Cotiviti, EMSI & HEDIS Medical Chart Retrieval — Health Plan Audit & Provider Guide
Explaining Cotiviti, Datavant, and EMSI medical chart retrieval requests for HEDIS quality reporting, Medicare Advantage Risk Adjustment (RADV), and commercial payer audits.
Cotiviti & HEDIS Medical Chart Retrieval Operational & Billing Facts
- What HEDIS & Risk Adjustment Retrieval Is
- Annual medical chart pulls required by NCQA (HEDIS) and CMS (Medicare Advantage RADV) to verify diagnosis codes and quality measures.
- HIPAA Legal Basis
- Permitted under 45 CFR § 164.506 (Treatment, Payment, and Health Care Operations — TPO) without individual patient authorization when requested by or on behalf of the patient's health plan.
- Why Providers & Patients Search This
- Medical practices receive bulk chart request letters from 'Cotiviti Records Retrieval Agent' and want to verify legitimacy and compliance rules.
How Cotiviti & HEDIS Medical Chart Retrieval Invoices Compare Under Federal & State Law
| Request Pathway | Applicable Fee Rule | Billing & Radiology Included? |
|---|---|---|
| Patient Direct Request (45 CFR § 164.524) | Federal “Patient Rate” (cost-based labor only when delivered directly to patient; $0 search fee) | Clinical chart only unless PFS Billing & PACS Film Library are requested separately |
| Third-Party Attorney Request (Post-Ciox v. Azar) | State Statutory Per-Page Fee Schedule + Clerical Search Fee Cap | Requires parallel UB-04/CMS-1500 & DICOM PACS packets |
| USMedicalRecords.com Managed Retrieval | Line-item statutory audit of every vendor invoice before payment | Simultaneous 3-department dispatch (HIM + PFS Billing + Radiology PACS) |
What Is a 'Cotiviti Records Retrieval Agent' Request and Is It Covered by HIPAA?
Every spring, physician offices and hospital HIM departments receive thousands of chart requests from Cotiviti (or Ciox/Datavant) citing HEDIS (Healthcare Effectiveness Data and Information Set) or Medicare Advantage Risk Adjustment validation. Under the HIPAA Privacy Rule (45 CFR § 164.506), a health plan's contracted business associate is permitted to request relevant medical charts for 'Health Care Operations' (quality assessment and HEDIS reporting) and 'Payment' (risk adjustment coding verification) without a separate patient-signed authorization. Conversely, if you are a law firm, disability representative, or patient seeking your own complete medical chart rather than responding to a payer audit, you must use the 45 CFR § 164.524 / § 164.508 retrieval workflow on /order.