━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Compliance Programs vs. Compliance Culture
Every hospital with a Medicare provider agreement has a compliance program. Most have a compliance officer, a hotline, a set of written policies, and annual training. These are the structural elements the OIG’s seven elements of an effective compliance program require.
But structure isn’t culture. A compliance program tells people what the rules are. A compliance culture is what happens when nobody’s watching. It’s whether a billing coder flags a questionable charge or lets it go through. Whether a department head reports an overpayment or hopes it goes unnoticed. Whether a new employee feels safe asking about something that doesn’t look right.
Safety-net hospitals that sustain high compliance performance over time share traits that go beyond program structure.
Leadership Tone That’s Visible and Consistent
In high-performing compliance cultures, the CEO and CFO talk about compliance the same way they talk about patient safety: as a non-negotiable institutional priority.
This isn’t about giving speeches at the annual compliance training. It’s about daily behavior. Does leadership respond to compliance findings with curiosity or defensiveness? Does the compliance officer have direct access to the board without going through the CEO? Does the budget for compliance staffing and technology reflect its stated priority?
The most telling indicator is how leadership handles revenue pressure. Every safety-net hospital faces financial stress. The institutions with strong compliance cultures don’t relax billing standards when revenue is down. They find operational solutions that don’t create regulatory risk.
Proactive Monitoring Over Reactive Auditing
Reactive compliance waits for an external audit to identify problems. Proactive compliance finds them first.
High-performing safety-net hospitals run continuous monitoring programs that track billing patterns for statistical anomalies, compare coding distributions to national benchmarks, flag claims that fall outside normal parameters for review before submission, and audit a sample of claims monthly rather than annually.
The shift from annual to continuous monitoring changes the compliance function from a retrospective exercise to a real-time quality control process. Problems get caught when they’re small and correctable, not after they’ve generated thousands of improper claims.
Staff Engagement and Psychological Safety
Compliance reporting mechanisms only work if staff trust them. The most common reason compliance issues go unreported isn’t ignorance. It’s fear of retaliation.
High-performing institutions address this through multiple channels. Anonymous reporting options that are genuinely anonymous, not just labeled that way. Visible follow-through on reported concerns, with feedback to reporters about what happened as a result. Protection for reporters that goes beyond the legal minimum and includes cultural reinforcement that reporting is valued.
Training in these institutions goes beyond annual requirement satisfaction. It includes scenario-based exercises where staff practice identifying and reporting compliance concerns relevant to their specific roles. A coder’s compliance challenges look different from a nurse’s, and the training should reflect that.
Measuring Culture, Not Just Compliance
You can’t manage what you don’t measure, and compliance culture metrics are different from program metrics.
Program metrics track audits completed, training hours delivered, and policies updated. Culture metrics track how many compliance concerns were reported through internal channels versus discovered by external auditors. Whether the number of internal reports is increasing over time, which indicates growing trust in the system. Staff survey responses about whether they feel comfortable raising compliance concerns. And time to resolution for reported compliance issues.
A hospital with a low number of internal compliance reports and no external findings might look clean. But it might also have a culture where problems exist but nobody talks about them. The institutions with the strongest cultures have high internal reporting volumes and low external audit findings. That’s the combination that indicates a system is working.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Nexwell Health Partners provides management services, telehealth solutions, and compliance support for safety-net hospitals, FQHCs, and specialty practices. Contact us to schedule a consultation.
Sources