their risk level, and the corrective action taken.

⚠ Pending professional review

This lesson, its worked examples and its practice questions has not yet been verified by a licensed clinician in the field or by a certification or approval body. It is a study draft and may contain errors. Do not use it to make decisions about any patient or medication. Always follow your instructor, your supervising professional, and current official references and regulations.

VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.

Claim Preparation, Compliance Audit, and EHR Documentation

This lab brings together every skill you have built in this program. You will enter real coded data into practice management software, generate clean electronic claims, and then audit your own work using the same compliance framework that professional billing departments and federal investigators use. Accuracy here is not optional — errors on claims affect patient care, practice revenue, and your professional reputation.

Preparing the CMS-1500 and UB-04 Claim Forms

The CMS-1500 is the standard paper claim form used by non-institutional providers such as physician offices. The UB-04 (also called the CMS-1450) is used by institutional providers such as hospitals and outpatient facilities. Although most claims travel electronically as HIPAA-mandated transaction sets (the 837P for professional claims and the 837I for institutional claims), the printed forms remain the visual reference that coders and billers use to verify data entry.

When entering claims into the practice management software, work through the form fields in a logical order: patient demographics first, then insurance information, then the provider data, and finally the coded encounter data (diagnoses, procedure codes, modifiers, units, place of service, and dates). Every field that a payer requires must be populated exactly as it appears in the source documentation. A mismatch between the patient's name on the claim and the name on file with the payer is enough to trigger a rejection.

After data entry, run the software's built-in claim scrubber. A claim scrubber is an automated rule engine that checks for common errors before the claim leaves your system — things such as missing required fields, diagnosis codes that do not support the procedure billed (medical necessity edits), invalid code combinations, and modifier conflicts. Read every edit flag carefully. An edit is not always an error; sometimes the software flags a situation that is actually correct, and you must understand the rule well enough to know whether to correct the claim or document why it stands. Do not simply click through edits without reading them. Resolve or document every flag before you print the final clean claim.

Applying the Compliance Audit Tool

Compliance auditing is the process of reviewing completed claims against established rules to find billing errors before — or after — a payer or government investigator does. The Office of Inspector General (OIG) of the U.S. Department of Health and Human Services publishes an annual Work Plan that lists the billing practices it intends to review. Familiarity with the OIG Work Plan tells you where scrutiny is highest.

Your audit checklist for this lab covers five key areas:

Medical necessity — Does the diagnosis code documented in the medical record support the procedure billed? Payers, including Medicare, will only reimburse services that are medically necessary. Local Coverage Determinations (LCDs) published by Medicare Administrative Contractors define which diagnoses support specific procedures.

Correct modifier use — Modifiers change the meaning of a CPT or HCPCS code. An incorrect modifier can constitute upcoding (billing for a higher level of service than provided) or can create a false claim.

Unbundling — Billing separately for services that CPT or the National Correct Coding Initiative (NCCI) requires to be billed together is called unbundling. It artificially inflates reimbursement and is a compliance risk.

Upcoding indicators — Review E/M levels, surgical codes, and add-on codes to confirm that the code selected matches the documentation, not a higher-paying alternative.

HIPAA minimum-necessary standard — Any patient information included in billing and coding work must be limited to what is needed to accomplish the billing purpose. Do not request, use, or disclose more protected health information than necessary.

For each finding, assign a risk level using OIG audit methodology language: low (unlikely to result in overpayment or regulatory action), moderate (pattern or repeated occurrence that could attract attention), or high (clear overpayment, false claim potential, or HIPAA violation). Risk level drives urgency of corrective action.

Writing the Compliance Summary

The compliance summary is a professional document. Organize it clearly: list each finding, identify the applicable authority (for example, HIPAA Privacy Rule, a CMS transmittal, an AMA CPT guideline, or a payer policy), state the risk level, and describe the corrective action taken or recommended. Be specific but general enough where exact regulatory citation numbers are beyond your current reference — it is better to write "per CMS medical necessity policy" than to invent a specific rule number.

Close the document with a personal compliance statement — a short paragraph affirming your ethical commitment to honest, accurate billing. This reflects the professional standards expected by both AAPC and AHIMA and is a real component of many compliance programs in the field.

Patient Safety and Scope of Practice

Accurate coding and billing directly affect patient safety. Upcoding or falsifying diagnoses can alter a patient's permanent health record, affect future insurance coverage, and distort clinical data used for public health decisions. Never alter documentation to support a code — code only what is documented. If documentation is insufficient, query the provider through the appropriate channel; do not guess or assume. Maintain strict confidentiality of all patient data used in this lab, even in a training environment. Treat every practice record as you would a real patient's information.

Key terms10

CMS-1500The standard paper claim form used by non-institutional (professional) providers to bill payers; its electronic equivalent is the HIPAA 837P transaction.
UB-04 (CMS-1450)The standard paper claim form used by hospitals and other institutional providers; its electronic equivalent is the HIPAA 837I transaction.
Claim scrubberAn automated rule engine within practice management software that checks claims for errors, missing data, and invalid code combinations before submission to a payer.
Local Coverage Determination (LCD)A policy issued by a Medicare Administrative Contractor that defines when a specific service is considered medically necessary for Medicare reimbursement in a geographic region.
UnbundlingThe practice of billing separately for services that should be reported together under a single code, as defined by CPT guidelines or NCCI edits; it artificially increases reimbursement and is a compliance violation.
UpcodingSelecting a procedure or service code that represents a higher level of service or a higher-paying procedure than what is documented, which may constitute a false claim.
OIG Work PlanAn annual document published by the Office of Inspector General of the U.S. Department of Health and Human Services listing the billing and program integrity areas it plans to audit during the coming year.
HIPAA minimum-necessary standardA HIPAA Privacy Rule principle requiring that only the minimum amount of protected health information needed to accomplish a specific task be used, disclosed, or requested.
Risk level classificationAn audit methodology that rates each compliance finding as low, moderate, or high based on its potential to result in overpayment, regulatory action, or patient harm, guiding the priority of corrective action.
Compliance summaryA written report produced after an internal audit that lists findings, cites applicable authority, assigns risk levels, proposes corrective actions, and affirms the coder's ethical commitment to accurate billing.
In class: Enter coded diagnoses, procedures, modifiers, and patient demographic and insurance data into the practice management software for ten selected capstone cases, generating electronic claim files; run the software's built-in claim scrubber and interpret every edit flag, correcting errors before printing a final clean claim for each case. · Apply a structured compliance audit tool—covering medical necessity, correct modifier use, unbundling, upcoding indicators, and HIPAA minimum-necessary standards—to review five of the ten completed claims, flagging any finding and classifying it as low, moderate, or high risk using OIG audit methodology language. · Draft a two-page written compliance summary that lists each finding, cites the applicable guideline or regulation (HIPAA, payer policy, CMS transmittal, or AMA CPT rule) in general terms, proposes a corrective action, and includes a personal compliance statement affirming the student's ethical commitment to accurate billing.
Materials: Practice management software (training environment), CMS-1500 blank forms, UB-04 blank forms, compliance audit checklist (instructor-prepared), OIG Work Plan summary (current year, CMS website printout), HIPAA Privacy Rule summary reference, payer policy excerpts (Medicare LCD samples), student coding worksheets from Lesson 1.
Check: Instructor reviews each set of ten claim forms: all mandatory fields must be complete and consistent with coded data, and the claim scrubber must show zero remaining errors on final submission. The compliance summary is graded on a rubric (accuracy of findings, correct citation of authority, clarity of corrective action, professional tone); a score of 80% or higher on the rubric is required to advance.

Practice check8

Answer each question, then check it. Nothing is recorded; this is your own practice.

Compliance and regulatory
1. A student enters a claim and the scrubber flags that the diagnosis code does not support the procedure billed. What is the correct first action?
Reimbursement and payer policy
2. Which of the following best describes the purpose of a Local Coverage Determination (LCD)?
Coding accuracy and compliance
3. During a compliance audit, a coder finds that two procedure codes were billed separately when NCCI edits require them to be bundled. This finding is best classified as which type of error?
Compliance and regulatory
4. A compliance audit finding shows that a physician's E/M code was one level higher than the documentation supports across multiple claims. What risk level should this finding receive and why?
Health information management and privacy
5. The HIPAA minimum-necessary standard most directly applies to a coder when they are:
Billing workflow and claim management
6. A student's final claim for a capstone case still shows one edit flag after corrections. The student believes the flagged situation is actually correct. What should the student do?
Claim form and billing fundamentals
7. Which form is used by an inpatient hospital to bill for a patient's stay?
Compliance and regulatory
8. In the compliance summary, a student writes: 'Modifier 59 was appended without documentation that the procedures were distinct services.' Which authority should the student cite to support this finding?
Record this lesson on my transcript. Sign in with your key and enrollment email to record lessons (enroll free if you have no key). This page stays open to read and practise.