Every healthcare organization participating in Medicare or Medicaid carries a non-negotiable obligation: screen every provider, employee, contractor, and vendor against the OIG exclusion list before they start, and every single month after. Failing to do so is not treated as an oversight. Under federal law, ignorance is not a defense.
This article explains what the OIG exclusion list is, how exclusions are imposed and contested, what happens when an organization gets it wrong, and what a compliant sanction screening program looks like in practice.
What Is the OIG's List of Excluded Individuals and Entities (LEIE)?
The Office of Inspector General (OIG), operating under the U.S. Department of Health and Human Services (HHS), maintains a federal database called the List of Excluded Individuals and Entities commonly referred to as the LEIE. It identifies every individual and entity currently barred from participating in federally funded healthcare programs, including Medicare, Medicaid, TRICARE, and the Children’s Health Insurance Program (CHIP).
The LEIE is updated monthly. It contains each subject’s name, identifying details, the type and basis of exclusion, and the effective date. Once listed, an excluded individual or entity cannot receive direct or indirect federal reimbursement for any item or service they furnish, order, or prescribe regardless of their role. That prohibition extends beyond clinicians: administrative staff, billing personnel, and even contracted vendors fall within scope if their work touches federally funded activity.
The Two Types of OIG Exclusion
Not all exclusions reach the LEIE through the same pathway. Federal regulations establish two distinct categories.
Mandatory exclusions are non-discretionary. The OIG is required by law to exclude any individual or entity convicted of Medicare or Medicaid fraud, patient abuse or neglect, felony convictions for healthcare-related financial misconduct, or felony convictions involving the unlawful manufacture, distribution, or dispensing of controlled substances. Mandatory exclusions carry a minimum five-year exclusion period for a first offense, with longer terms imposed for repeat violations.
Permissive exclusions are discretionary, the OIG may impose them based on conduct that falls short of mandatory grounds but still poses risk to federal program integrity. Grounds include misdemeanor convictions related to healthcare fraud, submission of false or fraudulent claims, participation in unlawful kickback arrangements, license suspension or revocation based on professional competence or financial integrity, and obstruction of an OIG investigation. Permissive exclusion periods typically range from one to three years, though the severity of the conduct can extend them further.
Both categories carry identical consequences: complete exclusion from all federal healthcare programs. The label reflects how the exclusion was triggered, not how seriously it should be treated.
How the OIG Exclusion Process Works
The exclusion process follows a defined administrative sequence that applies consistently across both mandatory and permissive cases.
When the OIG intends to exclude an individual or entity, it issues a written Notice of Intent to Exclude (NOI). The notice includes the legal and factual basis for the proposed exclusion, the proposed length, and the subject’s right to respond. The individual has 30 days to submit information or evidence relevant to whether the exclusion is warranted. Only after that review does the OIG issue a final Notice of Exclusion and the exclusion takes effect 20 days after that notice is mailed.
For section 1128(b)(7) cases, the process differs slightly: the subject receives a Notice of Proposal to Exclude and has 60 days to request a formal hearing. If no hearing is requested, the exclusion proceeds automatically.
Once an exclusion is active, it applies across all HHS programs, not just the program relevant to the underlying offense. Under the Affordable Care Act, an exclusion in one state also bars participation in federal healthcare programs in all other states.
Why OIG Exclusion Checks Are Central to Healthcare Credentialing
Provider credentialing is designed to verify that every clinician in your network meets the qualifications, licensing, and compliance standards required to practice. An OIG exclusion check is one of the most consequential steps in that process and one of the most time sensitive.
An excluded provider cannot be reimbursed by Medicare or Medicaid for any service they furnish, order, or prescribe. If your organization employs or contracts with an excluded provider and submits claims tied to their work, those claims are invalid. The financial and regulatory consequences fall on the organization not the individual provider and they apply even when the organization had no intent to defraud.
This is why excluded providers credentialing checks cannot be treated as a one-time onboarding step. A provider may pass initial screening at the time of credentialing and become excluded at any point thereafter following a conviction, a license action, or a regulatory finding that occurs months or years into their tenure. A credentialing file that was clean at approval is not a permanent guarantee of eligibility.
The updated NCQA credentialing standards, which took effect July 1, 2025, formalized this obligation: OIG queries, Medicare and Medicaid exclusion checks, and SAM.gov reviews must now be conducted every 30 days, with findings escalated to a designated peer-review body. This is no longer a best practice recommendation; it is an accreditation requirement.
To understand how exclusion monitoring fits within a broader credentialing framework, see our overview of provider credentialing and the role of primary source verification.
The Appeals Process for an OIG Exclusion Notice
Receiving an NOI does not mean an exclusion is final. The OIG states explicitly that it will carefully consider all material submitted by the recipient before making a final determination.
If the OIG proceeds with the exclusion, the affected individual or entity may appeal to an HHS Administrative Law Judge (ALJ) within 60 days of receiving the Notice of Exclusion. An adverse decision by the ALJ can be further appealed to the HHS Departmental Appeals Board (DAB), with judicial review available after a final DAB decision.
Healthcare organizations that discover a currently employed provider is under an active exclusion appeals process should not assume the provider is clear to practice. A provider engaged in the appeals process may already appear on the Department of Justice’s database or a State Attorney General’s list and remaining noncompliant during the appeals period still exposes the organization to liability.
The Effects of Being Listed on the OIG LEIE
The consequences of an OIG exclusion extend well beyond the individual named on the list.
For the excluded provider or entity, participation in any federally funded healthcare program is barred for the duration of the exclusion. They cannot bill Medicare or Medicaid, cannot order services reimbursed by those programs, and cannot be employed in any capacity clinical or administrative that involves work tied to federal healthcare funds.
For the employing organization, the stakes are significant. Civil monetary penalties of up to $20,000 per claim can be imposed, with additional assessments of up to three times the total amount claimed for services tied to the excluded individual. Recent enforcement actions illustrate the scale of real-world consequences: in December 2024, Sharp Healthcare paid $153,072 after employing a nurse on the exclusion list; an Ohio nursing center paid $243,000 for a similar violation. Penalties are not limited to billing staff or clinicians, an addiction treatment center in Utah paid $73,457 after employing an excluded operations assistant.
Beyond direct financial exposure, organizations that knowingly employ excluded individuals may face criminal liability under the Civil False Claims Act and risk being placed on the exclusion list themselves.
The OIG Exclusion List Reinstatement Process
An exclusion period ending does not mean reinstatement is automatic. An excluded individual or entity must apply to the OIG for reinstatement and receive a written notice of approval before they can legally participate in federal healthcare programs again.
The reinstatement application window opens no earlier than 90 days before the end of the specified exclusion period. Applications submitted before this window will not be considered. The request must include the individual’s full name, date of birth, and current contact information. The OIG then sends Statement and Authorization forms to be completed, notarized, and returned for review.
The OIG’s reinstatement review can take up to 120 days, and sometimes longer. If the application is denied, the excluded party must wait at least one year before reapplying. Critically, obtaining a new provider number from a Medicare contractor or state agency does not constitute reinstatement written OIG approval is required.
For providers who were excluded based on a license revocation, reinstatement typically requires regaining that license before the application will be considered. And if a provider is listed on both the federal LEIE and a state Medicaid exclusion list, they must apply for reinstatement separately with each federal reinstatement does not automatically clear a state-level exclusion.
Challenges in Provider Exclusion Screening
Despite clear regulatory expectations, consistent exclusion screening remains operationally difficult for many healthcare organizations. Several factors drive this gap.
Identity matching complexity. The LEIE does not use a universal identifier. Searches must account for name variations, maiden names, hyphenated surnames, and common names that may generate false positives or missed matches. A provider with a recent legal name change may not be caught by a search conducted under their previous name.
Scale and frequency. For organizations managing large provider panels, conducting monthly OIG exclusion checks across all employees, contractors, and vendors manually is not sustainable. The operational lift increases significantly when state exclusion lists each with their own structure and update cadences are added to the monitoring scope.
State vs. federal list divergence. States are required to report provider exclusions to HHS OIG within 30 days, but a state exclusion does not automatically trigger federal listing. Organizations billing both federal and state programs must monitor each independently. Under the ACA, an exclusion in one state bars participation in federal programs in all states but the reverse is not always true.
Gaps during appeals and processing. Exclusions can take time to appear on the LEIE due to appeals or administrative processing. A provider who is not yet listed but is engaged in an active exclusion appeal may still appear on other databases, including DOJ records or state attorney general lists creating a monitoring blind spot for organizations relying solely on the LEIE.
Best Practices in Exclusion Screening
A credentialing and compliance program that takes OIG exclusion screening seriously should be built around the following operational standards.
Screen at onboarding and monthly thereafter. A single check at the time of hire is not compliant. Exclusions can be issued at any point; monthly sanction screening is the baseline expectation under both CMS conditions of participation and updated NCQA standards.
Screen beyond clinicians. The exclusion obligation applies to all staff whose work relates to federally reimbursed activity including administrative, billing, and operations roles, as well as contracted vendors and downstream service providers.
Check multiple databases. The OIG LEIE is the primary database but is not comprehensive. SAM.gov captures debarments from federal agencies that may not appear on the LEIE. State Medicaid exclusion lists must also be checked independently, as state exclusions are not automatically reflected at the federal level.
Document every check. Proof that screening was conducted — and that results were reviewed and acted upon — is as important as the screening itself. An organization that screens consistently but cannot produce documentation is effectively unprotected in an audit.
Automate where possible. Manual monthly screening across a full provider and vendor panel is difficult to sustain without errors or gaps. Automated exclusion monitoring tools reduce the risk of missed checks and provide the audit trail needed to demonstrate continuous compliance.
Establish a defined response protocol. If a match is identified, the organization should terminate the employment or contract relationship immediately, stop any federal program billing attributable to that individual, and report the violation through the OIG’s Health Care Fraud Self-Disclosure Protocol. Taking early corrective action can mitigate penalties.
How Neolytix Helps Healthcare Organizations Stay Exclusion-Compliant
OIG exclusion screening sounds straightforward — until you’re managing a panel of 50, 100, or 500 providers across multiple states, each with their own licensing jurisdictions, employment start dates, and reappointment cycles. At that scale, manual monthly checks become a compliance liability in themselves.
Neolytix has supported healthcare organizations across the United States for over 14 years, and exclusion monitoring is embedded into every credentialing engagement we manage. If your organization is still relying on one-time checks at onboarding, managing screening manually in spreadsheets, or unsure whether your current process meets NCQA’s updated monthly monitoring standards, we can help you close those gaps before they become enforcement actions.
Explore our credentialing and compliance services to discuss where your exclusion screening program stands today.
Frequently Asked Questions
What is the difference between the OIG exclusion list and SAM.gov?
The OIG LEIE specifically covers exclusions from federally funded healthcare programs under HHS authority. SAM.gov (System for Award Management) is a broader federal database covering debarments and sanctions from multiple agencies — including the Department of Justice, EPA, and others. Healthcare organizations billing federal programs should screen against both, as some individuals barred from federal programs may only appear on SAM.gov.
Does an OIG exclusion apply to all states, or only the state where the violation occurred?
Under the Affordable Care Act, an exclusion imposed in one state bars participation in federal healthcare programs in all states. However, a federal exclusion does not automatically trigger exclusion from every state Medicaid program — organizations must check state-level exclusion lists independently.
Can a healthcare organization get a waiver to keep employing an excluded provider?
In limited circumstances, a waiver may be granted — typically when the excluded provider is the sole available provider in a geographic area or the only specialist offering a particular service. Waivers must be requested by the administrator of a federal or state health program, not the organization itself.
How do I know if a provider has been reinstated after an OIG exclusion?
Reinstated individuals are removed from the LEIE. The safest verification is a direct search of the OIG’s online exclusions database at the time of credentialing or re-credentialing. Obtaining a new NPI or provider number does not confirm reinstatement — only OIG-issued written approval does.
What should a healthcare organization do if it discovers it has employed an excluded individual?
Terminate the relationship immediately, cease all federal program billing attributable to that individual, quantify the claims affected, and self-disclose through the OIG’s Health Care Fraud Self-Disclosure Protocol. Self-disclosure does not guarantee immunity, but proactive reporting is consistently treated as a mitigating factor in penalty determinations.
How often does the OIG update the exclusion list?
The LEIE is updated monthly. New exclusions are added, existing records may be modified, and reinstated individuals are removed. Monthly screening — not quarterly or annual — is required to stay current with changes.
