Rhode Island Audited 100 Opioid Treatment Claims. Every One Fell Short.

An opioid treatment program is a clinic that hands someone a dose of methadone every morning and, on paper, surrounds that dose with assessments, counseling, medical exams and drug screens. The medication is what keeps a person out of withdrawal and away from the illicit supply. The record is what is supposed to prove the rest of the care happened.

Rhode Island's auditor general went looking for that proof in the state's Medicaid billing for opioid treatment and did not find it. In a report released October 7, the Office of the Auditor General found that every single one of the 100 treatment services it sampled had failed to meet at least one state or federal requirement. Not most of them. All of them.

The audit, signed by Auditor General David A. Bergantino and conducted jointly with the Boston office of the U.S. Department of Health and Human Services Office of Inspector General, covers claims paid between January 1, 2023 and December 31, 2024. It is a performance audit, not a fraud case. It does not accuse anyone of inventing patients or billing for care that never occurred. What it documents is closer to institutional drift: a treatment system that delivers medication reliably and records the surrounding care unreliably, with a state oversight agency that did not catch the difference.

What the auditors actually examined

The scope was narrow and precise. Five opioid treatment providers billing Rhode Island Medicaid during the period, operating at 14 locations, submitted 274,412 treatment services worth $25,541,470. The federal inspector general's office drew a statistically random sample of 100 of those services at a 90 percent confidence level. Auditors then visited the providers, read their policies, and pulled the clinical chart behind each sampled service.

Against each chart they tested 88 federal and state requirements across 11 domains. A requirement was marked noncompliant when auditors found no documentation of compliance at all, and partially compliant when the record showed less than the required frequency or was missing elements. Across the 100 services the reviewers counted 1,729 deficiencies.

The results separated cleanly into two groups. Progress notes and medical services and care coordination came in at 95 percent compliance, which is what you would expect from clinics whose core business is daily dosing under medical supervision. The other nine domains did not come close.

Where the records broke down

The largest cluster involved intake and five-year biopsychosocial assessments, the broad evaluations of a patient's medical, psychological and social circumstances that are supposed to anchor a treatment plan. Auditors logged 95 instances where those assessments fell short. Six-month treatment-plan reviews accounted for 75 instances, and required counseling for 70. Further down the list: 51 instances involving annual biopsychosocial reviews, 50 involving annual treatment plans, 42 involving annual medical examinations and 22 involving toxicology screens. Separately, the audit counted 99 instances of noncompliance with the specific requirements attached to medication-assisted treatment itself.

The report is careful about what this means. Missing or incomplete assessments, exams, plans and toxicology records can weaken continuity of care or raise clinical risk for patients, it says. It does not claim that any patient was harmed, and it does not identify individuals. What it establishes is that the documentation that would let a regulator verify the quality of care is frequently absent or late, which makes the care itself impossible to confirm after the fact.

The billing problem behind the headline number

One money finding is concrete. Auditors identified and manually validated 6,347 claims in which Medicaid paid for daily methadone encounters under billing code H0020, rather than the single weekly bundled claim the code is meant to represent. In many cases providers submitted five to seven separate daily claims for the same patient in the same week. Those claims total $875,696 in potential overpayments, $656,919 of which is the federal share. An Executive Office of Health and Human Services Medicaid managed-care code list effective July 1, 2023 describes H0020 as one unit per week.

The $24.9 million is a statistical estimate

The second figure is bigger and softer. Projecting from the sample, auditors calculated that services totaling $24,921,184 did not meet all requirements. The report calls that the lower bound of the federal inspector general's range of potentially unallowable costs — spending that may not qualify for Medicaid reimbursement but has not been ordered repaid. One number is a bill tied to a specific code and a specific rule. The other is an argument about how much care fails to meet the standard it is paid to meet, and the distinction matters for anyone reading the larger figure as money the state is about to claw back.

Two agencies, one oversight gap

Responsibility for the problem is split, and the report says so directly. The Department of Behavioral Healthcare, Developmental Disabilities and Hospitals is the primary licensing and regulatory authority for opioid treatment programs and audits each provider every two years. The Executive Office of Health and Human Services runs Medicaid and its billing controls, but most opioid treatment claims are processed and paid by the managed-care health plans the state contracts with, which then hand their claim data back to the state. The auditors concluded that BHDDH's oversight and monitoring did not provide reasonable assurance that the services billed complied with requirements.

The report also notes what it did not look at. Rhode Island's opioid settlement money, which EOHHS tracks in a separate annual report, was outside the audit's scope. So were any questions about whether the state is spending its settlement dollars well. That is a different ledger and a different set of questions.

What the agencies promised, and when

Both agencies responded in writing, and both responses are printed in the report. BHDDH said it would keep its biennial audits while adding follow-up reviews and unannounced visits, and proposed provider self-audits at least every six months, standardized documentation tools, staff training and a compliance dashboard updated at least quarterly. EOHHS said corrective-action plans including recoupments were under review, that it was reassessing system controls and working with its contractor Gainwell Technologies on guardrails, updating the opioid treatment billing manual, and planning quarterly surveillance of claims.

What none of those commitments carries is a completion date. The report lists no deadlines, and as of October 8 no hearing, vote, public comment period or repayment deadline tied to the audit had been scheduled.

Why an incomplete chart is a clinical problem

The clinical stakes are not abstract, and they are easy to lose behind the compliance language. Opioid treatment programs are the delivery system for methadone, the most tightly regulated form of medication-assisted treatment in the country, and the one that demands the most documentation precisely because the medication is dispensed on site and under supervision.

The paperwork is the proof

That is the argument the report is really making. When the chart behind the dose is incomplete, the treatment may be working while the record of it is not — and no regulator, and no auditor, can tell the difference between a clinic that skipped a required assessment and one that simply failed to write it down. The state cannot demonstrate that a service met the standard it billed for, even where the science says the methadone itself is doing its job.

What happens next in Rhode Island

A finding that every sampled service missed something is the kind of result that usually produces a legislative hearing. Rhode Island has scheduled none yet. The report sits on the auditor general's website, the agencies have filed their responses, and the 2023 and 2024 claims have already been paid. What happens next depends on whether the state's own watchdogs and the legislature treat a documentation failure as a compliance nuisance or as a signal about the care underneath it — and on whether the five opioid treatment programs that failed the review treat the audit as a paperwork problem or as a warning that the level of care they advertise is not the level of care they can prove.