TLDR
Community-based organizations doing CMS- and Medicaid-funded work in the District of Columbia operate at an unusual three-way intersection: federal CMS rules, DC government grant and procurement rules, and the District's role as both a state-equivalent Medicaid agency and a city. Most dollars reach CBOs through the Department of Health Care Finance (DHCF), which administers DC Medicaid, plus a handful of program-specific federal pass-through channels. Survivors of CMS audit and DC Inspector General reviews treat Medicaid waiver compliance, federal grant compliance under 2 CFR Part 200, CMS-specific reporting, and DC procurement as separate compliance tracks with their own evidence files. Mishandling Medicaid encounter documentation or waiver-specific reporting is the single most common reason DC CBOs lose contracts.
If your community-based organization holds DC Medicaid funding — whether as a Medicaid provider billing per encounter, a DHCF grantee operating a waiver-funded program, or a subrecipient of CMS pass-through dollars — you operate at one of the densest grant compliance intersections in the country. DC is unusual: it functions as both the city government and the state-equivalent Medicaid agency. CMS regulates DC Medicaid the same way it regulates state Medicaid agencies. The result is that compliance work that would split across a state agency and a city agency in most jurisdictions consolidates onto a single DHCF program officer, but the underlying federal and program-specific rules don’t simplify.
This guide is the layer above what’s already on the DHCF program pages and the agreement-specific terms. It assumes you already know which DHCF program you operate under, which waiver authority applies, and who your DHCF program officer is. What it covers is the structure: how Medicaid State Plan rules, waiver-specific rules, federal Uniform Guidance, CMS provider compliance, and DC procurement fit together for a CBO.
The Funding Stack
DC Medicaid dollars and CMS grant dollars reach CBOs through several distinct mechanisms, and the compliance load differs by mechanism.
- Medicaid State Plan services billed by the CBO as a Medicaid provider. The CBO holds a DC Medicaid provider agreement, bills per encounter, and is paid based on the State Plan reimbursement structure. CMS provider compliance rules and the State Plan service definitions govern.
- Medicaid waiver services. Section 1915(c) HCBS waivers (EPD, IDD, and others), Section 1115 demonstration waivers, and Section 1915(b) managed care waivers each have program-specific service definitions, provider qualifications, and reporting. Some waiver services are billed per encounter; some are reimbursed on alternative methods.
- Medicaid managed care plan subcontracts. Where DC Medicaid managed care plans subcontract with CBOs for covered services or care management, the CBO operates under both the plan’s contract and CMS managed care rules at 42 CFR Part 438.
- DHCF grants and contracts not directly tied to claims. Some DHCF grants fund population health, care coordination, and community health worker programs. These are subrecipient or vendor relationships analyzed under 2 CFR 200.331.
- CMS pass-through grants. Federal CMS cooperative agreements and grants reach CBOs less frequently than Medicaid funding, but when they do — for example, ACL-administered grants in coordination with CMS — they trigger Uniform Guidance directly.
- Other federal pass-through funding through DC agencies. SAMHSA, HRSA, and CDC pass-through reaches CBOs through DC agencies including DHCF; these flows are subject to Uniform Guidance.
For a CBO, the audit-relevant question is which dollars on a given invoice come from which source. The accounting must allocate expenditures across sources in a way that satisfies each source’s rules independently.
CMS Provider Compliance for Direct Billers
CBOs that bill DC Medicaid directly are subject to CMS provider compliance expectations. The recurring elements:
- Provider enrollment and screening. CMS provider screening rules under 42 CFR Part 455 apply. DHCF screens providers at enrollment and periodically thereafter.
- Documentation per encounter. Each Medicaid encounter requires a clinical record meeting CMS standards for the procedure code billed: dated, signed, identifying the rendering provider, capturing the clinical content sufficient to support the service.
- Compliance program. Providers receiving certain levels of Medicaid revenue are required to operate a compliance program addressing the seven elements: written standards, designated compliance officer and committee, training, communication channels, monitoring and auditing, enforcement, and response and prevention.
- Program integrity expectations. DHCF Program Integrity and CMS conduct retrospective audits, recovery audit contractor reviews, and managed care program integrity reviews. Recouped amounts can be substantial.
- Self-disclosure obligations. Providers that identify overpayments must self-disclose and return them within the timeframes set by CMS rules.
CBOs new to direct Medicaid billing often underestimate the compliance program requirement. The cost of building the program is real but small relative to the cost of a recoupment after a Program Integrity audit.
Waiver-Specific Compliance
Each Medicaid waiver under which a CBO operates has its own service definitions, provider qualifications, and reporting. Common compliance points:
- Service definition fidelity. Each waiver service has a specific definition. Billing or grant-reporting under one service code for activities that don’t match the definition is a recurring finding.
- Provider qualification verification. Waiver services typically require specific provider qualifications — credentials, training, supervision. Documentation that staff delivering waiver services meet the qualifications is part of the compliance file.
- Person-centered planning. 1915(c) HCBS waivers require person-centered service plans for each beneficiary, with documentation of the beneficiary’s involvement in plan development. Missing or weak person-centered plans show up in CMS HCBS quality reviews.
- HCBS settings rule. CMS HCBS settings requirements at 42 CFR 441.301(c)(4) apply to settings where waiver services are delivered. Settings not in compliance can lose waiver funding.
- Quality measures. Each waiver has quality measures that DC reports to CMS. CBO data feeds those measures.
The audit-relevant pattern is that waiver compliance is documented at the beneficiary and service level, with periodic aggregation into DHCF program-office reports.
Federal Pass-Through and Uniform Guidance
Where the funding includes federal pass-through dollars subject to Uniform Guidance, the Uniform Guidance practical guide covers the structure end to end. HHS adopted Uniform Guidance with HHS-specific additions at 45 CFR Part 75; together those documents are the framework.
The DC-specific implications:
- Cost principles in Subpart E apply to the federal portion. Indirect cost rates apply at the negotiated rate or the de minimis 15 percent under the 2024 revision. The 2 CFR 200 Subpart E cost principles guide covers the structure.
- Procurement standards in Subpart D apply where federal pass-through dollars are used to purchase goods or services.
- Subaward requirements apply if the CBO subcontracts a portion of federal-funded work to another entity.
- Audit requirements in Subpart F apply when federal expenditures cross the Single Audit threshold.
The CBO needs a documented basis for distinguishing federal pass-through dollars from non-federal dollars (such as the District-share portion of Medicaid). The cost-allocation methodology is what makes that line clean.
DC Procurement Layer
DC government grants and contracts come with DC-specific procurement and grant rules administered by the Office of Contracting and Procurement, the Office of the Chief Financial Officer, and the awarding agency (DHCF, in this context). Key elements:
- DC grant agreement terms. DHCF grant agreements include DC-specific provisions including District anti-deficiency, Living Wage, and First Source hiring requirements where applicable.
- DC procurement. Where the CBO uses DHCF grant funds to procure goods or services, DC procurement rules layer on top of federal procurement standards. The more restrictive rule generally controls.
- Closeout cadence. DC FY runs October 1 to September 30. Most DHCF agreements align closeout to DC FY-end. Federal pass-through reporting on the same dollars often aligns to a different awarding-agency timeline; the CBO has to satisfy both.
Single Audit and DC Inspector General
A DC CBO that expends $750,000 in federal funds in any fiscal year ending before October 1, 2024 — or $1,000,000 thereafter — is subject to the Single Audit. The federal share of Medicaid funding counts toward the threshold for subrecipient relationships. The audit covers all federal funds, not just CMS or Medicaid.
The DC Office of the Inspector General also conducts audits of District grants and contracts, including DHCF agreements. Findings from a DC OIG audit can trigger DHCF corrective action and CMS attention if the underlying funding is federal.
The single audit threshold guide and common single audit findings cover the federal angle. The 2 CFR 200 Subpart D procurement guide and federal procurement thresholds cover the procurement piece.
Documentation Files to Maintain
The minimum file structure that withstands DHCF, CMS, and DC OIG audits plus the Single Audit:
- Provider agreement file. DC Medicaid provider agreement, every revalidation, screening documentation.
- Compliance program file. Compliance program documents, training records, monitoring reports, response and prevention documentation.
- Per-encounter clinical file. Clinical records supporting Medicaid claims.
- Waiver-specific file. Person-centered plans, provider qualification documentation, waiver-service documentation per beneficiary.
- Grant and contract file. Original agreement, every amendment, signed cover letters.
- Funding allocation file. Documented methodology for allocating costs across Medicaid claims, federal pass-through, District grants, and other sources.
- Budget file. Original approved budget, every approved amendment, working budget reconciled to the general ledger monthly.
- Personnel file. Time and effort certifications under 2 CFR 200.430 (federal portion), position descriptions, credentials.
- Procurement file. Procurement policy, conflict-of-interest disclosures, solicitations and contracts above the policy threshold, sole-source justifications.
- Subrecipient file. If the CBO further subcontracts federal pass-through. The subrecipient monitoring guide covers the obligation flow-down.
- Audit file. Single Audit reports, DHCF and CMS audit responses, DC OIG audit responses, FAC confirmations.
The audit prep checklist, grant compliance checklist, and DC federal pass-through pipeline worksheet cover the operating cadence.
Where DC CBOs Get Caught
Recurring findings cluster in five areas.
- Medicaid encounter documentation. Clinical records that fail CMS documentation standards for the procedure billed, leading to claim recoupment on retrospective audit.
- Waiver service definition mismatch. Activities billed or reported under a waiver service code that don’t match the service definition.
- Cost mis-allocation. Federal vs. District-share allocation that doesn’t match the underlying activity, surfacing during Single Audit.
- Compliance program gaps. Direct Medicaid billers without operative compliance programs meeting CMS expectations.
- Closeout timing. Late or incomplete closeout submissions on DC FY-end agreements.
Software and Workflow Considerations
DC Medicaid and CMS compliance is a documentation, encounter-data integrity, and fund-accounting problem at once. CBOs that handle it well typically have:
- A grant management system that tracks budget, expenditures, and deliverables on the same record by funding source. The best grant compliance software listicle covers the category.
- An EHR that captures Medicaid encounters with documentation meeting CMS standards.
- A cost-allocation engine for federal vs. District-share allocation.
- A compliance program management workflow for direct Medicaid billers.
- A subrecipient monitoring workflow if the CBO further subcontracts.
Where to Start
If you’re picking up DC Medicaid and CMS compliance for the first time:
- Map your funding stack — Medicaid claims revenue, waiver-specific revenue, federal pass-through grants, District-only grants. The mix tells you which compliance tracks apply.
- If you bill Medicaid directly, audit the compliance program. Build it if it doesn’t exist.
- Build the cost-allocation methodology before the first invoice. Retrofitting allocation during a Single Audit or a DC OIG audit is what turns findings into disallowed costs.
- Calendar reporting deadlines against both DC FY (October 1 to September 30) and federal awarding-agency timelines.
- For each Medicaid waiver under which you operate, audit the waiver-specific compliance file at the beneficiary level. Person-centered plans, provider qualification, service definition fidelity.
DHCF does not renew agreements with CBOs that produce serial audit findings or Medicaid claim recoupments. CMS attention against DC Medicaid as a whole flows back to DHCF, which flows back to the CBO. Compliance is the precondition to staying in the portfolio.
For District-level context, see the District of Columbia nonprofit profile. For city-level context including DHCF and other DC agencies, see the Washington DC nonprofit profile.
Free resource
Get the Nonprofit Grant Compliance Checklist
A practical checklist for post-award grant compliance: restricted funds, reporting cadence, audit prep, and common failure points. Delivered by email.
Source: eCFR Title 2, Part 200
Source: eCFR Title 45, Part 75
- DHCF
- DC Department of Health Care Finance. The single state Medicaid agency for the District of Columbia, administering DC Medicaid State Plan services, Medicaid waivers, the Children's Health Insurance Program (CHIP), and the District's Medicaid managed care program.
DEFINITION
- 1915(c) waiver
- A Medicaid waiver authorized under Section 1915(c) of the Social Security Act that permits states to provide Home and Community-Based Services as an alternative to institutional care for specified populations. DC operates several 1915(c) waivers.
DEFINITION
- 1115 demonstration waiver
- A Medicaid waiver authorized under Section 1115 of the Social Security Act that permits states to test innovative approaches to delivering Medicaid services. Demonstration waivers must be budget-neutral over the demonstration period.
DEFINITION
- Subrecipient vs. vendor
- Under 2 CFR 200.331, a subrecipient relationship exists when a pass-through entity provides federal funds to carry out a portion of the federal program; a vendor relationship exists when an entity purchases goods or services for its own use. The classification determines whether Uniform Guidance applies to the downstream entity.
DEFINITION
- FFP
- Federal Financial Participation. The federal share of Medicaid expenditures, varying by service category and state. DC's FFP for most services is 70 percent under the federal medical assistance percentage (FMAP) framework as adjusted for the District.
DEFINITION
Q&A
How does CMS reporting cadence work for a DC CBO?
Reporting cadence depends on the funding mechanism. For Medicaid claims, CBOs that bill DC Medicaid submit claims per encounter and reconcile monthly through DHCF's Medicaid Management Information System (MMIS). For waiver-specific reporting, DHCF requires program-specific data submissions on a cadence defined by each waiver, often quarterly. For federal pass-through grants, the awarding terms specify cadence — typically quarterly financial and programmatic reports plus an annual federal financial report. CMS-specific cooperative agreements or grants reach CBOs less frequently and have their own terms.
Q&A
What does a DHCF program audit look like?
DHCF conducts provider and grantee audits on a risk-weighted cycle. The audit covers Medicaid claim documentation (per-encounter clinical records meeting CMS standards for the procedure billed), waiver-specific service documentation, financial records, and where applicable, federal pass-through compliance. CMS conducts independent audits and program integrity reviews of DC Medicaid as a whole, and findings can lead to recoupment of FFP that flows back to DHCF and ultimately to providers and grantees.
Q&A
How does program integrity affect CBO operations?
DC Medicaid program integrity sits at DHCF's Division of Program Integrity and at CMS centrally. Recurring focus areas include credentialing and provider qualification verification, beneficiary eligibility verification, service documentation, billing accuracy, and managed care plan oversight. CBOs that bill Medicaid directly need provider compliance programs that meet CMS expectations under the Affordable Care Act compliance program requirements. CBOs that operate under DHCF grants or contracts face the same expectations channeled through the agreement.
Frequently asked