§ 153.620 Compliance with risk adjustment standards.

(a) Issuer support of data validation. An issuer that offers risk adjustment covered plans must comply with any data validation requests by the State or HHS on behalf of the State.

(b) Issuer records maintenance requirements. An issuer that offers risk adjustment covered plans must also maintain documents and records, whether paper, electronic, or in other media, sufficient to enable the evaluation of the issuer's compliance with applicable risk adjustment standards, for each benefit year for at least 10 years, and must make those documents and records available upon request to HHS, the OIG, the Comptroller General, or their designees, or in a State where the State is operating risk adjustment, the State or its designee to any such entity, for purposes of verification, investigation, audit or other review.

(c) Audits and compliance reviews. HHS or its designee may audit or conduct a compliance review of an issuer of a risk adjustment covered plan to assess its compliance with respect to the applicable requirements in this subpart and subpart H of this part. Compliance reviews conducted under this section will follow the standards set forth in § 156.715 of this subchapter.