OIG Exclusion List Screening: Why Ongoing Monitoring Matters

Hiring or contracting with someone on the federal exclusion list doesn't require knowledge or intent to create liability — and that's precisely what makes exclusion screening one of the highest-consequence, lowest-visibility compliance gaps a US healthcare organisation can have. It sits inside Element 6 of OIG's seven-element compliance framework, risk assessment, auditing and monitoring, but the specifics of doing it properly go well beyond a single one-off check at hiring.

What the LEIE actually is

The List of Excluded Individuals/Entities (LEIE) is the Office of Inspector General's official federal registry of people and organisations barred from participating in any federal healthcare programme — Medicare, Medicaid, TRICARE and CHIP included. As of 2026 the list holds over 82,000 entries and is updated monthly, which is precisely why a one-time check at the point of hire isn't sufficient on its own: someone clean at hiring can be added to the list at any point afterwards.

Why screening only federal databases leaves a gap

A defensible screening programme checks three separate layers, not one: the OIG's own LEIE, the GSA/SAM (System for Award Management) exclusion database, and applicable state Medicaid exclusion lists. That third layer matters more than it might sound — 44 states maintain their own separate exclusion lists, and there can be a lag of several months before a state-level exclusion makes its way onto the federal LEIE. An organisation that screens only the federal list can employ or contract with someone under an active state exclusion for months without knowing it, which is exactly the kind of gap that's become the fastest-growing category of enforcement activity since 2020.

The screening frequency OIG actually expects

OIG's expectation is unambiguous: screen upon hire, and monthly thereafter. That cadence isn't arbitrary — it matches the LEIE's own monthly refresh cycle, and it aligns with separate screening requirements that already apply to Medicare Advantage and Part D plans. A quarterly or annual screening cycle, which some organisations still run on the assumption that it satisfies "reasonable diligence," falls short of what OIG has stated it expects to see.

What it actually costs to get this wrong

The financial exposure compounds in three separate ways. Civil monetary penalties can run up to $24,947 per violation for most federal healthcare programme exclusions, rising to $47,596 for Medicare Advantage and Part D violations — and because a violation can be counted per claim or per day of a prohibited employment relationship, a single unnoticed excluded hire can generate hundreds of individual violations before anyone catches it. Every claim connected to an excluded person also becomes a recoverable overpayment regardless of whether the organisation knew about the exclusion at the time, and under the False Claims Act, retained overpayments can trigger treble damages on top. In the most serious cases, the organisation itself can face exclusion from federal programmes — an existential risk for any provider dependent on Medicare or Medicaid revenue, particularly one already navigating the billing and cash-management scrutiny covered in our value-based care vs. fee-for-service guide.

2025 enforcement data illustrates the scale: 35 healthcare organisations paid a combined total of over $26 million in penalties tied to exclusion violations, including one Florida health system's self-disclosed $18.8 million settlement stemming from just two excluded hires. That last detail is worth sitting with — two individuals, $18.8 million, entirely avoidable with a properly resourced monthly screening process.

Building a screening process that actually holds up

A defensible programme documents what was screened, when, against which databases, and what happened when a match was found — not just that screening occurred. Given the scale of the LEIE (over 82,000 entries) and the number of state lists involved, most organisations beyond a very small scale use dedicated exclusion-screening software rather than manual monthly lookups; the compliance risk sits less in the tool used and more in whether the screening actually happens on the required cadence, against all three database layers, with a documented trail an auditor or investigator can review.

FAQ

Does exclusion screening require checking every employee, or only clinical staff?
OIG's exclusion prohibition applies broadly, not just to clinicians — it covers anyone whose role touches items or services billed to a federal healthcare programme, which in practice means most healthcare organisations screen their full workforce plus relevant contractors and vendors.

Is checking the federal LEIE once a year enough?
No. OIG's stated expectation is screening upon hire and monthly thereafter, matching the LEIE's own monthly update cycle. Annual or quarterly screening falls short of that standard.

What's the difference between the LEIE and SAM.gov exclusions?
The LEIE is OIG's healthcare-specific exclusion list; SAM (System for Award Management) is a broader federal government exclusion database covering contractors and grant recipients across all federal agencies, not just healthcare. A defensible screening programme checks both, plus relevant state Medicaid exclusion lists.

Does an organisation need to know about an exclusion to be liable?
No. Liability for billing a federal healthcare programme for services involving an excluded individual applies regardless of the organisation's knowledge at the time — which is exactly why ongoing, documented monthly screening matters more than a policy that simply states the organisation "doesn't knowingly employ excluded individuals."

Exclusion screening is one of the more mechanical elements of a compliance programme to get right — and one of the most expensive to get wrong. Learnsignal's guide to OIG's seven elements of an effective compliance program covers where this obligation sits within the wider framework. Get in touch to talk through compliance training for US healthcare organisations.