Medicare Advantage plans are private insurance companies, but they operate under a detailed CMS regulatory framework. CMS sets the rules, monitors compliance, and has authority to sanction or terminate plans that violate Medicare requirements.
Understanding this oversight structure helps providers understand why MCOs behave the way they do — and what recourse exists when a plan isn’t playing by the rules.
The annual bid and rate-setting process
Every year, Medicare Advantage plans submit bids to CMS specifying:
- The benefits they will offer
- Their projected costs for managing the Medicare benefit
- Their proposed premiums
CMS evaluates bids against a benchmark — a county-level payment rate based on local Medicare fee-for-service costs. Plans that bid below the benchmark may offer lower premiums or additional benefits (rebates). Plans that bid above the benchmark charge higher premiums.
This process happens annually (bids due in June, plans go live January 1) and shapes which plans operate in which markets and at what benefit levels.
For providers: High-rebate markets often mean plans are competing aggressively for members and may have more resources to pay competitive provider rates. Low-rebate markets may mean tighter plan margins and more aggressive utilization management.
Star Ratings: the quality accountability system
CMS rates every Medicare Advantage plan on a 1–5 star scale, measuring quality across multiple domains:
- Managing chronic conditions (diabetes care, heart disease management)
- Preventive care measures (screenings, vaccines)
- Member experience and satisfaction
- Access to care (call wait times, getting appointments)
- Appeals and grievances outcomes
Why Star Ratings matter:
- Bonus payments: Plans rated 4 stars or higher receive quality bonus payments from CMS (increasing their per-member revenue)
- Open enrollment exception: 5-star plans can accept new enrollees year-round, not just during open enrollment
- Marketing advantage: Higher star ratings are used to attract members
For providers: Plans with high Star Ratings have financial incentives to maintain quality. Some of those quality measures flow through to provider behavior — plans may require specific preventive care documentation, HEDIS measure completion, or chronic disease management activities from their network providers.
Network adequacy requirements
CMS requires Medicare Advantage plans to maintain provider networks that are sufficient for their members to access covered services. CMS network adequacy standards specify:
- Time and distance standards — maximum time/distance for enrollees to reach different provider types (PCPs, specialists, hospitals)
- Specialty access — minimum number of providers per specialty per service area
- Appointment availability — standards for how quickly members can get appointments
Enforcement: Plans that fail network adequacy standards can be required to add providers, stop enrollment growth, or face sanctions.
For providers: Network adequacy rules create leverage for providers in underserved specialties. If a plan doesn’t have enough in-network providers of your specialty in your service area, they have regulatory pressure to add you.
Prior authorization oversight
CMS has increased scrutiny of prior authorization practices following Congressional and OIG investigations finding inappropriate denials. The 2023 CMS final rule on prior authorization imposed:
- Shorter decision timeframes for PA requests
- Enhanced transparency requirements
- Data reporting on PA approval and denial rates
- Expanded grounds for expedited PA review
The Medicare Advantage Prior Authorization Transparency Act (passed 2023) requires plans to report prior authorization data to CMS, which CMS then makes public. This data shows denial rates by plan and service type — a meaningful accountability tool.
For providers: High-denial plans show up in the data. You can use CMS’s public reporting to inform which plans you join and how you structure your PA workflows.
Audit authority and compliance
CMS conducts Medicare Advantage plan audits through several mechanisms:
RADV (Risk Adjustment Data Validation) audits: CMS audits diagnosis codes that plans report to support higher capitation payments (risk adjustment). Plans that over-report diagnoses face recoupment. This creates plan-side pressure to ensure clinical documentation supports submitted diagnoses — which flows through to providers.
Program audits: CMS conducts annual program audits of a sample of plans, focusing on: prior authorization/access to care, appeals and grievances, Part D drug formularies, and organization determinations.
Special investigations: CMS and OIG can initiate special investigations based on complaints or data anomalies.
Sanctions: Plans that fail audits can face:
- Civil monetary penalties
- Required corrective action plans
- Suspension of enrollment
- Termination from the Medicare Advantage program
Provider recourse when plans aren’t complying
If an MCO is denying appropriate claims, refusing to credential qualified providers, or failing to maintain adequate networks, providers have options:
1. Plan-level appeals and grievances Plans are required to have a provider dispute process. Use it and document everything.
2. State Insurance Department Medicare Advantage plans must be licensed in each state they operate. State insurance departments have jurisdiction over plan conduct.
3. CMS complaint submission Providers can submit complaints to CMS about plan conduct at cms.gov or through their MAC. CMS tracks complaint patterns.
4. QIO (Quality Improvement Organization) involvement QIOs can review care decisions and have authority to require coverage for Medicare-covered services.
5. Legal counsel For significant contract disputes or systematic denials, healthcare attorneys can assist with contract enforcement, arbitration, and litigation.
Related pages
- MCO Overview
- What Are Medicare MCOs?
- Contracting with Medicare Advantage Plans
- Medicare Prior Authorization Changes
Questions about MCO compliance or your rights as an in-network provider? Ask Mae →