Network Adequacy Due Diligence for MA Plan Acquisitions

You Are Not Buying a Plan — You Are Buying a Network

When a Medicare Advantage plan acquires another MA plan, the transaction documents describe premium revenue, membership counts, Star Ratings, and market share. What they rarely describe with comparable rigor is the thing that makes all of those numbers possible or impossible to sustain: the provider network the acquiring entity is inheriting.

Networks are not assets in the traditional sense. They are webs of bilateral agreements — each one terminable, each one dependent on credentialing currency, each one attached to a specific provider who may be retiring, relocating, or already under-satisfied with contract terms. Acquiring a plan without understanding its network in granular detail is acquiring a liability dressed as an asset. The deficiency notice that arrives eight months post-close reflects decisions made before the deal — decisions the acquiring entity can no longer influence, only manage.

The plans that execute MA acquisitions successfully treat network adequacy due diligence as a standalone workstream, run in parallel with financial and legal diligence, staffed by people who understand HPMS, HSD tables, and CMS compliance — not by generalist M&A analysts. The findings from that workstream should be material inputs to the deal structure, the purchase price, and the post-close integration plan.

The Four Dimensions of Network Due Diligence

A thorough network adequacy review of an acquisition target spans four areas, each of which can surface findings that affect deal economics.

Contract inventory and term analysis: Obtain the full contract roster — every provider agreement, every facility contract, every delegated credentialing arrangement. For each contract, the diligence team needs the term and expiration date, the termination notice requirements, any auto-renewal provisions, and the rate structure. Contracts that expire within 12 months of close require immediate attention: will they renew on existing terms, and does the target have existing relationships strong enough to support renegotiation at reasonable rates? Contracts with 30-day termination clauses are particularly important — they are nominally durable but practically fragile. A provider who is unhappy with the new ownership can exit before the acquiring plan has time to respond.

County gap analysis against current HSD requirements: Run the target plan's provider roster against current CMS HSD requirements for every county in the service area. This analysis requires the full provider file — contracted providers, their specialty designations, their practice locations, and their credentialing status. Map each provider against the applicable time-distance standard for their county classification. The output is a gap map: which counties are compliant, which are marginal, and which are already deficient under current standards. A target plan with a 94% compliant network sounds strong until you discover that the 6% deficiency is concentrated in the highest-enrollment counties in the service area.

Pending deficiency notices and CMS correspondence review: Request all CMS correspondence for at least the prior two filing cycles, including HPMS notifications, deficiency notices, corrective action plan documentation, and any good faith outreach exception files that were submitted. A deficiency notice that the target plan is actively remediating does not disappear at deal close — the acquiring entity steps into the target's regulatory shoes. An open deficiency in a corrective action plan phase transfers entirely, including the timeline and consequences for non-completion. Plans that have received deficiency notices in multiple consecutive cycles are exhibiting a structural adequacy problem, not a one-time gap.

Credentialing status and currency audit: Credentialing is the operational foundation of network adequacy compliance, and credentialing processes at smaller or less-resourced plans are frequently the source of the most significant post-close surprises. Request the credentialing files for a statistically significant sample of the target's provider roster — a minimum of 15 to 20 percent of active providers, weighted toward the counties with the thinnest coverage. Review for expired credentials, incomplete re-credentialing cycles, and providers who are listed as active in the network but have not completed their re-credentialing within the required cycle. Providers with lapsed credentials cannot be listed in HPMS until re-credentialing clears. Discovering at the next filing cycle that 8 percent of the inherited network is uncredentialed-and-uncountable can convert a compliant network into a deficient one overnight.

What Good Faith Documentation Reveals

The target plan's prior exception documentation files — the good faith effort records submitted alongside deficiency counties in prior HPMS filings — are one of the most revealing artifacts available in network due diligence, and one of the most overlooked.

A well-organized exception file demonstrates that the target plan has a functioning outreach infrastructure, understands what CMS requires for exception support, and has invested in the documentation discipline that separates sustainable compliance from luck. A thin exception file — a single form letter per county, no outreach logs, sparse provider response documentation — tells you that the target plan's adequacy compliance has been held together by a favorable provider market rather than by operational discipline. When market conditions shift or provider attrition hits, that plan will not have the internal capability to respond.

The quality of a plan's exception documentation is a leading indicator of its adequacy operations capability. Poor documentation now means deficiency exposure later — and the acquiring entity inherits both.

Review at minimum three years of exception files. Look for trend patterns: are the same counties recurring as exception filings cycle after cycle? Recurring exception counties are chronic adequacy problems. Are the exception files growing thinner or more substantial over time? Thinning files suggest a compliance team that is struggling to maintain documentation discipline. A target plan that has clean exception files across multiple cycles has built the internal capability the acquiring entity will need to sustain adequacy operations post-close.

Structuring the Deal to Reflect What You Found

Network due diligence findings should feed directly into deal structure. A target plan with open deficiencies, credentialing gaps, and thin exception documentation is not the same asset as a target plan with a clean HPMS history. The purchase price, the representations and warranties, and the post-close integration budget should reflect that difference.

Specific provisions to consider: an escrow or holdback tied to the outcome of the next HPMS filing cycle post-close, seller representations on the completeness of the provider roster and credentialing status, and indemnification for deficiency notices arising from network gaps that existed pre-close. None of these provisions is exotic — they are the network adequacy equivalent of indemnification for undisclosed litigation that is standard in any M&A transaction.

Post-close, budget for the integration work that network due diligence reveals will be needed. A plan with credentialing gaps needs immediate re-credentialing capacity. A plan with chronic deficiency counties needs outreach investment in those counties before the next filing cycle. A plan with weak exception documentation needs process and tooling investment before the next submission window. These costs are known and estimable at due diligence — they are not surprises if the diligence was done correctly. Building them into the integration budget before close is the difference between a smooth post-close adequacy operation and an emergency remediation program running under the pressure of a CMS filing deadline.