Section 438.3 - [Effective until 11/19/2024] Standard contract requirements(a)CMS review. The CMS must review and approve all MCO, PIHP, and PAHP contracts, including those risk and nonrisk contracts that, on the basis of their value, are not subject to the prior approval requirement in § 438.806 . Proposed final contracts must be submitted in the form and manner established by CMS. For States seeking approval of contracts prior to a specific effective date, proposed final contracts must be submitted to CMS for review no later than 90 days prior to the effective date of the contract.(b)Entities eligible for comprehensive risk contracts. A State may enter into a comprehensive risk contract only with the following: (2) The entities identified in section 1903(m)(2)(B)(i), (ii), and (iii) of the Act.(3) Community, Migrant, and Appalachian Health Centers identified in section 1903(m)(2)(G) of the Act. Unless they qualify for a total exemption under section 1903(m)(2)(B) of the Act, these entities are subject to the regulations governing MCOs under this part.(4) An HIO that arranges for services and became operational before January 1986.(5) An HIO described in section 9517(c)(3) of the Omnibus Budget Reconciliation Act of 1985 (as amended by section 4734(2) of the Omnibus Budget Reconciliation Act of 1990).(c)Payment. The following requirements apply to the final capitation rate and the receipt of capitation payments under the contract:(1) The final capitation rate for each MCO, PIHP or PAHP must be: (i) Specifically identified in the applicable contract submitted for CMS review and approval.(ii) The final capitation rates must be based only upon services covered under the State plan, ILOS, and additional services deemed by the State to be necessary to comply with the requirements of subpart K of this part (applying parity standards from the Mental Health Parity and Addiction Equity Act), and represent a payment amount that is adequate to allow the MCO, PIHP or PAHP to efficiently deliver covered services to Medicaid-eligible individuals in a manner compliant with contractual requirements.(2) Capitation payments may only be made by the State and retained by the MCO, PIHP or PAHP for Medicaid-eligible enrollees.(d)Enrollment discrimination prohibited. Contracts with MCOs, PIHPs, PAHPs, PCCMs and PCCM entities must provide as follows:(1) The MCO, PIHP, PAHP, PCCM or PCCM entity accepts individuals eligible for enrollment in the order in which they apply without restriction (unless authorized by CMS), up to the limits set under the contract.(2) Enrollment is voluntary, except in the case of mandatory enrollment programs that meet the conditions set forth in § 438.50(a) .(3) The MCO, PIHP, PAHP, PCCM or PCCM entity will not, on the basis of health status or need for health care services, discriminate against individuals eligible to enroll.(4) The MCO, PIHP, PAHP, PCCM or PCCM entity will not discriminate against individuals eligible to enroll on the basis of race; color; national origin; disability; or sex which includes sex characteristics, including intersex traits; pregnancy or related conditions; sexual orientation; gender identity; and sex stereotypes; and will not use any policy or practice that has the effect of discriminating on the basis of race; color; national origin; disability; or sex which includes discrimination on the basis of sex characteristics, including intersex traits; pregnancy or related conditions; sexual orientation; gender identity; and sex stereotypes.(e)Services that may be covered by an MCO, PIHP, or PAHP.(1) An MCO, PIHP, or PAHP may cover, for enrollees, services that are in addition to those covered under the State plan as follows:(i) Any services that the MCO, PIHP or PAHP voluntarily agree to provide, although the cost of these services cannot be included when determining the payment rates under paragraph (c) of this section.(ii) Any services necessary for compliance by the MCO, PIHP, or PAHP with the requirements of subpart K of this part and only to the extent such services are necessary for the MCO, PIHP, or PAHP to comply with § 438.910 .(2) An MCO, PIHP, or PAHP may cover, for enrollees, an ILOS as follows:(i) The State determines that the ILOS is a medically appropriate and cost effective substitute for the covered service or setting under the State plan;(ii) The enrollee is not required by the MCO, PIHP, or PAHP to use the ILOS, and the MCO, PIHP, or PAHP must comply with the following requirements:(A) An enrollee who is offered or utilizes an ILOS offered as a substitute for a covered service or setting under the State plan retains all rights and protections afforded under part 438, and if an enrollee chooses not to receive an ILOS, they retain their right to receive the service or setting covered under the State plan on the same terms as would apply if an ILOS was not an option; and(B) An ILOS may not be used to reduce, discourage, or jeopardize an enrollee's access to services and settings covered under the State plan, and an MCO, PIHP, or PAHP may not deny access to a service or setting covered under the State plan, on the basis that the enrollee has been offered an ILOS as an optional substitute for a service or setting covered under the State plan, is currently receiving an ILOS as a substitute for a service or setting covered under the State plan, or has utilized an ILOS in the past;(iii) The approved ILOS is authorized and identified in the MCO, PIHP, or PAHP contract, and will be offered to enrollees at the option of the MCO, PIHP, or PAHP;(iv) The utilization and actual cost of the ILOS is taken into account in developing the component of the capitation rates that represents the covered State plan services and settings, unless a statute or regulation explicitly requires otherwise; and(v) With the exception of a short term stay as specified in § 438.6(e) in an Institution for Mental Diseases (IMD), as defined in § 435.1010 of this chapter, for inpatient mental health or substance use disorder treatment, an ILOS must also comply with the requirements in § 438.16.(f)Compliance with applicable laws and conflict of interest safeguards. All contracts with MCOs, PIHPs, PAHPs, PCCMs and PCCM entities must:(1) Comply with all applicable Federal and State laws and regulations including Title VI of the Civil Rights Act of 1964; Title IX of the Education Amendments of 1972 (regarding education programs and activities); the Age Discrimination Act of 1975; the Rehabilitation Act of 1973; the Americans with Disabilities Act of 1990 as amended; and section 1557 of the Patient Protection and Affordable Care Act.(2) Comply with the conflict of interest safeguards described in § 438.58 and with the prohibitions described in section 1902(a)(4)(C) of the Act applicable to contracting officers, employees, or independent contractors.(g)Provider-preventable condition requirements. All contracts with MCOs, PIHPs and PAHPs must comply with the requirements mandating provider identification of provider-preventable conditions as a condition of payment, as well as the prohibition against payment for provider-preventable conditions as set forth in § 434.6(a)(12) and § 447.26 of this chapter. MCOs, PIHPs, and PAHPs, must report all identified provider-preventable conditions in a form and frequency as specified by the State.(h)Inspection and audit of records and access to facilities. All contracts must provide that the State, CMS, the Office of the Inspector General, the Comptroller General, and their designees may, at any time, inspect and audit any records or documents of the MCO, PIHP, PAHP, PCCM or PCCM entity, or its subcontractors, and may, at any time, inspect the premises, physical facilities, and equipment where Medicaid-related activities or work is conducted. The right to audit under this section exists for 10 years from the final date of the contract period or from the date of completion of any audit, whichever is later.(i)Physician incentive plans.(1) MCO, PIHP, and PAHP contracts must provide for compliance with the requirements set forth in §§ 422.208 and 422.210 of this chapter.(2) In applying the provisions of §§ 422.208 and 422.210 of this chapter, references to "MA organization," "CMS," and "Medicare beneficiaries" must be read as references to "MCO, PIHP, or PAHP," "State," and "Medicaid beneficiaries," respectively.(3) The State, through its contracts with an MCO, PIHP, and PAHP must require that incentive payment contracts between the MCO, PIHP, and PAHP and network providers:(i) Have a defined performance period that can be tied to the applicable MLR reporting periods.(ii) Be signed and dated by all appropriate parties before the commencement of the applicable performance period.(iii) Include clearly-defined, objectively measurable, and well-documented clinical or quality improvement standards that the provider must meet to receive the incentive payment.(iv) Specify a dollar amount or a percentage of a verifiable dollar amount that can be clearly linked to successful completion of the metrics defined in the incentive payment contract, including a date of payment.(4) The State through its contracts with an MCO, PIHP, and PAHP must: (i) Define the documentation that must be maintained by the MCO, PIHP, and PAHP to support the provider incentive payments.(ii) Prohibit the use of attestations as supporting documentation for data that factor into the MLR calculation.(iii) Require the MCO, PIHP, and PAHP to make incentive payment contracts, and any documentation in paragraph (e)(4)(i) of this section, available to the State upon request and at any routine frequency established in the State's contract with the MCO, PIHP, and PAHP.(j)Advance directives.(1) All MCO and PIHP contracts must provide for compliance with the requirements of § 422.128 of this chapter for maintaining written policies and procedures for advance directives, as if such regulation applied directly to MCOs and PIHPs.(2) All PAHP contracts must provide for compliance with the requirements of § 422.128 of this chapter for maintaining written policies and procedures for advance directives as if such regulation applied directly to PAHPs if the PAHP includes, in its network, any of those providers listed in § 489.102(a) of this chapter.(3) The MCO, PIHP, or PAHP subject to the requirements of this paragraph (j) must provide adult enrollees with written information on advance directives policies, and include a description of applicable State law.(4) The information must reflect changes in State law as soon as possible, but no later than 90 days after the effective date of the change.(k)Subcontracts. All subcontracts must fulfill the requirements of this part for the service or activity delegated under the subcontract in accordance with § 438.230 .(l)Choice of network provider. The contract must allow each enrollee to choose his or her network provider to the extent possible and appropriate.(m)Audited financial reports. The contract must require MCOs, PIHPs, and PAHPs to submit audited financial reports specific to the Medicaid contract on an annual basis. The audit must be conducted in accordance with generally accepted accounting principles and generally accepted auditing standards.(n)Parity in mental health and substance use disorder benefits.(1) All MCO contracts, and any PIHP and PAHP contracts providing services to MCO enrollees, must provide for services to be delivered in compliance with the requirements of subpart K of this part insofar as those requirements are applicable.(2) Any State providing any services to MCO enrollees using a delivery system other than the MCO delivery system must provide documentation of how the requirements of subpart K of this part are met with the submission of the MCO contract for review and approval under paragraph (a) of this section.(o)LTSS contract requirements. Any contract with an MCO, PIHP or PAHP that includes LTSS as a covered benefit must require that any services covered under the contract that could be authorized through a waiver under section 1915(c) of the Act or a State plan amendment authorized through sections 1915(i) or 1915(k) of the Act be delivered in settings consistent with § 441.301(c)(4) of this chapter.(p)Special rules for certain HIOs. Contracts with HIOs that began operating on or after January 1, 1986, and that the statute does not explicitly exempt from requirements in section 1903(m) of the Act, are subject to all the requirements of this part that apply to MCOs and contracts with MCOs. These HIOs may enter into comprehensive risk contracts only if they meet the criteria of paragraph (b) of this section.(q)Additional rules for contracts with PCCMs. A PCCM contract must meet the following requirements:(1) Provide for reasonable and adequate hours of operation, including 24-hour availability of information, referral, and treatment for emergency medical conditions.(2) Restrict enrollment to beneficiaries who reside sufficiently near one of the PCCM's delivery sites to reach that site within a reasonable time using available and affordable modes of transportation.(3) Provide for arrangements with, or referrals to, sufficient numbers of physicians and other practitioners to ensure that services under the contract can be furnished to enrollees promptly and without compromise to quality of care.(4) Prohibit discrimination in enrollment, disenrollment, and re-enrollment, based on the beneficiary's health status or need for health care services.(5) Provide that enrollees have the right to disenroll in accordance with § 438.56(c) .(r)Additional rules for contracts with PCCM entities. In addition to the requirements in paragraph (q) of this section, States must submit PCCM entity contracts to CMS for review and approval to ensure compliance with the provisions of this paragraph (r); § 438.10 ; and § 438.310(c)(2) .(s)Requirements for MCOs, PCCMs, PIHPs, or PAHPs that provide covered outpatient drugs. Contracts that obligate MCOs, PCCMs, PIHPs, or PAHPs to provide coverage of covered outpatient drugs must include the following requirements: (1) The MCO, PIHP or PAHP provides coverage of covered outpatient drugs as defined in section 1927(k)(2) of the Act, that meets the standards for such coverage imposed by section 1927 of the Act as if such standards applied directly to the MCO, PIHP, or PAHP.(2) The MCO, PIHP, or PAHP reports drug utilization data that is necessary for States to bill manufacturers for rebates in accordance with section 1927(b)(1)(A) of the Act no later than 45 calendar days after the end of each quarterly rebate period. Such utilization information must include, at a minimum, information on the total number of units of each dosage form, strength, and package size by National Drug Code of each covered outpatient drug dispensed or covered by the MCO, PIHP, or PAHP.(3) The MCO, PIHP or PAHP establishes procedures to exclude utilization data for covered outpatient drugs that are subject to discounts under the 340B drug pricing program from the reports required under paragraph (s)(2) of this section when states do not require submission of managed care drug claims data from covered entities directly.(4) The MCO, PCCM, PIHP, or PAHP must operate a drug utilization review program that complies with the requirements described in section 1927(g) of the Act and part 456, subpart K, of this chapter, as if such requirement applied to the MCO, PCCM, PIHP, or PAHP instead of the State.(5) The MCO, PCCM, PIHP, or PAHP must provide a detailed description of its drug utilization review program activities to the State on an annual basis.(6) The MCO, PIHP or PAHP must conduct a prior authorization program that complies with the requirements of section 1927(d)(5) of the Act, as if such requirements applied to the MCO, PIHP, or PAHP instead of the State.(t)Requirements for MCOs, PIHPs, or PAHPs responsible for coordinating benefits for dually eligible individuals. In a State that enters into a Coordination of Benefits Agreement (COBA) with Medicare for Medicaid, an MCO, PIHP, or PAHP contract that includes responsibility for coordination of benefits for individuals dually eligible for Medicaid and Medicare must specify the methodology by which the State ensures that the appropriate MCO, PIHP, or PAHP receives all applicable crossover claims for which the MCO, PIHP, or PAHP is responsible. If the State elects to use a methodology other than requiring the MCO, PIHP, or PAHP to enter into a COBA with Medicare, that methodology must ensure that the submitting provider is promptly informed on the State's remittance advice that the State has not denied payment and that the claim has been sent to the MCO, PIHP, or PAHP for payment consideration.(u)Recordkeeping requirements. MCOs, PIHPs, and PAHPs must retain, and require subcontractors to retain, as applicable, the following information: enrollee grievance and appeal records in § 438.416 , base data in § 438.5(c) , MLR reports in § 438.8(k) , and the data, information, and documentation specified in §§ 438.604 , 438.606 , 438.608 , and 438.610 for a period of no less than 10 years.(v)Applicability date. Paragraphs (e)(2)(v) of this section applies to the first rating period for contracts with MCOs, PIHPs and PAHPs beginning on or after 60 days following July 9, 2024, and paragraphs (i)(3) and (4) of this section apply to the first rating period for contracts with MCOs, PIHPs and PAHPs beginning on or after 1 year following July 9, 2024. 81 FR 27853 , May 6, 2016, as amended at 85 FR 37243 , June 19, 2020; 85 FR 72837 , Nov. 13, 2020; 85 FR 87101 , Dec. 31, 2020 81 FR 27852 , 5/6/2016; 85 FR 37243 , 8/18/2020; 85 FR 72837 , 12/14/2020; 85 FR 87101 , 3/1/2021; 89 FR 41691 , 7/5/2024; 89 FR 41267 , 7/9/2024