Compliance Officer

A designated individual within a healthcare organization responsible for developing, implementing, and monitoring the organization's compliance program to ensure adherence to laws, regulations, and ethical standards.

A compliance officer is the person in a healthcare organization responsible for making sure the organization follows all applicable laws, regulations, and industry standards. In a small practice, the compliance officer might be the physician-owner wearing one of many hats. In a larger organization, it is a dedicated role with a department behind it. For credentialing purposes, payers may ask whether your practice has a designated compliance officer and a compliance program. This is especially true for Medicare enrollment and for Medicaid managed care organizations. Having a formal compliance program is a requirement for Medicare-enrolled providers, and it signals to payers that your practice takes regulatory obligations seriously. A healthcare compliance program typically includes seven elements: written policies and procedures, designated compliance leadership, education and training for staff, a system for reporting concerns (like a compliance hotline), regular auditing and monitoring, response to detected problems, and enforcement of disciplinary standards. The compliance officer oversees areas including HIPAA privacy and security, billing and coding accuracy, anti-kickback and Stark Law compliance, OSHA workplace safety, credentialing and enrollment maintenance, and documentation standards. If you are in a solo or small group practice and cannot justify a dedicated compliance officer, designate someone. It can be the office manager, the billing supervisor, or even yourself. The important thing is that someone is formally responsible for compliance oversight and that you have a documented compliance plan.