What California IPAs Need to Know About OIG Compliance in 2026

The Office of Inspector General doesn't operate on a fixed schedule, but its enforcement priorities do shift — and 2026 has brought a notable increase in scrutiny directed at Independent Physician Associations. For California IPAs, which operate in one of the most complex managed care environments in the country, staying ahead of OIG compliance requirements isn't optional. It's existential.

Why IPAs Are Under Increased OIG Scrutiny in 2026

Several converging factors have elevated OIG's focus on IPAs this year. California's ongoing Medi-Cal managed care expansion has brought more IPA-delegated contracts under federal oversight. OIG has also identified delegation oversight as a persistent weak point in managed care compliance — IPAs that accept delegated functions from MSOs are expected to have robust compliance programs that match the scope of their delegated responsibilities.

Risk adjustment coding, in particular, has been a significant OIG enforcement focus, and IPAs with delegated coding functions are increasingly being examined.

The Core Elements OIG Expects from IPA Compliance Programs

OIG's compliance program guidance has been consistent for years, but many IPAs still lack programs that meet the basic standard. The seven core elements OIG expects are:

1. Written policies and procedures — including a code of conduct and standards that address the IPA's specific risk areas
2. A designated compliance officer — with sufficient authority, resources, and independence to function effectively
3. Effective training and education — for all employees, contractors, and delegated entities
4. Effective lines of communication — including a mechanism for anonymous reporting
5. Internal monitoring and auditing — with documented results and corrective action plans
6. Enforcement of standards — including consistent disciplinary action for compliance violations
7. Prompt response to detected problems — including voluntary disclosure when appropriate

California-Specific Compliance Considerations for IPAs

California IPAs face compliance obligations that go beyond federal OIG requirements. The California Department of Health Care Services (DHCS) and the Department of Managed Health Care (DMHC) both impose requirements on delegated entities that must be integrated into a comprehensive compliance program.

For IPAs participating in Medi-Cal managed care, DHCS requires MSOs to conduct annual oversight of their delegated entities — and IPAs are expected to be able to demonstrate compliance readiness when those audits occur. DMHC's utilization review standards have also been updated in recent years and many IPA compliance programs haven't kept pace.

What California IPAs Should Do Right Now

Given the current enforcement environment, California IPAs should prioritize the following:

• Conduct a compliance program gap assessment. Compare your current program against OIG's seven core elements and California-specific requirements.
• Review your delegation agreements. Ensure your compliance program scope matches the functions you've accepted under delegation.
• Audit your risk adjustment coding. This is one of OIG's highest-focus areas in 2026.
• Update your training records. OIG expects documented evidence that compliance training has been completed by all relevant personnel.
• Establish or strengthen your anonymous reporting mechanism. A functioning hotline or reporting system is a core OIG expectation.

---

The IPAs that navigate the current compliance environment successfully are the ones that treat compliance as an operational function, not a documentation exercise. If your IPA hasn't conducted a formal compliance program review recently, now is the time. Request a free consultation with MedRecPros Consulting — we work specifically with California IPAs, Medical Groups, and MSOs to build compliance programs that hold up under scrutiny.