Oscar Vail is a titan in the world of health informatics, standing at the precarious intersection of cutting-edge technology and the increasingly complex regulatory landscape of American medicine. With the Office of the National Coordinator for Health Information Technology reporting that a staggering 88% of office-based physicians have now transitioned to electronic health records, the industry has moved beyond the era of data collection into an era of data utilization. Oscar has been a vocal advocate for moving healthcare risk management away from the reactive, “wait-and-see” manual reviews of the past toward a proactive, AI-driven future. In this conversation, we delve into the seismic shifts occurring in risk adjustment, the move from revenue-focused coding to audit-proof documentation, and how the impending 2026 Medicare Advantage regulations are forcing a total rethink of how hospitals and insurers protect their financial and clinical integrity. We explore the transition from legacy “black box” systems to transparent “glass box” AI, the critical shortage of data talent, and the specific platforms that are setting the standard for a compliance-first healthcare environment.
With nearly nine in ten office-based physicians now utilizing electronic health records, organizations are sitting on an unprecedented mountain of data. How does this shift fundamentally change the way a hospital or clinic views the concept of “risk” compared to the old manual ways of operating?
The shift is monumental because it moves us away from a world of “delayed echoes” into a world of “real-time signals.” In the old days, risk management was a forensic exercise; you looked at a pile of paper charts after something went wrong, like a medication error or a spike in infection rates, and tried to figure out why. Now, with 88% of physicians using EHRs, we have a digital nervous system that allows us to identify patterns before they become catastrophes. We can see the small, subtle warning signs—things like repeated documentation gaps, slight increases in readmission patterns, or subtle anomalies in billing—that used to be invisible in a paper-based system. It’s no longer just about avoiding a lawsuit after an incident; it’s about using data to compare risks across different departments in real-time, allowing leaders to see if a staffing shortage in one wing is directly correlating to a rise in patient complaints or poor outcomes elsewhere. This data-rich environment turns risk management into a strategic, proactive function rather than just a defensive, reactive one.
A recent report suggests that 43% of organizations identify data analytics as the area with the greatest need for new talent. What does this skills gap look like on the ground, and how is it hampering the ability of healthcare leaders to make better decisions?
That 43% figure is a loud alarm bell for the entire industry because it means that even though we have all this incredible data, nearly half of the healthcare world lacks the “interpreters” needed to make sense of it. On the ground, this looks like massive data silos where valuable insights sit trapped in digital vaults because there aren’t enough health informaticists or data scientists to build the bridges between raw numbers and clinical action. Leaders are forced to make high-stakes decisions based on gut feeling or incomplete summaries because they don’t have the internal talent to run sophisticated predictive models. This gap creates a dangerous friction where new risks—like emerging cyber threats or complex compliance changes—outpace the organization’s ability to respond. It’s not just about hiring someone who knows how to code; it’s about finding people who understand the nuance of “MEAT” criteria and can translate a data trend into a staffing change or a training program that prevents a multi-million dollar audit penalty.
The regulatory environment seems to have shifted overnight, particularly with the $556 million Kaiser settlement and the new CMS audit standards for 2026. How should Medicare Advantage plans be rethinking their coding strategies to survive this new era of scrutiny?
The Kaiser settlement in January 2026 was the final nail in the coffin for the “revenue-first” mindset. The message from CMS and the Department of Justice is crystal clear: if you can’t prove it, it’s not just a mistake—it’s a fraud risk. We are moving into a reality where CMS is going to audit every single eligible Medicare Advantage plan annually, which is a massive leap from the old model of auditing maybe 60 plans a year. When you realize that audit sample sizes are jumping from a handful of records to potentially 200 per plan, you understand that the “aggressive chart mining” strategies of the past are now massive liabilities. Organizations have to stop chasing every possible code just to bump up a risk score and start focusing on “defensible documentation.” This means every code submitted must have a transparent evidence trail that meets the MEAT criteria—Monitoring, Evaluation, Assessment, and Treatment. If a physician mentions a condition but doesn’t actually treat or evaluate it during that encounter, that code is a ticking time bomb during an audit.
You’ve mentioned that “glass box” AI is superior to “black box” algorithms when it comes to risk adjustment. Can you explain the emotional and practical difference it makes for a coder to see a transparent evidence trail?
The difference is the difference between trust and blind faith. In a “black box” system, the AI spits out a code and basically says, “Trust me.” That’s terrifying for a coder or a compliance officer who knows their signature is on that submission. Practically, a platform like RAAPID, which uses Neuro-Symbolic AI, offers a “glass box” approach where it highlights the specific text in a physician’s note that supports the recommendation. It doesn’t just suggest a code for diabetes; it points to the lab results and the treatment plan in the documentation that justifies it. Emotionally, this takes the weight off the coder’s shoulders. Instead of spending 40 minutes hunting through a chart like a detective, they can spend 8 minutes validating an evidence-based suggestion. It changes the coder’s role from a manual researcher to a high-level validator, which boosts productivity by 5x while maintaining a 92% accuracy rate that can actually stand up to a federal auditor.
When evaluating the landscape of risk adjustment solutions, you have legacy giants and specialized AI-native platforms. How should a large healthcare system decide between a massive incumbent like Optum and a specialized player?
It really comes down to whether you want a “jack of all trades” or a “master of compliance.” A giant like Optum has incredible scale and is deeply embedded in the UnitedHealth ecosystem, which makes it a very safe, integrated choice for organizations that are already living in that universe. However, because they handle everything from claims to clinical data, specialized innovation in risk adjustment can sometimes take a back seat. On the other hand, an AI-native platform is built from the ground up for this specific, 2026-compliance-focused reality. They aren’t trying to pivot a legacy system; they are using things like machine learning and medical rule logic to ensure every code is defensible from day one. If your primary fear is a RADV audit and you need specialized, high-accuracy defensibility, the niche player often offers a much more focused toolset. But if you’re looking for total vendor consolidation and can trade off some of that specialized innovation, the enterprise incumbent might be the way to go.
Managed services, like those offered by Conifer Health Solutions, take a very different approach than AI-driven software. Is there still a place for “human-speed” coding in a world that is moving so fast toward automation?
Absolutely, because technology isn’t a silver bullet for every organizational culture. Some systems simply don’t have the internal capacity, the technical infrastructure, or the desire to manage a sophisticated AI platform, and for them, a managed services approach like Conifer’s is a lifesaver. These organizations are essentially buying a culture of compliance and a team of experienced human experts to handle the heavy lifting of chart retrieval and documentation review. The trade-off, of course, is speed and cost. You don’t get the 3-10x ROI that automated AI productivity can deliver because you’re still operating at human speed. But for an organization that is currently overwhelmed and needs a “hands-on” partner to navigate the operational complexities of risk adjustment, that human expertise is worth its weight in gold. It’s about matching the solution to the organization’s current maturity level.
With annual audits becoming the “new operating standard,” how can simulating a RADV audit before code submission protect an organization’s bottom line?
Simulating an audit is like a dress rehearsal before the most important performance of your life. If you wait for CMS to tell you that your documentation is lacking, it’s already too late—you’re looking at millions in penalties and potential reputational ruin. By using platforms that can simulate these audits, organizations can proactively identify which codes are “weak” and lack the necessary MEAT criteria. This allows them to either shore up the documentation or choose not to submit a code that won’t survive scrutiny. It turns a potential 2026 financial disaster into a manageable operational task. When you consider that some of these AI platforms are hitting 92% accuracy, the simulation becomes incredibly reliable. It gives the C-suite the confidence to know that their reported risk scores aren’t just high—they’re real. In the current environment, the return on investment for these tools isn’t just about finding more codes; it’s about the “avoidance ROI” of not getting hit with a $500 million settlement.
We often talk about financial risk, but how does this entire data-driven approach specifically improve patient safety and clinical outcomes on a day-to-day basis?
This is the most rewarding part of health informatics. When we use analytics to monitor fall risks, medication errors, or infection patterns, we are literally saving lives. For example, if the data shows a pattern of missed follow-ups for a specific demographic, we can change our outreach protocols before a patient misses a critical treatment. Analytics can flag a medication concern the moment it’s documented, rather than weeks later during a manual review. This guides everything from staffing levels to specialized training. If the data shows that a specific wing has a higher rate of documentation issues, it’s often a signal of staff burnout or a process failure that could eventually lead to patient harm. By seeing these signals in one place, healthcare leaders can act with much more confidence, ensuring that the focus remains where it should be: on the patient, not just the paperwork.
What is your forecast for the future of risk adjustment?
The future is one of total transparency where the “volume-first” model of healthcare coding becomes an extinct species. We are going to see regulatory scrutiny continue to tighten, not just in 2026, but as a permanent strategy where AI-assisted detection becomes the primary tool for federal auditors. This means the gap between the “compliance-mature” organizations and those clinging to outdated, aggressive coding models will widen into a canyon. Organizations that invest now in “glass box” AI and defensible frameworks will not only outpace their competitors financially but will also build a foundation of trust with both regulators and patients. We will eventually reach a point where risk adjustment isn’t a separate, retrospective process but an automated, real-time component of the patient encounter itself, ensuring that the data we collect is as accurate and honest as the care we provide.
