HealthUpdatedFebruary 20, 2026

Guidelines for CMS RADV audits: What Medicare Advantage plans must know in 2026


In a landmark announcement, Centers for Medicare & Medicaid Services (CMS) has unveiled a sweeping expansion of its Risk Adjustment Data Validation (RADV) audit program signaling a new era of scrutiny of Medicare Advantage Organizations (MAOs).

Medicare Advantage (MA) risk adjustment audits are evolving faster than ever. After years of delays, shifting guidance, and legal uncertainty, the Centers for Medicare & Medicaid Services (CMS) has doubled down on Risk Adjustment Data Validation (RADV) audits as a core program integrity priority.  For context, MAOs receive a monthly payment from CMS based on their members' diagnoses in the form of a risk adjustment payment. RADV audits are their way of verifying that diagnosis codes submitted for risk adjustment are supported by documentation. If MAOs don’t perform well in the audit, they could face significant extrapolated repayment penalties according to the RADV final rule.

Recent CMS memos, updated audit instructions, and public statements make one thing clear: RADV audits are no long episodic events. They are now a routine, high-stakes compliance reality for MAOs.

Below is an updated look at what plans need to know and how to prepare.

CMS's aggressive and expanded RADV audit strategy

Beginning in 2025, CMS announced a sweeping expansion of the RADV program aimed at accelerating audits and addressing a significant backlog of payment years. Under this strategy, CMS intends to audit all RADV eligible MA contracts annually, rather than a limited subset of plans.

Key elements of this approach include:

  • Audits across all eligible contracts, significantly increasing the number of plans subject to RADV review each year, a jump from about 60 to ~550 plans per year.     
  • Variable sample sizes ranging from 35 to 200 enrollees, based on contract size and other criteria.
  • Extrapolation of audit findings, meaning unsupported diagnoses identified in a sample may be projected across the full contract.     
  • Expanded CMS coding resources, including a substantial increase in certified medical coders supporting RADV audits from 40 to approximately 2,000. 
  • Planned use of technology, including AI-enabled tools, to support coder efficiency (with all final determinations made by certified human coders).

CMS has been clear that strengthening oversight of MA payments is a top priority, citing concerns about unsupported diagnoses and the integrity of risk-adjustment payments.

Explore Resources For Risk Adjustment Audits

RADV Audit operational updates for 2026

In response to industry feedback, CMS refined several aspects of its accelerated RADV approach. These refinements aim to balance program integrity goals with operational realities for plans and providers.

Notable updates include:

  • Restoration of a five month medical record submission window, giving MAOs additional time to obtain and prepare documentation
  • Quarterly audit initiation cadence, with CMS planning to launch new RADV audits approximately every three months
  • Clarification of sample methodology, confirming statistically valid variable sample sizes based on contract characteristics
  • Limitation of two medical records per audited HCC, while reaffirming that only one valid record is required to support payment

CMS has also committed to improving transparency by redesigning RADV program webpages and publishing additional guidance, FAQs, and audit calendars.

Legal landscape and ongoing audits

While legal challenges to portions of the 2023 RADV Final Rule remain ongoing, CMS has confirmed that RADV audits will continue while the appeals process plays out. MA organizations should not assume that legal uncertainty equates to reduced audit activity.

CMS has emphasized that it will comply with applicable court orders while continuing to pursue outstanding and future payment year RADV audits.

Data accuracy and ongoing risk adjustment responsibilities

As CMS accelerates RADV activity, MA organizations are reminded that data accuracy remains a year round responsibility, not just an audit year exercise.

Plans should ensure they are:

  • Completing retrospective review and deletion projects in alignment with CMS deadlines and guidance
  • Maintaining strong internal controls to identify unsupported diagnoses early
  • Coordinating closely with vendors, providers, and internal teams to ensure timely and accurate submissions

Proactive data hygiene plays a critical role in reducing RADV exposure and avoiding unnecessary financial risk.

CMS RADV audit readiness: Key questions for MAOs

With this seismic shift, MAOs should be asking themselves some hard questions:

Do we have the resources to respond to RADV audits, at scale?

Responding to a RADV audit requires significant coordination and expertise. It takes more than just skilled coders; you’ll need legal and compliance advisors as well as dedicated project managers to navigate the complexities to meet the submission deadline.

Do we have fit for purpose technology ready to go?

RADV audits require more than spreadsheets and generic workflow tools. You need software specifically built to manage CMS audit requirements, organize medical records, surface compliant diagnoses, and provide visibility for managers and C-suite, all under tight deadlines.

Can we secure the charts we need on time?

If every MAO is trying to retrieve medical records simultaneously, there may not be enough chart retrieval vendors to go around. Providers, already stretched thin, may experience fatigue from a sudden flood of record requests, leading to slower turnaround times or reduced responsiveness. Delays like these could compromise your ability to retrieve the necessary charts.

Are we ready for the financial impact of extrapolation?

While extrapolation remains a central concern for Medicare Advantage organizations, its application is still evolving. CMS has made clear that RADV audits will continue, but the methodology for calculating repayment remains in flux following the vacatur of portions of the 2023 RADV Final Rule and CMS's ongoing appeal. Even so, uncertainty does not eliminate financial risk.

Audit findings are still calculated, unsupported diagnoses are still identified, and repayment liability has not disappeared. Many in the industry expect extrapolation, or some revised form of it, to return. When it does, the underlying audit results will drive the financial outcome.

Purpose-built tools for CMS RADV audit success

This is exactly why we built our RADV audit management platform—to give Medicare Advantage teams the tools they need to take control in the face of rising enforcement.

Our software is fit for purpose and battle-tested, helping MAOs:

  • Prioritize and identify the “best charts” to submit for the highest possible validation rates.
  • Surfaces identified “additional” and “higher” HCC codes to help with offsetting repayment penalties.
  • Project management dashboards utilizing color coding schemes to visualize submission status of audited HCCs to help drive the progression of the submission workflow.
  • Reports to inform C-suite of anticipated financial impacts from audit results.

This isn’t retrofitted workflow software. It’s the first solution designed specifically for RADV, by coding and audit experts with real-world experience.

Be audit-ready: Technology solutions for CMS RADV compliance

CMS has made its intentions crystal clear. More audits. Less time. Bigger consequences.

If you’re not ready, you could be facing steep penalties, operational chaos, and reputational risk. But if you’re equipped with the right technology and process, you can respond with confidence.

Check out our on-demand webinar for actionable strategies to master RADV audits or contact us today to see how our RADV audit management platform can help your team stay compliant, efficient, and in control, no matter how aggressive the audit strategy becomes.

Explore Resources For Risk Adjustment Audits
Back To Top