OIG Exclusion Screening: What It Is and Who Has to Do It
Why healthcare organizations screen employees and vendors against the HHS-OIG exclusion list, where the requirement comes from, and how far it reaches.
Reviewed
Exclusion screening is the practice of checking the people and organizations you employ, contract with or buy from against the federal lists of parties barred from federal healthcare programs. In practice that means the HHS-OIG List of Excluded Individuals/Entities and, for most organizations, SAM.gov as well. It is one of the few compliance activities where the underlying rule is unusually blunt: an excluded person cannot be paid with federal healthcare money, and it does not matter whether anybody knew.
Where the obligation comes from
There is no single statute that says 'screen your staff monthly'. The obligation is assembled from three places, and understanding which one applies to you determines how much work you actually have to do.
| Source | What it establishes |
|---|---|
| Social Security Act §1128A(a)(6) and 42 CFR §1003 | Civil monetary penalties for an organization that arranges or contracts with an excluded party to provide items or services payable by a federal healthcare program, when it knew or should have known of the exclusion. |
| 42 CFR §1001.1901 | The scope of the payment prohibition — no federal healthcare program payment for anything an excluded party furnishes, orders or prescribes, directly or indirectly. |
| 42 CFR §455.436 | State Medicaid agencies must determine the exclusion status of providers and their affiliates, checking federal databases on a defined cadence. This obligation flows down to enrolled providers through state requirements and provider agreements. |
The phrase that does the work is knew or should have known. An organization that never checks cannot claim it did not know, and OIG has been explicit that a compliance programme is expected to include periodic screening. That is why screening exists as a routine activity rather than as something done once at hire.
Who has to screen
Broader than most organizations first assume. The payment prohibition attaches to the item or service, not to the billing relationship, so the question is not 'who bills' but 'whose work is paid for, even indirectly, with federal healthcare funds'.
- Employed clinicians, whether or not they bill under their own NPI.
- Non-clinical staff whose salary is paid from federal healthcare funds — administrators, billing staff, schedulers, transport drivers, cleaners in a facility funded that way.
- Contractors and locum staff.
- Vendors and suppliers whose goods or services are paid for with program funds.
- Owners, officers and managing employees, whose exclusion can bar the organization itself.
- Volunteers, where their work contributes to items or services billed to a federal program.
The common mistake
What screening does not establish
A clean screening result says one thing: on the date checked, against the copy of the data the screener held, no potential match was identified. It is not a determination that somebody is eligible, licensed, or suitable to employ, and no screening product can make that determination for you.
- It does not verify licensure. An NPI is not a licence and NPPES does not report licence status.
- It does not cover state Medicaid exclusion lists, which most states maintain separately and many contracts require.
- It does not resolve identity conclusively. The public LEIE download carries no Social Security number, so two people with the same name and birth year cannot be separated on public data alone.
- It is only as current as the data behind it. A file published on the tenth of the month says nothing about an exclusion imposed on the eleventh.
What a defensible screening record looks like
If screening is ever examined, the question will not be 'did you have a tool' — it will be 'show me what you checked, when, against what, and what you did about what you found'. A record that answers that has four properties.
- It is complete. Every person and entity in scope, not just the clinicians who bill.
- It is dated, on both sides. When the check ran, and which published version of the source it ran against. A screenshot with today's date proves neither.
- It shows the decisions. A potential match on a common name is normal. What matters is that somebody looked, decided, and left a reason.
- It distinguishes 'checked and found nothing' from 'could not check'. A source that was unreachable produced no result at all, and a record that shows it as clean is worse than one that shows a gap.
NPISignal's federal exclusion search is free for checking one person at a time. Its monitoring product exists for the fourth property in particular — keeping the record, run after run, without anybody having to maintain a spreadsheet.
Special Advisory Bulletin on the Effect of Exclusion from Participation in Federal Health Care Programs — HHS Office of Inspector GeneralThe authoritative statement of what exclusion prohibits and what OIG expects of employers.
Sources
- Special Advisory Bulletin on the Effect of Exclusion (May 2013) — HHS Office of Inspector General. Accessed August 23, 2026.
- 42 CFR §1001.1901 — Scope and effect of exclusion — U.S. Government Publishing Office. Accessed August 23, 2026.
- 42 CFR §455.436 — Federal database checks — U.S. Government Publishing Office. Accessed August 23, 2026.
- Exclusions Program — HHS Office of Inspector General. Accessed August 23, 2026.