Most companies that sign a Corporate Integrity Agreement with the HHS Office of Inspector General have never heard the term Board Compliance Expert before their lawyer explains it to them. Understandably. It is a narrow role that only exists inside a specific kind of federal settlement, and it is easy to misunderstand, sometimes with real consequences.
Here is what the role actually is, why it exists, and why the independence requirement behind it is stricter than most people expect.
What the role requires
A CIA typically requires the organization’s Board, or whoever performs the Board’s functions, to retain someone with expertise in compliance with Federal health care program requirements to review the effectiveness of the compliance program at specific points in the agreement’s term, and to prepare a written report on what they find. That report goes to the Board, not directly to OIG, though it ultimately feeds into what the organization submits.
The point of the role is simple: someone independent has to look at what the organization actually built and say, in writing, whether it is working. Not whether the policy exists. Whether it is operating the way it is supposed to.
The independence rule is stricter than most people assume
This is the part that catches organizations off guard. The Compliance Expert cannot be employed or engaged by the entity in any other capacity, current or prior. Not “should probably be independent.” Not “should avoid obvious conflicts.” A flat rule.
That means whoever designs your compliance program, drafts your written standards, builds your training curriculum, cannot also be the one who reviews it and reports on whether it works. If the same person or firm does both, the review is not independent, no matter how well-intentioned the reviewer is. It is the same self-review problem that keeps auditors from auditing their own consulting work, applied to compliance.
We have seen this specific point misunderstood in a few different ways. Sometimes an organization assumes that because a firm has deep expertise in exactly their situation, that firm is the natural choice for the review too, without realizing the same expertise that makes them a strong program designer disqualifies them from the review role. Sometimes an organization without a formal Board assumes the requirement does not apply to them at all, since there is no Board in the traditional sense to retain anyone. It usually does still apply. Where an organization has no Board, the CIA typically directs whoever performs Board functions, often the owner, to fulfill this obligation personally, not to skip it.
What the review actually looks like
A credible review is not a document check. It typically includes review of the written standards, committee minutes, training records, and disclosure logs, interviews with the compliance officer and relevant staff, and testing of a sample of actual program activity against what is documented; for example, confirming that training records match delivered sessions, or that disclosures were logged and resolved the way the policy says they should be. The output is a written report with findings and recommendations, plus a certification confirming the reviewer’s independence.
Why this matters beyond the CIA itself
The organizations that treat this requirement as a genuine check, not a formality to satisfy, tend to get real value out of it. An independent reviewer who has no stake in defending the program’s design will surface gaps a builder is less likely to notice in their own work. That is the whole point of the independence rule, and it is worth taking seriously even beyond the letter of the requirement.
If your organization is under a CIA, or anticipating one, and you are still sorting out who does what, the independence question is worth resolving early, before you have already engaged someone for the build who then cannot serve as your reviewer. Getting this structure right from the start avoids a harder conversation later.
If you have questions about how this applies to your situation, the first conversation is free and confidential.