Menu
Requirements How to Comply

PBMs, as first tier and downstream entities, must comply with Medicare laws, regulations, and CMS instructions (422.504(i) (4)(v)), and agree to audits and inspection by CMS and/or its designees and to cooperate, assist, and provide information as requested, and maintain records a minimum of 10 years. (Medicare Managed Care Manual Ch. 11 §100.4)

Plan sponsors are accountable for maintaining records for a period of 10 years of the time, attendance, topic, certificates of completion (if applicable), and test scores of any tests administered to their employees, and must require FDRs to maintain records of the training of the FDRs’ employees. (Medicare Prescription Drug Benefit Manual Ch. 9 §50.3.1)

CMS has the discretionary authority to perform audits under 42 C.F.R. 44 422.504(e)(2) and 423.505(e)(2), which specify the right to audit, evaluate, or inspect any books, contracts, medical records, patient care documentation, and other records of plan sponsors or FDRs (including PBMs and their downstream entities) that pertain to any aspect of services performed, reconciliation of benefit liabilities, and determination of amounts payable under the contract or as the Secretary of Health and Human Services may deem necessary to enforce the contract.  Plan sponsors and FDRs must provide records to CMS or its designee. Plan sponsors should cooperate in allowing access as requested. Failure to do so may result in a referral of the plan sponsor and/or FDR to law enforcement and/or implementation of other corrective actions, including intermediate sanctioning in line with 42 C.F.R. Subpart O. (Medicare Prescription Drug Benefit Manual Ch. 9 §50.6.11)

  • Maintain all records, reports, and supporting documentation that relate to the functions your organization is performing or providing under the Navitus Medicare Part D program for 10 years.
  • Maintain records of any Medicare general compliance and FWA training and education taken by your employees for 10 years. The records must demonstrate the date of the training, the topic, attendance, and certificates of completion and/or test scores, if applicable. Examples of proof of training may include copies of sign-in sheets, employee attestations and electronic certifications from the employees taking and completing the training.
  • Be prepared to make your records available to Navitus as part of a Navitus audit or monitoring activity and to a Navitus plan sponsor in the event of a CMS program audit.