Orthopedics Compliance: DME + ASC + Imaging Safety Stack

Orthopedic practices sit at an unusual compliance intersection. The specialty layers DMEPOS supplier standards at 42 CFR § 424.57, ASC Conditions for Coverage at 42 CFR § 416, Stark physician self-referral rules at 42 CFR § 411.355(b) for in-office DME and PT, state radiation-control rules for in-office imaging, and ACR safety expectations where the practice operates an MRI. Audit exposure is correspondingly multilayered.

What CMS and the OIG actually require for an orthopedic practice

For DME dispensed in the office — braces, immobilizers, walking boots, custom orthotics, cold-therapy units, post-op slings — the practice must meet the DMEPOS Supplier Standards at 42 CFR § 424.57(c). The default supplier rules include a current Medicare DMEPOS supplier number (or use of an assigned DMEPOS billing number under the OTS brace exception), accreditation by a CMS-approved deemed accreditor, a $50,000 surety bond, and the 30-standard checklist covering everything from a physical location to a complaint-handling process. Eligible-professional exemptions apply on top of those defaults: CMS MLN905710 exempts physicians and listed eligible professionals from DMEPOS accreditation, and 42 CFR § 424.57(d)(15)(i)(C) exempts physicians and NPPs from the surety bond when furnishing DMEPOS only to their own patients as part of their service. The narrow OTS brace exception (CMS MLN900926) further allows physicians/NPPs to dispense certain off-the-shelf items to their own patients without being a competitive-bidding contract supplier, while still billing through their assigned DMEPOS billing number or the group's DMEPOS billing number. Confirm eligibility for each exemption against the item, the billing pattern, and the practitioner type.

LCDs published by the DME MACs (Noridian, CGS) govern medical necessity for the specific items ortho dispenses most often. Knee braces (L1820–L1851), back braces (L0625–L0650), walking boots (L4360), and ankle-foot orthoses (L1900–L1990) each have a coverage policy that names the indications, the documentation expected in the chart, and the proof-of-delivery requirement. The KX modifier on a DME claim asserts that the LCD criteria have been documented; missing documentation under KX is a frequent RAC and UPIC finding.

For surgical work performed in an ASC owned by the practice, the ASC Conditions for Coverage at 42 CFR §§ 416.40–416.54 set governance, infection control, anesthesia, medical staff, surgical services, and emergency-preparedness standards (the emergency-preparedness condition at § 416.54 was added by the 2016 CMS rule and is a routine survey focus). Medicare's ASC payment system pays a single facility fee tied to the procedure code; the physician bills the professional component separately. ASC enrollment is a separate Medicare 855B filing and a separate compliance perimeter from the practice. Hybrid arrangements (one physical suite operating as office on some days and ASC on others) require explicit operational separation, scheduling segregation, and clear billing distinctions.

For in-office imaging the practice operates under state radiation-control program rules. Equipment registration, operator credentialing for fluoroscopy and X-ray, shielding inspection, and dose monitoring obligations vary by state. Practices that operate MRI must also meet MIPPA accreditation under section 135(a) for Medicare payment, through one of the CMS-designated accrediting organizations: ACR, IAC, RadSite, or The Joint Commission.

Stark physician self-referral rules at 42 CFR § 411.355(b) interact with every in-office DME and PT arrangement. The in-office ancillary services exception requires that the designated health service be furnished personally by the referring physician or by a physician or properly supervised employee in the same group practice, in the same building or a centralized building, and billed by the referring physician or the group. Failure on any element of the exception puts the referral at risk under the Stark prohibition.

The documents you must maintain

An orthopedic-practice compliance binder should produce on demand:

• Current Medicare DMEPOS supplier number (or the assigned DMEPOS billing number used under the OTS brace exception) and the most recent revalidation evidence
• DMEPOS accreditation certificate from a CMS-approved accreditor with expiration tracked at 90 days — or documentation supporting the physician/eligible-professional exemption under CMS MLN905710 if the practice relies on it
• $50,000 DMEPOS surety bond and the current rider tracking — or documentation supporting the physician/NPP exemption at 42 CFR § 424.57(d)(15)(i)(C) for furnishing only to own patients
• The DMEPOS Supplier Standards self-audit (the 30-item checklist), updated annually
• LCD reference set for every DME category the practice dispenses, with the medical-necessity documentation template tied to the LCD
• Proof-of-delivery files for every dispensed DME item, signed by the patient or authorized representative
• ASC 855B enrollment file (if the practice operates an ASC), Conditions for Coverage policy set, infection-control program, anesthesia program documentation, emergency-preparedness program under 42 CFR § 416.54, and medical-staff bylaws
• State radiation-control equipment registration for every X-ray unit, fluoroscopy unit, and mini C-arm, with renewal alerts
• Operator credentialing files for every imaging operator, with state-required X-ray or fluoroscopy credential and annual competency assessment
• MRI MIPPA accreditation certificate from one of the CMS-designated organizations (ACR, IAC, RadSite, or The Joint Commission) if MRI is operated
• Stark in-office ancillary services exception documentation: group-practice structure, building location, supervision pattern, billing flow
• PT KX modifier documentation set for therapy services exceeding the targeted medical review threshold
• Modifier 22 documentation template tied to operative-note dictation prompts
• Implant cost tracking and pass-through documentation where applicable for ASC implants

What ortho practices most often miss in DME audits is the proof-of-delivery linkage. The chart shows the brace was ordered, the claim was billed, but the signed delivery form is filed somewhere else, signed by someone who is not the patient, or dated days before the visit. The DME MAC sees the gap immediately.

How audits actually work in orthopedics

The DME MAC opens a prepayment or postpayment review on a sample of claims. The MAC pulls the LCD, requests the chart documentation (the order, the medical-necessity justification, the proof of delivery, and the supplier standard evidence for the practice), and scores each claim against the LCD. A common pattern: the practice can produce the order and the delivery form for the audited claim, but the medical-necessity documentation under the LCD — the specific physical-exam findings, the failed conservative therapy, the gait analysis where required — is missing.

The MAC TPE audit follows the same documentation pattern across three rounds, with progressive consequences if error rates do not drop. RAC audits review prior-paid claims with extrapolation risk; a small-sample finding can be extrapolated across the universe of claims for the period.

UPIC audits in ortho often target self-referral patterns under Stark. The UPIC examines whether the in-office ancillary services exception elements are met for DME and PT dispensed in the office. The pattern that drives a UPIC referral: high-volume in-office DME dispensing by a small subset of providers in the group with documentation gaps in the supervision or billing-entity element of the exception.

ASC inspections follow the Conditions for Coverage at 42 CFR §§ 416.40–416.54. CMS or its accreditor (AAAHC, The Joint Commission, AAAASF) inspects governance, infection control, anesthesia (including any procedural-sedation program), medical staff credentialing, the surgical services program, the QAPI program, and the emergency-preparedness program at § 416.54. Findings of condition-level deficiencies put the ASC's Medicare deemed status at risk.

State radiation-control program inspections vary. California (CDPH Radiologic Health Branch under Title 17 CCR), Texas (DSHS Radiation Control under 25 TAC Chapter 289), New York (DOH Bureau of Radiologic Health under 10 NYCRR Part 16), and Florida (Bureau of Radiation Control under F.A.C. 64E-5) each operate distinct inspection cadences and operator-credentialing rules.

In ortho audit defense work we have led, the most common LCD documentation finding for knee braces is that the chart documents the diagnosis (osteoarthritis, ligamentous instability) but does not document the failed conservative therapy, the specific functional limitation the brace addresses, or the gait analysis where the LCD requires it.

Common gaps unique to orthopedic practice

The patterns that recur in ortho audit defense:

• DMEPOS proof-of-delivery dated before the office visit. The intake clerk pre-stages the delivery slip and someone signs it at check-in.
• Custom orthotic billed as custom-fabricated when it was a custom-fitted off-the-shelf device. L-code selection drives the audit risk; the documentation must support the L-code billed.
• PT KX modifier asserted without the threshold-justification narrative in the therapy note. The KX modifier itself is the attestation that documentation supports continued therapy.
• Modifier 22 added at billing without the operative-note quantification. The op note describes complexity in adjectives, not in minutes or specific complicating findings.
• In-office ancillary services exception fails the same-building element. The PT suite is in a building across the parking lot rather than the same physical building.
• Stark group-practice structure breaks down at the productivity compensation level. A productivity bonus tied to in-office DME revenue can put the group-practice definition at risk.
• Mini C-arm operator without the state-required fluoroscopy credential. The surgeon uses the foot pedal personally with a non-credentialed staff member assisting; state rule may still require the staff member to be credentialed.
• ASC implant cost pass-through documented inconsistently. Implant-eligible procedures require cost-accounting evidence.
• Bilateral procedure modifiers (50, RT/LT) applied inconsistently. The op note describes a unilateral procedure but the claim is submitted bilaterally.

Maintenance cadence

• Daily: DME order completeness check at dispense; proof-of-delivery signature capture at the office visit; mini C-arm pre-use safety check
• Weekly: ASC infection-control round and sterilization log review
• Monthly: DMEPOS supplier standards rolling audit (sample of 20 dispensed items against the LCDs); imaging equipment QA log review
• Quarterly: Modifier 22 and bilateral-procedure operative-note audit; PT KX documentation sample; Stark in-office ancillary services exception self-attestation
• Annually: DMEPOS accreditation renewal planning at 180 days; surety-bond rider review; state radiation-control equipment registration renewal; ASC QAPI program review; MRI MIPPA reaccreditation cycle planning
• At every staff onboard: fluoroscopy/X-ray operator credential verification; DMEPOS standards training; ASC infection-control training; HIPAA training

State preemption to watch

California — CDPH Radiologic Health Branch under Title 17 CCR for X-ray and fluoroscopy registration; Department of Health Care Services additional licensing for outpatient surgery beyond Medicare ASC rules; Business and Professions Code Section 805 reporting for disciplinary actions; CMIA layered on every patient interaction.

Texas — DSHS Radiation Control under 25 TAC Chapter 289; Medical Radiologic Technologist Certification under Texas Occupations Code Chapter 601; ASC licensure under 25 TAC Chapter 135; HB 300 layered.

New York — DOH Bureau of Radiologic Health under 10 NYCRR Part 16; Office-Based Surgery accreditation under PHL § 230-d for any office-based surgery using more than local anesthesia.

Florida — Bureau of Radiation Control under F.A.C. 64E-5; ASC licensure under Chapter 395, F.S.; office surgery rules under Florida Board of Medicine Rule 64B8-9.009; workers' compensation billing under F.S. Chapter 440 with separate authorization rules.

How d3rx fits

The d3rx specialty compliance binder maintains the orthopedic module: DMEPOS supplier-number and accreditation tracker, surety-bond tracker, the 30-Standard self-audit, the LCD-tied medical-necessity documentation set for braces and orthotics, the proof-of-delivery template, ASC Conditions for Coverage policy set, state radiation-control license tracker, operator-credential file, MRI MIPPA accreditation tracker, the in-office ancillary services exception self-attestation, and the modifier 22 operative-note prompt set. It is a source-grounded administrative documentation aid. See the compliance binder overview or the audit defense surface for how the orthopedic module fits the broader binder.

D3rx compliance guides are administrative documentation aids. They do not certify compliance, provide legal advice, replace counsel, or guarantee an audit outcome. The practice remains responsible for reviewing, adopting, and maintaining its compliance program.