Audit Considerations for Healthcare Entities

Why healthcare audits differ from standard commercial engagements

Healthcare entities operate in a regulated pricing environment where the entity does not set its own prices. The Dutch NZa sets maximum tariffs for insured care. Germany’s DRG (Diagnosis Related Group) system determines hospital reimbursement. Belgium’s RIZIV/INAMI sets fee schedules. The entity delivers the service, bills based on a tariff structure, and then waits for the insurer or government to confirm the final reimbursement amount. This gap between billed and settled amounts is the defining audit challenge.

ISA 540.15 applies directly. The final transaction price under IFRS 15 is an estimate until settlement occurs. Variable consideration under IFRS 15.50–54 requires the entity to constrain the estimated transaction price to the amount that is highly probable of not being reversed. In healthcare, insurers routinely adjust reimbursement rates, disallow certain claims, or negotiate retrospective discounts. That constraint is tested every reporting period.

The second distinguishing factor is the regulatory compliance burden. Healthcare entities are subject to sector-specific legislation that directly affects the financial statements. Licensing requirements, patient ratio regulations, quality reporting obligations, and pharmaceutical regulations all create compliance risks under ISA 250.A6. Non-compliance can result in fines, loss of licences, and clawback of government subsidies. Each of these has a direct financial statement impact.

The engagement team needs healthcare-specific knowledge. ISA 220.A12 requires the engagement partner to consider whether the team has the competence to perform the engagement. If your firm’s construction specialists audit a hospital, the revenue model and regulatory environment are unfamiliar. Either assign team members with healthcare experience or bring in a specialist under ISA 620.

The four risk areas that define healthcare audit work

Revenue recognition: variable consideration and retrospective settlements (IFRS 15.50–54)

Healthcare revenue is rarely final at the point of service delivery. A Dutch hospital delivering insured care bills through the DBC (Diagnose Behandel Combinatie) system. Each DBC has a tariff. But the final payment depends on the insurer contract, the patient’s coverage, any negotiated discounts with the specific insurer, and the outcome of the annual settlement process between the hospital and the insurer. The hospital recognises revenue at the tariff rate, then adjusts when settlements are agreed.

Under IFRS 15.56, the entity must estimate variable consideration using either the expected value method or the most likely amount method. For a hospital with thousands of DBCs across multiple insurers, the expected value method is typically more appropriate. Settlement varies by insurer, by treatment category, and by patient mix. A single “most likely” number cannot capture that variation.

The audit risk is in the accuracy of the settlement estimate. If the hospital estimates a 2% settlement discount on €40M of billed revenue, the provision for settlement adjustments is €800K. If the actual settlement discount is 4%, revenue is overstated by €800K. ISA 540.18 requires the auditor to test either management’s estimation process or develop an independent estimate. The retrospective comparison (comparing prior-year settlement estimates to actual settlements received) is the primary procedure.

Medical malpractice provisions (IAS 37.36–52)

Healthcare entities face medical malpractice claims that can take years to resolve. IAS 37.14 requires a provision when a present obligation exists, an outflow is probable, and a reliable estimate can be made. Claim development periods in healthcare often exceed five years for serious cases.

IAS 37.39 requires the expected value method for a large population of similar claims. A hospital with 40 open malpractice claims should not provision each claim individually at its most likely outcome. It should estimate the probability-weighted average across all claims. This is counterintuitive for many non-Big 4 audit teams who are accustomed to provisioning each claim at its specific probable amount. The expected value method produces a different figure because it accounts for the probability that some claims will settle for more than expected and others for less. In practice, the expected value is almost always higher than the sum of individual most likely outcomes because tail risk on a few large claims pulls the weighted average upward.

For a single large claim, IAS 37.40 permits the most likely outcome method. But even here, paragraph 40 requires consideration of other possible outcomes. A claim with a 60% probability of €500K settlement and a 15% probability of €2M settlement has a most likely outcome of €500K and an expected value of €600K. The provision may need to be higher than the most likely amount.

The auditor’s key procedure under ISA 540 is obtaining the claims register, testing the completeness of claims recorded, and evaluating management’s methodology for estimating the provision. Where claims exceed the entity’s insurance deductible, the gross provision and the insurance reimbursement asset must be recorded separately under IAS 37.53.

Regulatory compliance and government subsidies (ISA 250 and IAS 20)

Healthcare entities receive government subsidies under IAS 20 for specific purposes: training programmes and equipment upgrades are common, as are operating subsidies for rural or underserved facilities. The conditions attached to these subsidies create compliance obligations. If the entity fails to meet the conditions, the subsidy is repayable (IAS 20.32). The auditor must assess whether the conditions have been met and whether a contingent liability for repayment exists.

ISA 250.14 requires the auditor to obtain sufficient audit evidence regarding compliance with laws and regulations that have a direct effect on the determination of material amounts. In healthcare, this includes compliance with licensing conditions, staffing ratio requirements, and quality reporting obligations. A hospital that falls below mandated nursing ratios may face licence suspension or fine, and both of those have financial statement consequences that require disclosure or provisioning.

Specialised asset valuation (IAS 16 and IAS 36)

Healthcare entities hold specialised medical equipment (MRI scanners, robotic surgical systems, linear accelerators) with high acquisition costs and technology-driven obsolescence. An MRI scanner purchased for €2.5M may have a useful life of 10 years for depreciation purposes, but a new model released in year four may reduce the recoverable amount of the existing unit. This is different from most industries. In manufacturing, a CNC machine from 2019 still produces the same output. In healthcare, a diagnostic tool from 2019 may be clinically inferior to current models, and referral patterns shift accordingly.

IAS 36.9 requires an impairment test whenever events or changes in circumstances indicate that the carrying amount may not be recoverable. In healthcare, the indicator is often technological obsolescence rather than physical deterioration. Review capital expenditure plans to identify whether new equipment acquisitions signal impairment of existing assets.

Component accounting under IAS 16.43 applies to healthcare assets with distinct components that have different useful lives. The imaging coils on an MRI scanner may need replacement every five years while the magnet lasts fifteen. If the entity has not componentised these assets, depreciation is misstated and derecognition on component replacement is not possible.

How to audit healthcare revenue recognition

The retrospective settlement process drives the revenue audit. Start with the prior-year settlement and work forward.

Obtain the final settlement letters from all major insurers for the prior reporting period. Compare the amounts settled to the amounts the entity estimated at the prior year-end. Calculate the settlement variance for each insurer and each treatment category. This retrospective analysis under ISA 540.A127 tells you whether the entity’s estimation process has been reliable and whether it has a directional bias.

If the entity consistently estimates a 2% settlement discount but the actual discount averages 3.5%, the entity has a pattern of revenue overstatement. ISA 540.21 requires the auditor to evaluate indicators of management bias. A consistent underestimation of settlement discounts is such an indicator, even if each individual estimate falls within a reasonable range.

For the current year, test the estimation methodology. Obtain the insurer contracts that specify reimbursement rates and retrospective adjustment mechanisms. Compare the billed amounts to the contracted rates. Identify any categories where the billed amount exceeds the contracted rate (these will be adjusted downward at settlement). Verify that the entity’s provision for settlement adjustments covers the expected downward adjustments.

Patient co-payments and out-of-pocket fees create a separate revenue stream that bypasses the insurer settlement process. These amounts are typically smaller individually but material in aggregate for entities with significant outpatient activity. Test the recoverability of patient receivables separately from insurer receivables, as collection rates differ significantly.

Worked example: Kliniek de Rijn B.V.

Client profile: Kliniek de Rijn B.V. is a Dutch private clinic specialising in orthopaedic surgery and rehabilitation, with €28M revenue, contracts with four major health insurers, 180 employees, and approximately 6,200 patient treatments per year. Year-end is 31 December.

1. Perform retrospective settlement analysis

Obtain the final 2024 settlement letters from all four insurers. Compare to the settlement estimates recorded at 31 December 2024.

Total variance: –€97K. The entity systematically underestimated settlement discounts. Menzis shows the largest individual variance (90% underestimate). This constitutes an indicator of management bias under ISA 540.21.

2. Test current-year revenue estimation

The entity estimates a 2.5% weighted average settlement discount on €28M billed revenue for the current year. Based on the retrospective analysis, the average actual discount over the past two years has been 3.2%. If the actual discount matches the historical average, revenue is overstated by approximately €196K (0.7% x €28M). This is below performance materiality of €210K (€28M x 0.75%) but close enough to require discussion with management about whether the estimate is appropriate.

3. Test medical malpractice provision

Kliniek de Rijn has 12 open malpractice claims. Total gross exposure estimated by management: €820K. Insurance deductible per claim: €25K. Management provisions each claim at its individually estimated probable amount.

Review the claims register. Confirm all 12 claims are recorded by cross-referencing to legal counsel’s confirmation letter (ISA 501.9). Evaluate the methodology: management uses the most likely outcome for each claim. For 12 claims, IAS 37.39 requires the expected value method (probability-weighted average across the population) rather than the most likely outcome for each individual claim. Recalculate using expected values provided by legal counsel.

Result: management’s provision of €820K. Expected value calculation: €940K. Difference: €120K. Below materiality individually but represents a consistent understatement pattern. Propose adjustment.

4. Assess regulatory compliance

Inquire with the compliance officer, the medical director, and the CFO regarding known instances of non-compliance with healthcare regulations. Obtain the most recent NZa audit report and the IGJ (Inspectie Gezondheidszorg en Jeugd) inspection report. Review for findings that have financial statement implications.

Result: the IGJ inspection in October identified staffing levels below the mandated ratio on two rehabilitation wards during August and September. The clinic received a formal warning. No fine has been imposed, but a repeat finding could trigger a penalty of up to €100K. Assess whether a contingent liability disclosure is required under IAS 37.86.

5. Review specialised asset valuation

The clinic acquired a new robotic surgical system in September for €1.8M. The existing robotic system (acquired four years ago, carrying amount €1.1M, original cost €1.8M) is now used only for overflow cases. Assess whether the reduced utilisation triggers an impairment indicator under IAS 36.12(f) (significant change in the extent to which an asset is used). If utilisation has dropped below 50% of capacity, perform an impairment test by comparing the carrying amount to the recoverable amount (higher of fair value less costs of disposal and value in use).

Practical checklist for healthcare engagements

1. Retrospective settlement analysis. Obtain prior-year settlement letters from all major insurers and compare to the settlement estimates recorded. Calculate the variance by insurer. If the entity systematically underestimates settlement discounts, challenge the current-year estimate and document the bias assessment. (ISA 540.A127)
2. Test completeness of year-end revenue. Select a sample of patient treatments delivered in the last two weeks of December. Confirm that revenue is recognised for these treatments even if billing was not completed until January. (IFRS 15.31)
3. Verify the malpractice provision methodology. Confirm the expected value method is used for the population of claims (IAS 37.39), not the most likely outcome for each individual claim. Recalculate if management uses the wrong methodology. Confirm that gross provisions and insurance reimbursement assets are recorded separately (IAS 37.53).
4. Extend regulatory compliance inquiries. Interview the compliance officer and medical director about known or suspected non-compliance with healthcare regulations. Also send a separate inquiry to legal counsel. Obtain and review the most recent regulatory inspection reports. (ISA 250.14–16)
5. Review capital expenditure for impairment indicators. Identify new medical equipment acquisitions that may signal impairment of existing assets. Assess whether reduced utilisation of older equipment triggers an impairment indicator under IAS 36.12. Document the assessment even if no impairment is recognised.
6. Test government subsidy conditions. For entities receiving government subsidies, test whether the conditions attached to the subsidy have been met. If conditions are partially unmet, assess whether a repayment liability exists under IAS 20.32 and whether disclosure of a contingent liability is required.

Common mistakes regulators flag

• The AFM’s 2023 inspection identified that healthcare audit files frequently lacked a retrospective comparison of settlement estimates to actual outcomes. ISA 540.A127 requires this analysis for estimates with high uncertainty. Without it, the auditor cannot demonstrate that management’s estimation process is reliable or identify directional bias in revenue recognition.
• The FRC found in its 2022–23 inspection cycle that medical malpractice provisions were measured using the wrong IAS 37 methodology. Firms applied the most likely outcome method to portfolios of claims where the expected value method was required under IAS 37.39. The resulting provisions were materially lower than the expected value calculation because the most likely outcome ignores the tail risk of high-value settlements.
• The Dutch NBA’s practice note on healthcare audits flagged that regulatory compliance inquiries were limited to the finance function in the majority of files reviewed. ISA 250.16 requires inquiry of management, but in healthcare, “management” includes the medical director and compliance officer. Limiting the inquiry to the CFO omits the individuals most likely to be aware of pending regulatory actions and inspection findings.

Related content

Frequently asked questions

Further reading and source references

• IFRS 15, Revenue from Contracts with Customers: paragraphs 50–54 on variable consideration and the constraint.
• IAS 37, Provisions, Contingent Liabilities and Contingent Assets: paragraphs 36–52 on measurement, including expected value vs. most likely outcome.
• ISA 540 (Revised), Auditing Accounting Estimates and Related Disclosures: the framework for testing settlement estimates and malpractice provisions.
• ISA 250, Consideration of Laws and Regulations in an Audit: paragraphs 14–16 on compliance testing.
• IAS 20, Government Grants and Disclosure of Government Assistance: paragraph 32 on repayment of subsidies.
• IAS 36, Impairment of Assets: paragraph 12 on impairment indicators for specialised equipment.