Most healthcare compliance obligations announce themselves loudly. Licensure renewals come with deadlines. Accreditation surveys come with schedules. Exclusion screening is different: there is no notice, no reminder, and no warning letter. An employee can become excluded on a Tuesday, and unless your organization goes looking, you may not find out for months — while liability quietly accumulates in the background.

This guide covers what the OIG exclusion list actually is, who it applies to, and what employers are on the hook for.

The basics: LEIE and the exclusion authority

The Office of Inspector General (OIG) of the U.S. Department of Health and Human Services maintains the List of Excluded Individuals/Entities, commonly abbreviated LEIE and just as commonly called “the OIG exclusion list.” It is the authoritative federal record of individuals and organizations barred from participating in Medicare, Medicaid, TRICARE, the Veterans Health Administration, and every other federal health care program.

The legal foundation is the Exclusion Statute at Section 1128 of the Social Security Act (42 U.S.C. § 1320a-7). It gives OIG two distinct kinds of authority:

• Mandatory exclusion under Section 1128(a) — OIG has no discretion. Certain convictions require exclusion for a minimum of five years.
• Permissive exclusion under Section 1128(b) — OIG may exclude, based on a much longer list of grounds, and weighs the circumstances of each case.

The LEIE is updated monthly. OIG publishes both a full downloadable database and a monthly supplement listing newly added names, along with an online search tool for one-off lookups.

What exclusion actually prohibits

This is the part organizations most often get wrong. Exclusion is not a licensing restriction and it is not limited to billing. It is a payment prohibition, and it is deliberately broad.

No federal health care program payment may be made for any item or service furnished by an excluded person — directly or indirectly, and regardless of the role that person holds. That reaches well past physicians and nurses. It covers:

• Administrative and clerical staff whose work supports billable services
• Billing and coding personnel
• Executives, board members, and administrators
• IT staff who maintain clinical or billing systems
• Transportation, food service, and housekeeping staff in facilities reimbursed on a per-diem or prospective basis
• Contractors, vendors, staffing agencies, interns, and volunteers

The test is not “does this person submit claims.” The test is whether the item or service they furnish is paid for, in whole or in part, by a federal health care program. In a skilled nursing facility reimbursed per diem, a receptionist’s salary is folded into that payment — which is exactly how receptionists and schedulers end up as the subject of six-figure OIG settlements.

Exclusion also runs in the other direction. An excluded individual may not order or prescribe items reimbursed by federal programs, and an excluded entity may not receive federal health care program dollars as a supplier or subcontractor.

Who has to screen

Virtually every organization touching federal health care dollars. Because the prohibition reaches indirect payment, the obligation extends far beyond hospitals and physician practices:

• Hospitals, health systems, and physician groups
• Skilled nursing facilities, long-term care, hospice, and home health agencies
• Health plans, managed care organizations, and their delegated entities
• Pharmacies and pharmacy benefit managers
• Durable medical equipment suppliers
• Behavioral health and substance use treatment providers
• Laboratories, imaging centers, and dialysis providers
• Medical transportation companies
• Staffing agencies serving any of the above

If your organization receives federal health care program money on any basis — fee-for-service, capitated, contracted, or as a subcontractor — the obligation applies.

The employer’s liability

OIG may impose civil monetary penalties on an employer that hires or retains an excluded person when it “knew or should have known” of the exclusion. That last phrase carries enormous weight. It is not a knowledge requirement in any practical sense — it is a diligence requirement. Because the LEIE is free and publicly searchable, OIG’s position is that an employer who failed to check should have known.

The exposure has three components:

1. Civil monetary penalties — assessed per item or service furnished by the excluded person. The statutory baseline is $10,000, adjusted annually for inflation, so the operative figure today is meaningfully higher.
2. Assessments — up to three times the amount claimed.
3. Overpayment liability — repayment of amounts attributable to the excluded person’s services, separate from any penalty.

In serious cases, False Claims Act exposure sits on top of all of it.

Two points that surprise organizations. First, penalties are calculated per item or service, not per employee — a single excluded medical assistant working for eighteen months generates thousands of countable items. Second, delegating screening to a vendor does not delegate the liability. If a contracted screening provider misses an exclusion, the employer still owns the overpayment and the penalty.

The LEIE is a snapshot, not a history

A structural limitation worth understanding: the LEIE reflects only currently excluded parties. When someone is reinstated, their record comes off. The list does not carry historical exclusions, and it does not display reinstatement dates.

Practically, this means the LEIE cannot tell you whether a candidate was excluded in the past and later reinstated. It also means documentation matters enormously — a clean search result today does not prove a clean result six months ago. If you cannot produce dated evidence that a search occurred, you effectively cannot prove it occurred.

The LEIE is not the only list

Screening the LEIE alone leaves gaps. A complete program generally covers:

• The LEIE — federal health care program exclusions
• SAM.gov — the System for Award Management, covering suspension and debarment from federal contracts and grants government-wide
• State Medicaid exclusion lists — most states maintain their own, and state exclusions are not automatically mirrored on the LEIE
• The CMS Preclusion List — relevant for Medicare Advantage and Part D

State lists deserve particular attention. A provider can be excluded by a state Medicaid program without ever appearing federally, and reinstatement at the federal level does not remove someone from a state list. Multi-state organizations frequently need to check every state in which they operate, not just their headquarters state.

What good practice looks like

A defensible exclusion screening program generally includes:

• Pre-hire screening of every employee, contractor, vendor, intern, and volunteer
• Monthly re-screening of the entire active roster — the cadence CMS has directed state Medicaid agencies to expect
• Name variation searching — maiden names, hyphenated names, prior legal names, and known aliases
• Documented match resolution — the LEIE returns potential matches, not confirmed ones, and verification against date of birth, Social Security number, or NPI is the employer’s responsibility
• Retained, dated records of every search and every resolution
• Vendor and contractor coverage, including downstream entities

The most common failure is not a missing program — it is a program that screens at hire and never again. Exclusions are imposed continuously. A candidate who cleared screening in March can be excluded in June, and if nobody looks again until next year’s audit, the organization has been accruing liability for months without knowing it.

The takeaway

The OIG exclusion list is one of the least forgiving areas of healthcare compliance precisely because it is so easy to comply with. The database is free, public, and searchable. OIG knows this, which is why the enforcement standard is “knew or should have known” rather than actual knowledge — and why “we didn’t realize” has never been a successful defense.

The organizations that get into trouble are rarely the ones that ignored the rule. They are the ones that screened once, filed the results, and assumed the answer would stay the same.