BrightSpring Health Services legal and compliance interviews focus on managing the federal and state Medicaid compliance program for a company whose primary revenue source is Medicaid HCBS waiver funding that requires compliance with a complex web of federal Medicaid regulations, state-specific waiver requirements, and managed care organization contract obligations governing service authorization, documentation, billing, and quality standards, advising on the False Claims Act compliance program for a healthcare services company whose billing practices for Medicaid home health, I/DD residential, and pharmacy services are subject to OIG scrutiny and qui tam litigation risk from employees or competitors who identify billing irregularities, managing the HIPAA privacy and security compliance program for a company that handles protected health information for its pharmacy, home health, and behavioral health service populations, and navigating the state licensure and CMS certification requirements that govern BrightSpring's ability to operate Medicare-certified home health and hospice agencies, state-licensed behavioral health facilities, and HCBS waiver-qualified I/DD service programs across dozens of states. The interview tests whether you understand how legal and compliance at a diversified home and community-based healthcare services company differs from legal practice at a hospital system, a managed care organization, or a pharmaceutical company.
Start your free BrightSpring Health Services Legal & Compliance practice session.
What interviewers actually evaluate
Medicaid HCBS Waiver Compliance, False Claims Act Risk Management, HIPAA Privacy and Security Program, and State Licensure and CMS Certification Management
BrightSpring legal interviews probe whether you understand the Medicaid billing compliance, HIPAA obligations, and state regulatory management that define legal practice in a home and community-based healthcare services company. Medicaid compliance requires understanding how the specific documentation, authorization, and service delivery requirements in each state's HCBS waiver program govern whether BrightSpring's billing for I/DD residential services, home health visits, and behavioral health encounters is compliant, and how deficiencies in documentation or service delivery create both repayment liability and program exclusion risk. False Claims Act compliance requires understanding the specific billing risk areas in home health, pharmacy, and I/DD services where improper claims are most likely to occur.
What gets scored in every session
Specific, sentence-level feedback.
| Dimension | What it measures | How to answer |
|---|---|---|
| Medicaid HCBS waiver compliance and billing documentation management | Do you understand how BrightSpring Health Services' compliance team manages the Medicaid billing compliance program for its HCBS waiver-funded I/DD residential and day services, including how you ensure that BrightSpring's service documentation meets the specific requirements of each state's waiver program for demonstrating that authorized services were actually delivered in the manner and at the frequency required by each individual's person-centered plan? | Describe how you would develop BrightSpring's Medicaid billing compliance program for its I/DD residential services across 15 states, each with different HCBS waiver requirements for documentation of residential support services, including how you assess the documentation requirements in each state's waiver provider manual to identify the specific entries that must be present in each residential support service note to support a Medicaid billing claim, how you develop the electronic visit verification compliance program that meets the EVV requirements under the 21st Century Cures Act for home and community-based services, how you conduct the internal audit program that samples direct support professional service notes and billing records to identify documentation deficiencies before they are identified by state Medicaid audits, and how you manage the voluntary self-disclosure process if the internal audit identifies a pattern of billing without adequate documentation that creates a potential overpayment liability to the state Medicaid program |
| False Claims Act compliance and healthcare billing integrity | Can you describe how BrightSpring's compliance team manages the False Claims Act risk across its pharmacy, home health, and I/DD service lines, including how you identify the specific billing risk areas in each service line where improper claims are most likely to occur and how you develop the monitoring and investigation protocols that detect potential FCA violations before they result in government investigation or qui tam litigation? | Walk through how you would develop BrightSpring's False Claims Act compliance program for its home health division, including how you identify the highest-priority billing risk areas based on OIG Work Plan priorities and recent FCA settlements in the home health industry, such as billing for skilled nursing visits that did not meet Medicare's homebound and medical necessity criteria, billing for therapy services at frequencies that exceeded clinical necessity, and unbundling of services that should be billed under a single visit, how you develop the claims review process that proactively audits a sample of Medicare home health claims before they are submitted to identify and correct billing errors, how you develop the investigation protocol when a home health nurse or aide alleges in an internal report that a supervisor has instructed them to document services that were not provided or to document a patient as homebound when the nurse believes the patient does not meet the homebound criteria, and how you advise BrightSpring's leadership on the voluntary disclosure decision if the investigation confirms that a pattern of false claims has been submitted |
| HIPAA privacy and security compliance management for a multi-service healthcare company | Do you understand how BrightSpring Health Services' legal and compliance team manages the HIPAA privacy and security compliance program for a company that handles protected health information across its pharmacy dispensing records, home health clinical records, behavioral health therapy records, and I/DD service plans and incident reports, including how you manage the data breach notification requirements when a security incident potentially compromises PHI? | Explain how you would manage BrightSpring's HIPAA compliance program, including how you assess the different PHI handling risks across BrightSpring's service lines, from the pharmacy's controlled substance dispensing records and the behavioral health division's particularly sensitive mental health and substance use disorder treatment records to the home health division's Medicare billing data and the I/DD division's incident reports that document behavioral episodes and physical altercations involving vulnerable individuals, how you develop the security incident response program that identifies potential data breaches, conducts the risk of harm assessment required before breach notification decisions are made, and manages the 60-day notification timeline to affected individuals and HHS when a reportable breach is confirmed, and how you manage the Business Associate Agreement program for the third-party vendors who handle BrightSpring's PHI in billing systems, electronic health records, and data analytics platforms |
| State licensure and CMS certification compliance management | Can you describe how BrightSpring Health Services' legal and compliance team manages the state licensure and CMS certification compliance program for its Medicare-certified home health and hospice agencies, state-licensed behavioral health facilities, and HCBS waiver-qualified I/DD service providers across dozens of states where different regulatory requirements, survey processes, and enforcement mechanisms create a complex multi-state compliance program? | Describe how you would develop BrightSpring's state survey and certification compliance management program, including how you monitor the regulatory requirements in each state where BrightSpring operates to identify changes to licensure standards, survey protocols, and enforcement policies that affect BrightSpring's compliance obligations, how you develop the survey readiness program for BrightSpring's Medicare-certified home health agencies that prepares clinical and administrative staff for unannounced CMS Conditions of Participation surveys and ensures that agency operations consistently meet the clinical quality and documentation standards that CMS surveyors assess, how you manage the deficiency response process when a state or CMS survey identifies Conditions of Participation deficiencies that require a Plan of Correction within ten days of the survey exit conference, and how you manage the immediate jeopardy and termination risk when a survey reveals a deficiency that CMS determines creates immediate risk of serious harm to patients and that requires immediate corrective action to avoid Medicare certification termination |
How a session works
Step 1: Choose a BrightSpring legal scenario: I/DD HCBS waiver billing compliance with EVV requirements and internal audit self-disclosure evaluation across 15 states, home health False Claims Act compliance program with therapy necessity audit and whistleblower investigation protocol, HIPAA security incident response for a breach involving behavioral health PHI with 60-day notification timeline, or CMS home health Conditions of Participation survey deficiency response with immediate jeopardy risk assessment.
Step 2: The AI interviewer asks realistic home and community-based healthcare legal questions: how you would assess the voluntary self-disclosure decision when internal audits reveal systematic documentation deficiencies in I/DD billing, how you would investigate a home health nurse's allegation that documentation is being falsified, or how you would manage the 10-day Plan of Correction timeline when a CMS survey identifies a serious home health deficiency.
Step 3: You respond as you would in the actual interview. The system scores your answer on Medicaid compliance specificity, False Claims Act program depth, and HIPAA breach response quality.
Step 4: You get sentence-level feedback on what demonstrated genuine healthcare services legal expertise and what needs stronger HCBS waiver documentation knowledge or CMS certification compliance specificity.
Frequently Asked Questions
What is Electronic Visit Verification and why is it important for BrightSpring?
Electronic Visit Verification is a technology requirement under the 21st Century Cures Act that states must implement for Medicaid-funded personal care and home health services, requiring that the date, location, type, and duration of each home visit be electronically captured at the time the service is delivered. EVV systems use mobile applications, telephonic check-in, or GPS-enabled devices to capture visit verification data in real time, creating an auditable record that the service was delivered as billed. BrightSpring's compliance with EVV requirements is monitored by state Medicaid agencies, and deficiencies in EVV data capture can result in claim denials or billing suspensions. The legal team works with operations to ensure BrightSpring's EVV system captures all required data elements and that employees understand their obligation to use the EVV system for every Medicaid-funded home visit.
How does the OIG enforce Medicaid fraud and abuse for home and community-based service providers?
The Department of Health and Human Services Office of Inspector General enforces fraud and abuse in Medicaid programs through civil monetary penalty actions, exclusion from federal healthcare programs, and criminal referrals for the most egregious cases. The OIG's annual Work Plan identifies the compliance risk areas that OIG will prioritize for audit and investigation during the year, including recurring areas of concern for home health and HCBS waiver providers such as inadequate documentation of service delivery, billing for services to ineligible beneficiaries, and kickback arrangements with referral sources. BrightSpring's compliance program uses the OIG Work Plan as a guide for prioritizing internal audit activities and updating billing compliance policies.
What are the mental health parity requirements that affect BrightSpring's behavioral health services?
The Mental Health Parity and Addiction Equity Act requires that health plans and insurers cover mental health and substance use disorder services at parity with medical and surgical benefits, with equivalent financial requirements, treatment limitations, and prior authorization criteria. For BrightSpring's behavioral health division, mental health parity compliance is relevant when Medicaid managed care organizations or commercial health plans impose prior authorization requirements, visit limits, or documentation standards for behavioral health services that are more restrictive than the requirements they impose for comparable medical services. BrightSpring's legal team monitors managed care contract terms and prior authorization practices for potential parity violations that could be challenged through administrative complaints or litigation.
How does 42 CFR Part 2 affect BrightSpring's substance use disorder treatment services?
42 CFR Part 2 provides federal confidentiality protections for substance use disorder treatment records that are more stringent than general HIPAA requirements, prohibiting disclosure of SUD treatment records without specific patient consent even for treatment coordination purposes unless specific exceptions apply. BrightSpring's behavioral health division must manage 42 CFR Part 2 compliance for its substance use disorder treatment services by implementing separate consent processes, segregating SUD records from general behavioral health records, and training clinical staff on the circumstances in which SUD records can be shared with other providers. The interaction between 42 CFR Part 2 and HIPAA creates compliance complexity because some disclosures that are permitted under HIPAA's treatment exception require explicit patient consent under 42 CFR Part 2.
What are the HCBS settings rules and how do they affect BrightSpring's I/DD residential programs?
CMS's Home and Community-Based Services settings rules require that HCBS-funded settings including the residential programs that BrightSpring operates for individuals with intellectual and developmental disabilities meet specific criteria for community integration, individual rights, and the non-institutional character of the setting. The settings rules prohibit HCBS-funded settings from having the characteristics of an institution including mandatory participation in activities, restrictions on visitors, and isolation from the broader community. BrightSpring's I/DD residential program operations must meet the settings requirements to maintain HCBS waiver qualification, and state Medicaid agencies conduct settings assessments to verify compliance. The legal team advises program operations on the specific operational practices that must be modified to meet the settings rules' requirements for individual choice, dignity of risk, and community integration.
Also practice
One full session free. No account required. Real, specific feedback.



