Medicare vs. Medicaid Compliance Requirements
Two separate federal healthcare programs with different eligibility rules, payment systems, and compliance obligations. Providers serving dual-eligible patients must navigate both simultaneously.
Medicare
A federal health insurance program primarily for individuals age 65 and older, certain younger people with disabilities, and people with End-Stage Renal Disease. Administered entirely by the federal government through CMS.
Medicaid
A joint federal-state program providing health coverage to low-income individuals, families, pregnant women, elderly adults, and people with disabilities. Each state administers its own Medicaid program within federal guidelines.
Side-by-Side Comparison
| Element | Medicare | Medicaid |
|---|---|---|
| Eligibility | Age 65+, certain disabilities (under 65 with 24+ months SSDI), End-Stage Renal Disease (ESRD), ALS. Not income-based for most beneficiaries. | Income-based. Covers low-income adults, children, pregnant women, elderly, and individuals with disabilities. Income thresholds vary by state (typically 138% FPL under expansion). |
| Administration | 100% federal. CMS contracts with Medicare Administrative Contractors (MACs) for claims processing and provider enrollment. Uniform national rules. | Joint federal-state. Each state designs and operates its own program within federal minimum requirements. CMS approves state plans and waivers. Rules vary by state. |
| Funding | Federal trust funds (Part A: Hospital Insurance; Part B: Supplementary Medical Insurance). Funded by payroll taxes, premiums, and general revenue. | Federal matching funds (FMAP) plus state funds. Federal match ranges from 50% to ~77% depending on state per-capita income. States bear 23-50% of costs. |
| Provider Enrollment | Providers enroll through PECOS (Provider Enrollment, Chain, and Ownership System). Requires NPI, licensure verification, and risk-based screening (42 C.F.R. Part 424, Subpart P). | Providers enroll through individual state Medicaid agencies. Requirements vary by state but must meet federal minimum standards. ACA required Medicaid to adopt Medicare-like screening (42 C.F.R. § 455.410-455.470). |
| Provider Certification | Hospitals must meet Conditions of Participation (CoPs) at 42 C.F.R. Parts 482-489. Deemed status available through accrediting organizations (Joint Commission, DNV). State survey agencies conduct validation surveys. | Providers must meet state licensure requirements and any additional state Medicaid standards. Hospitals participating in Medicare are generally deemed to meet Medicaid requirements. Managed care plans must meet 42 C.F.R. Part 438 standards. |
| Payment System | Prospective payment systems (PPS): DRG-based for inpatient (Part A), fee schedule for physicians (Part B), prospective for outpatient (OPPS). Rates set nationally by CMS. | Varies by state. Mix of fee-for-service and managed care. Managed care enrollment exceeds 70% nationally (42 C.F.R. Part 438). States set their own fee schedules, often lower than Medicare rates. |
| Managed Care | Medicare Advantage (Part C) is voluntary. Beneficiaries choose to enroll in MA plans. Plans must meet 42 C.F.R. Part 422 requirements. CMS Star Ratings drive quality. | States may require mandatory managed care enrollment (42 C.F.R. Part 438). Managed care organizations (MCOs) must meet federal network adequacy, access, and quality standards. State contracts define benefits. |
| Covered Services | Defined federally. Part A (inpatient, SNF, hospice, home health), Part B (physician, outpatient, DME, preventive), Part D (prescription drugs via private plans). | Federal mandatory services (42 C.F.R. Part 440) plus optional services chosen by each state. Must cover: inpatient, outpatient, nursing facility, home health, lab/X-ray, EPSDT for children. States may add dental, vision, prescription drugs. |
| Conditions of Participation | Detailed federal CoPs for each provider type (42 C.F.R. Parts 482-489). Cover governance, patient rights, infection control, QAPI, medical records, discharge planning, and more. Noncompliance can result in termination. | States set provider participation requirements in their state plans. Must meet federal minimums. Hospitals meeting Medicare CoPs generally satisfy Medicaid. Managed care plans face separate requirements under 42 C.F.R. Part 438. |
| Fraud & Abuse Enforcement | OIG (Office of Inspector General) conducts audits and investigations. DOJ prosecutes under False Claims Act. CMS imposes civil monetary penalties. Recovery Audit Contractors (RACs) review claims. | State Medicaid Fraud Control Units (MFCUs) investigate and prosecute. Federal OIG provides oversight. DOJ can pursue federal cases. States must operate MFCUs to receive federal Medicaid funding (42 C.F.R. Part 1007). |
| Appeals Process | Five-level federal appeals process: (1) Redetermination by MAC, (2) Reconsideration by QIC, (3) ALJ hearing, (4) Medicare Appeals Council, (5) Federal court. Timelines defined in 42 C.F.R. Part 405. | State fair hearing process (42 C.F.R. Part 431, Subpart E). Beneficiaries entitled to hearing before state agency. Managed care enrollees have plan-level grievance/appeal first, then state fair hearing. |
| Key Compliance Focus | Billing accuracy (correct coding, medical necessity documentation), CoP compliance, anti-fraud (Stark, AKS), timely filing, ABN requirements for non-covered services. | State-specific billing rules, managed care contract compliance, eligibility verification, prior authorization requirements, encounter data reporting, EPSDT compliance for pediatric providers. |
The Critical Difference
The most important distinction: Medicare is a single federal program while Medicaid is 56 different programs (50 states + DC + territories), each with its own rules, rates, covered services, and enrollment processes.
Medicare: "One set of rules"
A provider who understands Medicare compliance in Indiana understands it in California. National fee schedules, uniform CoPs, standardized enrollment, and a single appeals process. Compliance programs can be built once and applied everywhere.
Medicaid: "Which state are you in?"
Every state sets its own eligibility thresholds, covered services, reimbursement rates, prior authorization rules, and managed care requirements. A compliance program that works in Indiana may not satisfy Ohio or Illinois Medicaid requirements.
Common Compliance Pitfalls for Dual-Eligible Providers
Coordination of Benefits Errors
Medicare is the primary payer for dual-eligible individuals. Claims must be submitted to Medicare first. Providers who bill Medicaid first risk duplicate payments and overpayment liability.
Medicaid is the payer of last resort. It covers Medicare cost-sharing (deductibles, coinsurance, copays) and services Medicare does not cover (e.g., long-term care, dental). Billing Medicaid for amounts already paid by Medicare is a compliance violation.
Enrollment in Both Programs
Enrollment in Medicare through PECOS does not automatically enroll a provider in Medicaid. Providers must separately enroll with each state Medicaid agency where they serve patients.
Medicaid enrollment does not confer Medicare billing privileges. Many providers assume one enrollment covers both. Billing a program you are not enrolled in triggers False Claims Act exposure.
Different Documentation Standards
Medical necessity must be documented per Medicare LCD/NCD requirements. Progress notes, physician orders, and plan of care must meet CMS documentation guidelines specific to each service type.
Documentation requirements vary by state. Some states require prior authorization for services Medicare covers without it. Managed care plans may impose additional documentation requirements beyond state Medicaid minimums.
Conflicting Prior Authorization Rules
Traditional Medicare generally does not require prior authorization (with limited exceptions under PACE and certain demonstration programs). Medicare Advantage plans may require PA for many services.
Most state Medicaid programs and all Medicaid MCOs require prior authorization for a wide range of services. Failure to obtain PA results in claim denials even when the service is medically necessary and documented.
Reimbursement Rate Differences
Medicare rates are nationally standardized with geographic adjustments. Providers can plan revenue around predictable fee schedules. Balance billing is restricted.
Medicaid rates are typically 60-80% of Medicare rates and vary by state. Some states have not updated Medicaid fee schedules in years. Providers cannot balance bill Medicaid patients. Revenue planning requires state-by-state analysis.
Key Regulatory References
Medicare
- 42 C.F.R. Part 405 - Federal Health Insurance for the Aged and Disabled (general provisions, appeals)
- 42 C.F.R. Part 412 - Prospective Payment Systems for Inpatient Hospital Services (DRG-based payment)
- 42 C.F.R. Part 422 - Medicare Advantage Program (managed care requirements)
- 42 C.F.R. Part 424 - Conditions for Medicare Payment (provider enrollment, screening)
- 42 C.F.R. Parts 482-489 - Conditions of Participation for hospitals, ASCs, home health, hospice, SNFs, and other providers
Medicaid
- 42 C.F.R. Part 431 - State Organization and General Administration (fair hearings, state plan requirements)
- 42 C.F.R. Part 438 - Managed Care (MCO standards, network adequacy, quality, grievances)
- 42 C.F.R. Part 440 - Services: General Provisions (mandatory and optional covered services)
- 42 C.F.R. Part 455 - Program Integrity (provider screening, fraud detection)
- 42 C.F.R. Part 1007 - State Medicaid Fraud Control Units (MFCU establishment and operation)