OIG Exclusions Screening: Best Practices for Healthcare

In healthcare, a minor non-compliance problem can soon grow into a big problem. Engaging an excluded person or entity can result in claim denial, costly repayment, and other legal or contractual problems. For this reason, the OIG screening process cannot be done just once at the beginning of employment but should be repeated throughout employment. By doing this, it will help protect your business’s bottom line while ensuring compliance and reducing risks.

This guide from Health Science Bank will show you how to establish an effective, easy-to-replicate monthly screening protocol.

What OIG exclusion screening actually means

OIG exclusion screening means checking the people and companies you work with against the federal exclusion list (LEIE) to reduce billing and compliance risk.

LEIE in one line: it’s a searchable list of excluded individuals and entities used for compliance checks.

When you do this consistently, you’re not just “checking a box.” You’re reducing the chance that an excluded person or entity becomes tied to your care delivery, billing workflows, or contracted services in a way that creates avoidable exposure.

Providers requiring OIG compliance (who should be screened)

OIG compliance for providers has widespread application within the healthcare sector, particularly when there are interactions between the following functions and reimbursement.

Typical organizations requiring comprehensive screening procedures are:

• Providers and clinics (hiring + credentialing)
• Pharmacies and dispensing organizations
• Billing companies, management services, and third-party partners (based on risk and contract requirements)

If your organization touches claims, reimbursement, or federally funded program activity, a repeatable screening routine is a practical safeguard, not an optional extra.

Who to screen: build your “screening population” the right way

The biggest screening mistakes usually start here, not with the search itself. If your screening population is incomplete, your process is incomplete.

Common screening groups:

• Employees (clinical + non-clinical)
• Contractors, temps, and locum staff
• Ordering/referring providers (where applicable)
• Vendors and third parties that touch patient care, billing, or claims

This is where an OIG exclusion list check comes into play. You’re defining who could create risk, then screening those groups consistently.

Timing best practices: onboarding, credentialing, and LEIE monthly screening in healthcare

Timing is what turns screening into a real control.

Best-practice timing includes:

• Pre-hire / pre-contract screening (before someone starts)
• Monthly screening as an ongoing control (because statuses can change)
• Re-credentialing and annual compliance reviews

LEIE monthly screening healthcare is common because it reduces the exposure window. If you only screen at hire, you’re leaving a gap that can become a problem later.

How to run an OIG exclusion list check (step-by-step workflow)

Here’s a simple workflow you can repeat monthly without reinventing the wheel:

Create and maintain your screening roster

• Keep a current list of employees, contractors, and applicable vendors
• Use full legal names and entity names
• Add identifiers when available internally

Run the search consistently

• Use the same rules every time
• Avoid “quick checks” that aren’t documented

Review and resolve potential matches

• Common names can trigger false positives
• Verify identity before escalating

Document results

• Date of screening
• Reviewer name/initials
• Outcome (no match / potential match / confirmed match)
• Evidence captured and stored

Escalate confirmed matches immediately

• Compliance, legal, HR, credentialing
• Pause onboarding, contracting, or billing-related activity until resolved

This is the practical backbone of an OIG exclusion list check supported by consistent LEIE screening.

Best practices that reduce false positives (and missed matches)

False positives waste time, and missed matches create risk. The goal is a process that’s careful without being chaotic.

Best practices:

• Use full legal names plus known aliases/previous names
• Standardize data entry (spacing, punctuation, suffixes)
• Use internal identifiers where available (NPI, DOB) to verify matches
• Keep a short “match resolution” note for audit readiness

These steps strengthen OIG exclusion screening and support cleaner OIG compliance for providers‘ documentation.

Documentation and audit readiness: what to log every month

If you can’t prove it, it didn’t happen, at least not in an audit conversation. Documentation is what turns screening into defensible compliance.

What your screening log should capture:

• Who was screened (person/entity)
• When screening occurred
• Which list/source was checked
• Result (no match / potential match / confirmed match)
• Reviewer name/initials
• Resolution notes for any potential match

Evidence retention (per your internal policy) may include screenshots or exports. The key is consistency, not perfection.

This is also where LEIE’s monthly screening healthcare becomes easy to maintain, because your log becomes the system.

Common mistakes healthcare organizations make (and how to fix them)

Most issues are predictable, which is good news, because predictable problems are fixable.

Common mistakes:

• Screening only at hire, not monthly
• Forgetting contractors and staffing agency personnel
• No proof of screening (no logs/evidence)
• No escalation path for matches

The fix is straightforward: define your screening population, schedule recurring checks, document every run, and assign ownership so it doesn’t depend on memory.

Sample LEIE monthly screening healthcare checklist

Use this monthly checklist to stay consistent:

• Update roster (new hires, terminations, new vendors)
• Run LEIE screening for all required groups
• Perform and document OIG exclusion list check results
• Investigate potential matches and record resolution
• Store evidence and update compliance files

If you do nothing else, do this monthly. It’s simple, repeatable, and defensible.

Conclusion

The simplest answer is this: Define your population, screen every month, keep documentation, and clear the matches quickly. Once you develop a process, meeting the OIG requirements will be easy rather than stressful.

Practical next step: publish a short SOP, assign an owner for monthly screening, and run your first healthcare OIG screening cycle with a clean log you can reuse every month.

FAQs

1) How often should we do healthcare OIG screening?

Monthly screening is a common best practice because it reduces the exposure window and creates consistent documentation. Your exact cadence should align with contracts and internal policy.

2) Who must be included in OIG exclusion screening?

Most organizations include employees and contractors at a minimum. Many also include applicable vendors and ordering/referring providers based on risk and contractual requirements.

3) What should providers document to show OIG compliance for providers?

Keep a screening log with dates, who was screened, results, reviewer name, and resolution notes for potential matches, plus evidence retained per policy.