CMS announces computer matching program with VA to identify duplicate Medicare/VHA payments

What happened

The Centers for Medicare & Medicaid Services (CMS) disclosed a computer matching program with the Veterans Health Administration (VHA) to identify beneficiaries enrolled in both Medicare and VHA health care. The program will share a recurring finder file of veteran beneficiaries and use the results to recover duplicate payments, improve payment accuracy, and detect fraud, waste, and abuse.

Why it matters for trust and compliance

• Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
• The inter‑agency data matching program raises privacy and security considerations for health data sharing between federal agencies.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Revisit retention schedules and data minimisation for the data involved.
3. Review the transfer mechanisms relied on for affected data flows.
4. Map the security requirements to existing controls and close gaps.
5. Confirm handling of sensitive data categories meets the stricter rules.