CMS Section 59: How to Keep Your Practice Clear of a Fraud Investigation
Operational governance imperatives following the CMS Final Report and Circular 10 of 2026 — including a 6-month implementation roadmap and 6 KPIs your practice should track today.
Summary of CMS Findings
The CMS Final sec 59 Investigation Report (released 7 July 2025, chaired by Advocate Tembeka Ngcukaitobi SC) concluded a 6-year investigation into Discovery Health, GEMS, and Medscheme. For practice managers, the operationally critical insight is this: the deficiencies that drove adverse outcomes for providers were not primarily clinical errors — they were governance and administrative failures.
| Finding | Operational Impact on Practice | Priority |
|---|---|---|
| Documentation deficiencies | Clinical notes absent, incomplete, or retrospectively amended — the single largest deficiency across all disciplines | Critical |
| Coding inaccuracy | Billing staff submitting codes that do not match the documented procedure, or applying modifiers inconsistently with published rules | Critical |
| Prior-authorisation gaps | Elective procedures billed without a recorded PA reference number — verbal PAs do not exist from an audit perspective | Critical |
| Absent peer-review governance | Practices could not demonstrate any active clinical quality review structure during investigations | High |
| Inadequate financial consent | Consent forms failing to specify procedure codes, fees, and co-payments — driving patient complaints, a primary investigation trigger | High |
| Coercive AOD agreements signed | Providers signing Acknowledgements of Debt under duress — without line-by-line evidence, without legal counsel, for amounts far exceeding the recoverable quantum | High |
Operational Directives from Circular 10 of 2026
Non-discrimination mandate
No FWA process — audit, recovery, payment withholding — may directly or indirectly differentiate on race. Schemes must remediate all processes producing the Final Report disparities.
Procedural fairness (PAJA)
All investigations must provide: formal notice, opportunity to respond, written reasons for adverse decisions, and access to the evidence relied upon.
30-day payment rule
Arbitrary payment withholding is prohibited. Schemes must adhere to the statutory 30-day payment cycle unless specific, evidenced irregularities are proven.
Pre-payment compliance shift
High-risk codes require clinical documentation attached at claim submission — a direct shift from post-payment audit to pre-payment compliance. The most operationally significant change for billing workflows.
Early warning obligation
Schemes must notify providers of potential Sec 59(3) concerns before sanctions are applied. Treat any early-warning notification as a priority governance matter — not routine correspondence.
No coercive AOD agreements
Recovery demands must be proportionate, line-by-line evidenced, and free from administrative coercion. Train staff to escalate any AOD demand to legal counsel immediately.
Recommended Governance Changes
Documentation Infrastructure
- Implement SOAP-format clinical note templates for your top 10 procedure codes within 30 days
- Introduce a Documentation Completeness Gate in your billing workflow: no clinical note confirmed = no claim submitted
- Appoint a Documentation Compliance Lead responsible for monthly random sample audits — minimum 20 files per month
Prior-Authorisation Workflow
- Hard rule: No PA reference = no elective procedure scheduled. Implement as a system-level block, not a guideline
- Designate a PA Compliance Officer responsible for real-time token verification and tracking
- Maintain a PA register: date, scheme, procedure code, PA reference, approval status, follow-up required
- For emergencies: document clinical basis in the file and submit retrospective authorisation within 24 hours
Claims Query Management
- Log all queries in a central Query Register with receipt date, response deadline, and assigned staff member
- Acknowledge all queries within 5 business days — even if the full clinical response is not yet ready
- Escalate any recovery demand above R50,000 to the principal clinician and legal counsel before responding
- All clinical query responses are reviewed by a clinician before submission — never by billing admin alone
Financial Consent and Fee Transparency
- Update all informed consent forms to include: procedure codes, your fee, the scheme tariff, and the anticipated co-payment
- Provide all patients a written pre-procedure cost estimate for every elective service
- Train front-desk staff to issue and collect completed cost-disclosure forms before every elective booking
6-Month Implementation Roadmap
Begin Month 1 this week. The increased audit intensity directed by Circular 10 is already operational.
Diagnose and Alert
- Internal documentation audit — random 30-claim sample
- Register all open scheme queries in the central Query Register
- Circulate CMS Final Report summary to all clinical and billing staff
- Identify and brief preferred legal counsel contact
Build Infrastructure
- Commission independent coding accuracy review (12 months of claims history)
- Implement mandatory PA reference field in practice management system as a hard billing block
- Create SOAP-format note templates for top 10 procedure codes
- Launch Documentation Completeness Gate in billing workflow
Train and Formalise
- 2-hour billing compliance training for all administrative staff (attendance documented)
- Update informed consent forms with procedure codes and fee/co-payment disclosure
- Convene first peer-review governance session (agenda + attendees documented)
- Appoint PA Compliance Officer; update PA tracking register
Correct and Align
- Receive and action coding audit findings — implement corrective action plan with timelines
- Update fee schedule; confirm compliance with Circular 10 fee communication requirements
- Configure dedicated compliance email address for centralised scheme forensic communications
Measure Improvement
- Second internal documentation audit (30-claim sample) — compare against Month 1 baseline
- Update POPIA records retention policy; verify EHR retention settings
- Dispute response protocol training for all staff
Audit, Report, and Protect
- Commission first independent Revenue Leakage Review (top claim lines by value)
- Review all 6 KPIs (see below)
- Compile a Governance Report documenting all 6 months of actions — your primary defence artefact if a Sec 59 investigation is initiated
6 KPIs to Monitor
| # | KPI | Target | Frequency |
|---|---|---|---|
| 1 |
Claim Query Rate Queries received ÷ total claims submitted |
< 3% | Monthly |
| 2 |
Prior-Auth Compliance Rate Elective procedures with PA reference before service ÷ total electives |
100% | Monthly |
| 3 |
Documentation Audit Pass Rate Claims with complete SOAP notes ÷ sampled claims |
> 95% by Month 6 | Monthly |
| 4 |
Query Response Timeliness Queries responded to within the scheme's window ÷ total queries |
100% | Monthly |
| 5 |
Coding Accuracy Rate Codes confirmed accurate in quarterly coding review ÷ total reviewed |
> 97% | Quarterly |
| 6 |
Peer Review Participation Rate Clinical staff attending governance sessions ÷ total eligible |
> 90% | Quarterly |
Governance is your most efficient form of revenue protection. Every claim rejected pre-payment because documentation is missing, and every successful recovery demand that succeeds because notes were not contemporaneous, represents a governance failure with a measurable rand cost. The 6-month roadmap above closes the most material gaps before Circular 10's increased audit intensity becomes fully operational.
GoMedPay's Revenue Leakage Review provides the independent audit findings, remediation roadmap, and documented Governance Report your practice needs. Request your Revenue Leakage Review →
References
- CMS Final Sec 59 Investigation Report (7 July 2025) — medicalschemes.co.za
- CMS Circular 10 of 2026 (17 March 2026) — medicalschemes.co.za
- Medical Schemes Act No. 131 of 1998 — Sections 59(2) and 59(3)
- Promotion of Administrative Justice Act No. 3 of 2000 (PAJA)
- Protection of Personal Information Act No. 4 of 2013 (POPIA)
This brief does not constitute legal advice.