# Ohio Admin. Code 5160-26-06: Rule 5160-26-06. Managed care: program integrity - fraud, waste and abuse, audits, reporting, and record retention > Ohio · Regulations · In force URL: https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_06 ## Section - **Citation:** Ohio Admin. Code 5160-26-06 - **Heading:** Rule 5160-26-06. Managed care: program integrity - fraud, waste and abuse, audits, reporting, and record retention - **Jurisdiction:** Ohio - **Kind:** Regulations - **Status:** In force - **Text as of:** August 14, 2026 - **Source:** Compiled text - **Location:** Ohio Administrative Code / Agency 5160 / Chapter 5160-26 / Rule 5160-26-06 ## Text 119.03 (A) A managed care entity (MCE) must have administrative and management arrangements or procedures, including a mandatory compliance plan, to guard against fraud, waste and abuse as required in the MCE provider agreement or contract with the Ohio department of medicaid (ODM) located at http://medicaid.ohio.gov/. (1) These arrangements or procedures must be made available to ODM upon request. (2) The MCE must annually submit to ODM a report that summarizes the MCE's fraud, waste, and abuse activities for the previous year and identifies any proposed changes to the MCE's fraud, waste, and abuse program for the coming year. (B) ODM or its designee, the state auditor's office, the state attorney general's office, and the U.S. department of health and human services may evaluate or audit the MCE's performance for the purpose of determining compliance with the requirements of Chapter 5160-26 of the Administrative Code, fraud, waste, and abuse statutes, applicable state and federal regulations, or requirements under federal waiver authority. (C) ODM or its designee may conduct on-site audits and reviews as deemed necessary based on periodic analysis of financial, utilization, provider network, and other information. (D) The MCE must submit required reports and additional information, as requested by ODM, as related to its duties and obligations and where needed to ensure operation in accordance with all state and federal regulations or requirements. (E) If the MCE fails to submit any ODM-requested materials, as specified in paragraph (D) of this rule, without cause as determined by ODM, on or before the due date, ODM may impose any or all of the sanctions listed in rule 5160-26-10 of the Administrative Code or the MCE's provider agreement or contract with ODM. (F) Record retention rdance with all state and federal regulations or requirements. (E) If the MCE fails to submit any ODM-requested materials, as specified in paragraph (D) of this rule, without cause as determined by ODM, on or before the due date, ODM may impose any or all of the sanctions listed in rule 5160-26-10 of the Administrative Code or the MCE's provider agreement or contract with ODM. (F) Record retention. The MCE and its contracted providers and subcontractors shall retain and safeguard all hard copy or electronic records originated or prepared in connection with the MCE's performance of its obligations under the MCO provider agreement or the SPBM contract, including but not limited to working papers or information related to the preparation of reports, medical records, progress notes, charges, journals, ledgers, and fiscal reports, in accordance with applicable sections of the federal regulations, the Revised Code, and the Administrative Code. Records stored electronically must be produced at the MCE's expense, upon request, in the format specified by state or federal authorities. As specified in 42 C.F.R. 438.3 (October 1, 2021), such records must be maintained for a minimum of ten years from the renewal, amendment or termination date of the provider agreement. In the event the MCE has been notified that state or federal authorities have commenced an audit or investigation of the MCO provider agreement or the SPBM contract, records must be maintained until such time as the matter under audit or investigation has been resolved. For the initial three years of the retention period, the MCE and its contracted providers and subcontractors must store the records in a manner and place that provides readily available access. Last updated July 18, 2022 at 8:19 AM Supplemental Information Authorized By: 5167.02 Amplifies: 5162.03 , 5167.10 , 5167.03 , 5164.70 , 5164.02 7/18/2027 7/1/1996, 7/1/2001, 10/31/2005, 7/1/2017, 2/14/2019 ## Nearby sections - [Ohio Admin. Code 5160-26-01 Rule 5160-26-01. Managed care: definitions](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_01.md) - [Ohio Admin. Code 5160-26-02 Rule 5160-26-02. Managed care: eligibility and enrollment](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_02.md) - [Ohio Admin. Code 5160-26-02.1 Rule 5160-26-02.1. Managed care: termination of enrollment](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_02_1.md) - [Ohio Admin. Code 5160-26-03 Rule 5160-26-03. Managed care: covered services](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_03.md) - [Ohio Admin. Code 5160-26-03.1 Rule 5160-26-03.1. Managed care: primary care and utilization management](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_03_1.md) - [Ohio Admin. Code 5160-26-03.2 Rule 5160-26-03.2. Managed care: long-term services and supports respite services for children](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_03_2.md) - [Ohio Admin. Code 5160-26-05 Rule 5160-26-05. Managed care: provider network and contracting requirements](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_05.md) - [Ohio Admin. Code 5160-26-05.1 Rule 5160-26-05.1. Managed care: provider services](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_05_1.md) - [Ohio Admin. Code 5160-26-06 Rule 5160-26-06. Managed care: program integrity - fraud, waste and abuse, audits, reporting, and record retention](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_06.md) - [Ohio Admin. Code 5160-26-08.3 Rule 5160-26-08.3. Managed care: member rights](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_08_3.md) - [Ohio Admin. Code 5160-26-08.4 Rule 5160-26-08.4. Managed care: appeal and grievance system](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_08_4.md) - [Ohio Admin. Code 5160-26-09.1 Rule 5160-26-09.1. Managed care: third party liability and recovery](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_09_1.md) - [Ohio Admin. Code 5160-26-10 Rule 5160-26-10. Managed care: sanctions and provider agreement actions](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_10.md) - [Ohio Admin. Code 5160-26-11 Rule 5160-26-11. Managed care: managed care plan non-contracting providers](https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_11.md) --- Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/STATE_OH_ADC_5160_26_06. Check the current official text before relying on it. Not legal advice.