What are the 19 HRSA program requirements for FQHCs?

HRSA requires FQHCs to meet 19 program requirements covering: needs assessment, required/additional services, clinical staffing, accessible hours/locations, sliding fee scale, quality improvement/assurance, board authority, board composition, governance, financial management, billing/collections, budget, program data reporting, scope of project, federal/state requirements, health center controlled facilities, organizational structure, contracts/subawards, and conflict of interest policies. Noncompliance can result in conditions of award or loss of Section 330 funding.

How often do FQHCs receive HRSA Operational Site Visits (OSV)?

FQHCs receive an Operational Site Visit from HRSA approximately every 3 years. The OSV reviews compliance with all 19 program requirements. FQHCs should maintain continuous readiness by conducting internal audits and keeping documentation current rather than scrambling before a scheduled visit.

What are the HIPAA requirements for FQHCs?

FQHCs must comply with HIPAA Privacy, Security, and Breach Notification Rules including: Business Associate Agreements with all vendors handling PHI, annual security risk assessments (45 CFR § 164.308), workforce training within 30 days of hire and annually, breach notification to affected individuals within 60 days, and maintaining 6 years of HIPAA compliance documentation.

Can FQHCs bill two encounters on the same day?

Under Medicare PPS, FQHCs can bill 2 encounters on the same day if the patient sees two different providers for two different services (e.g., medical + behavioral health). Under Medi-Cal, generally only 1 PPS encounter per day is allowed, though some managed care plans may allow exceptions. FQHCs cannot bill 'incident-to' like private practices.

What is the False Claims Act penalty for FQHCs?

The Federal False Claims Act (31 USC § 3729-3733) imposes penalties of $13,946 to $27,894 per false claim plus treble damages (3× the overpayment). Common FQHC false claims include: billing incident-to, billing without face-to-face encounters, upcoding E/M levels, and 340B duplicate discounts. Whistleblowers receive 15-30% of recovered funds.

← Compliance

HRSA Operational Site Visit Preparation

19 program requirements. ~304 estimated preparation hours. Every 3 years, HRSA audits everything.

OSV Case Studies

Mid-size urban FQHC (CA) • Southern California • 2024

Board Composition Corrective Action

Challenge: During HRSA OSV, reviewers found the board had only 42% consumer members (below 51% requirement) and demographics did not reflect the predominantly Latino service area.

Root Cause: Board member resignations not backfilled with consumer-patients. No process for verifying patient status annually.

Resolution: Recruited 4 patient-consumers from community health advisory committee. Implemented annual patient status verification. Revised bylaws to mandate 60% consumer target.

Lesson: Track board composition monthly — don't wait for the OSV to discover gaps. Annual patient status verification should be automatic.

Mid-size FQHC • Los Angeles County • 2025

Clinical Documentation Deficiency

Challenge: HRSA chart review during OSV found 35% of sampled NP visits lacked required supervisory co-signatures. Additionally, 20% of behavioral health encounters had incomplete treatment plans.

Root Cause: EHR co-signature workflow broken after system upgrade; no one monitored completion rates. BH treatment plan template was missing required fields.

Resolution: Implemented EHR dashboard tracking unsigned notes (daily alert to CMO). Fixed BH treatment plan template. Conducted 100% retrospective chart completion for identified gaps.

Lesson: EHR system changes need compliance impact review. Build automated monitoring — don't rely on manual checks for critical documentation requirements.

Rural FQHC • Central Valley, California • 2024

OSV Deficiency — Service Area Coverage Failure

Challenge: HRSA OSV found that FQHC failed to provide primary care services across required service area. Only one site in 3-county area; other sites closed without HRSA notice. Unmet need assessment not updated in 5 years.

Root Cause: Two rural clinic locations closed due to staffing shortages (RN and NP recruitment gaps). CEO did not report closures to HRSA. No alternative service delivery plan developed.

Resolution: HRSA issued notice of noncompliance. FQHC placed on conditional funding status (60-day cure period). Reopened one clinic via telehealth partnership with county hospital. Updated unmet need assessment. Developed 3-year clinic re-expansion plan.

Lesson: Notify HRSA immediately of service changes — silence is treated as fraud. Unmet need assessment is a living document, not a one-time submission. Build redundancy in key clinical roles before closures occur.

Mid-size urban FQHC • San Diego County • 2025

Cal/OSHA Workers Comp Violation Settlement

Challenge: Cal/OSHA investigation discovered FQHC failed to report three serious work injuries: (1) RN needle stick incident, (2) MA back injury from manual lifting, (3) Security officer assault. All injuries occurred within 6-month period; none reported to Cal/OSHA within required 8-hour window.

Root Cause: HR manager believed workers comp claims were 'confidential HR matters' not subject to Cal/OSHA reporting. No injury reporting protocol. Staff instructed not to file official injury reports.

Resolution: Cal/OSHA issued citations: $87K in penalties. Retroactively filed required injury reports. Implemented mandatory injury reporting policy, training for all supervisors, and OSHA 300 log posting.

Lesson: Cal/OSHA injury reporting is mandatory — it is NOT confidential HR work product. Every injury must be evaluated for reporting within 8 hours if hospitalization or serious injury. Train supervisors that non-reporting = liability.

Multi-site FQHC • Sacramento County • 2024

Off-Clock Charting — Wage Theft Class Action

Challenge: DLSE investigation (triggered by employee complaint) revealed systematic off-clock work: clinicians charting patient encounters 30–60 minutes AFTER shift end without compensation. Practice normalized by management ('charting is part of your job'). Affected 200+ employees over 3-year period.

Root Cause: EHR access was slow; clinicians ran behind schedule; management expected charting to be completed same-day. No policy on paid charting time. Payroll did not track off-clock hours.

Resolution: DLSE issued citations. FQHC settled class action for $340K. Implemented paid charting time (15 min per 8-hour shift). Added 'Administrative Time' to payroll. Retrained all managers on wage laws. Conducted 100% back-wage audit.

Lesson: Charting is work — it must be paid. If EHR efficiency is the bottleneck, fix the EHR or schedule, not wages. California Labor Code §226 requires itemized wage statements — wage theft is easily caught.

Community health center • Central California • 2025

Sliding Fee Schedule Non-Compliance

Challenge: HRSA OSV discovered FQHC's sliding fee schedule had not been updated in 3 years. Federal Poverty Level (FPL) changes annually; FQHC must update within 90 days. Patients below 100% FPL were being charged — HRSA requirement is free/nominal for <100% FPL.

Root Cause: Finance director did not have calendar reminder for FPL update. FPL published in January; FQHC billing system update was low priority. No annual SFFS audit.

Resolution: Implemented annual January reminder on CFO calendar. Updated SFFS retroactively to January date. Identified all patients charged in prior 12 months below 100% FPL (847 patients). Issued refunds totaling $34K. Documented prior-year SFFS errors in CAP.

Lesson: FPL update is a compliance calendar event, not a discretionary task. Patients under 100% FPL are entitled to free care — failure to provide creates HRSA violation + patient equity issue. Automate the reminder.

Mid-size FQHC • Bay Area • 2025

Provider Credentialing Lapse — Out-of-Compliance Practice

Challenge: Routine Medical Staff Office audit discovered that one NP had been practicing for 3.5 months with expired Clinical Privileges (not renewed before expiration). No one caught the lapse. Patient safety implications unknown (no adverse events reported).

Root Cause: Medical Staff Office credential coordinator was on maternity leave; replacement staff member was never trained on renewal calendar. No automated EHR alert for credential expirations. CMO did not review credentialing dashboard monthly.

Resolution: Immediately suspended NP privileges pending re-credentialing. Conducted full credentialing file review for all 35 providers. Implemented EHR-integrated credential tracking with 90-day warning alerts. Created backup cross-training for MSO staff. CMO now reviews monthly.

Lesson: Credential expirations = HRSA violations. Every provider must have a renewal date in a tracked system (not just paper files). CMO must review credentialing status monthly. Cross-train MSO staff to prevent single-person dependency.

Small rural FQHC • Northern California • 2024

FTCA Deeming Lapse — Uninsured Liability Exposure

Challenge: FQHC's FTCA deeming status (liability insurance coverage) lapsed for 6 weeks when insurance renewal was delayed. During that period, patient filed malpractice claim alleging misdiagnosis. FQHC discovered lapse after claim was filed.

Root Cause: Finance team responsible for renewal submitted paperwork to insurance broker late. Broker did not send renewal invoice on time. FQHC did not confirm active coverage before renewal notice arrived (no mid-cycle verification).

Resolution: Immediately reestablished FTCA deeming. Hired insurance broker to send quarterly renewal confirmations. FQHC funded self-insurance reserve for tail coverage during gap period. Paid for retroactive gap coverage to protect claim filed during lapse.

Lesson: FTCA deeming is too important to be 'administrative.' Board should receive quarterly confirmation of active coverage. Implement calendar alerts + broker communication protocol + mid-cycle verification. A gap can cost $100K+ in liability.

Includes all 19 requirements with status tracking and evidence columns

OSV Case Studies

Mid-size urban FQHC (CA) • Southern California • 2024

Board Composition Corrective Action

Challenge: During HRSA OSV, reviewers found the board had only 42% consumer members (below 51% requirement) and demographics did not reflect the predominantly Latino service area.

Root Cause: Board member resignations not backfilled with consumer-patients. No process for verifying patient status annually.

Resolution: Recruited 4 patient-consumers from community health advisory committee. Implemented annual patient status verification. Revised bylaws to mandate 60% consumer target.

Lesson: Track board composition monthly — don't wait for the OSV to discover gaps. Annual patient status verification should be automatic.

Mid-size FQHC • Los Angeles County • 2025

Clinical Documentation Deficiency

Challenge: HRSA chart review during OSV found 35% of sampled NP visits lacked required supervisory co-signatures. Additionally, 20% of behavioral health encounters had incomplete treatment plans.

Root Cause: EHR co-signature workflow broken after system upgrade; no one monitored completion rates. BH treatment plan template was missing required fields.

Resolution: Implemented EHR dashboard tracking unsigned notes (daily alert to CMO). Fixed BH treatment plan template. Conducted 100% retrospective chart completion for identified gaps.

Lesson: EHR system changes need compliance impact review. Build automated monitoring — don't rely on manual checks for critical documentation requirements.

Rural FQHC • Central Valley, California • 2024

OSV Deficiency — Service Area Coverage Failure

Root Cause: Two rural clinic locations closed due to staffing shortages (RN and NP recruitment gaps). CEO did not report closures to HRSA. No alternative service delivery plan developed.

Mid-size urban FQHC • San Diego County • 2025

Cal/OSHA Workers Comp Violation Settlement

Multi-site FQHC • Sacramento County • 2024

Off-Clock Charting — Wage Theft Class Action

Root Cause: EHR access was slow; clinicians ran behind schedule; management expected charting to be completed same-day. No policy on paid charting time. Payroll did not track off-clock hours.

Community health center • Central California • 2025

Sliding Fee Schedule Non-Compliance

Root Cause: Finance director did not have calendar reminder for FPL update. FPL published in January; FQHC billing system update was low priority. No annual SFFS audit.

Mid-size FQHC • Bay Area • 2025

Provider Credentialing Lapse — Out-of-Compliance Practice

Small rural FQHC • Northern California • 2024

HRSA Operational Site Visit Preparation

Board Composition & Authority

Conflict of Interest Policy

Board Meeting Documentation

Strategic Planning & Needs Assessment

CEO/Executive Director Oversight

Required & Additional Services

Credentialing & Privileging

Quality Improvement / Assurance Program

Care Coordination & Continuity

Patient Rights & Grievances

Sliding Fee Discount Program

Annual Independent Audit

Billing & Collections Systems

Budget & Financial Management

Federal Grant Compliance & Reporting

Key Management Staff & Staffing Plan

Health Information Technology & EHR

Scope of Project & Service Sites

Emergency Preparedness & Safety

OSV Case Studies

Board Composition Corrective Action

Clinical Documentation Deficiency

OSV Deficiency — Service Area Coverage Failure

Cal/OSHA Workers Comp Violation Settlement

Off-Clock Charting — Wage Theft Class Action

Sliding Fee Schedule Non-Compliance

Provider Credentialing Lapse — Out-of-Compliance Practice

FTCA Deeming Lapse — Uninsured Liability Exposure

HRSA Operational Site Visit Preparation

Board Composition & Authority

Conflict of Interest Policy

Board Meeting Documentation

Strategic Planning & Needs Assessment

CEO/Executive Director Oversight

Required & Additional Services

Credentialing & Privileging

Quality Improvement / Assurance Program

Care Coordination & Continuity

Patient Rights & Grievances

Sliding Fee Discount Program

Annual Independent Audit

Billing & Collections Systems

Budget & Financial Management

Federal Grant Compliance & Reporting

Key Management Staff & Staffing Plan

Health Information Technology & EHR

Scope of Project & Service Sites

Emergency Preparedness & Safety

OSV Case Studies

Board Composition Corrective Action

Clinical Documentation Deficiency

OSV Deficiency — Service Area Coverage Failure

Cal/OSHA Workers Comp Violation Settlement

Off-Clock Charting — Wage Theft Class Action

Sliding Fee Schedule Non-Compliance

Provider Credentialing Lapse — Out-of-Compliance Practice

FTCA Deeming Lapse — Uninsured Liability Exposure