For many healthcare leaders, 2026 is shaping up to be a year defined by competing pressures. Organizations are being asked to improve quality outcomes, maintain financial stability, navigate staffing shortages, manage increasing payer scrutiny, and adapt to constant regulatory change — often with fewer internal resources than ever before. At the same time, compliance expectations continue to expand well beyond traditional coding and billing oversight. What was once viewed as a periodic audit concern has become an ongoing operational risk that touches nearly every part of the organization.
Recent activity from the Office of Inspector General (OIG) and the Department of Health and Human Services (HHS) makes one thing clear: regulatory scrutiny is intensifying across the healthcare industry. Federal agencies are placing increased focus on documentation integrity, reimbursement accuracy, cybersecurity preparedness, and oversight of rapidly evolving care delivery models.
One of the most significant areas of attention continues to be medical necessity and documentation support. Evaluation and Management (E/M) services, modifier usage, risk adjustment coding, telehealth billing, behavioral health services, and incident-to arrangements remain frequent targets in audits and enforcement activity. Regulators are increasingly evaluating whether documentation truly supports the services billed, particularly within high-utilization specialties or organizations with elevated reimbursement patterns.
Risk adjustment oversight also remains a major priority. Medicare Advantage and value-based care organizations continue to face scrutiny surrounding diagnosis reporting practices that may improperly inflate risk scores or reimbursement. Unsupported chronic conditions, cloned documentation, and diagnoses lacking evidence of monitoring, evaluation, assessment, or treatment continue to appear in audit findings. As value-based reimbursement models expand, organizations should expect this level of oversight to continue increasing.
Beyond coding and documentation, cybersecurity enforcement has emerged as a critical compliance concern. HHS has repeatedly emphasized that cybersecurity is no longer simply an IT responsibility — it is now considered a core patient safety and organizational compliance issue. Recent ransomware attacks and healthcare data breaches have heightened expectations surrounding access controls, vendor oversight, risk assessments, and breach response planning.
Behavioral health and telehealth services also remain under heightened review following years of rapid expansion. Organizations utilizing remote providers, collaborative care models, or non-physician practitioners should expect continued focus on supervision requirements, documentation standards, and billing compliance.
Looking ahead, healthcare leaders should anticipate increasing scrutiny tied to AI-assisted documentation, payer overpayment recoveries, and interoperability requirements. Organizations relying solely on reactive audits or annual education may struggle to keep pace with the speed of regulatory change.
Proactive compliance strategies are becoming essential. Organizations that regularly evaluate documentation patterns, coding accuracy, operational workflows, and internal controls are better positioned to reduce risk and withstand external scrutiny. Through targeted audits, provider education, and strategic consulting support, BCA, Inc. helps healthcare organizations identify vulnerabilities early, strengthen compliance programs, and build sustainable processes that support both operational and financial success.Top of Form
Book your consultation today with one of our experts.