ACA Compliance in Healthcare: Surviving an IRS Audit

ACA Compliance in Healthcare: Surviving an IRS Audit

ACA Compliance in Healthcare: Surviving an IRS Audit

Margaret Duvall | April 29, 2026

Managing PRN staff and bridging disconnected HR tech are critical operational challenges for healthcare organizations. Failing to solve them, however, carries a highly specific federal consequence: an IRS Affordable Care Act (ACA) audit.

High turnover, variable shifts, and decentralized payrolls make the healthcare sector a prime target for automated ACA compliance failures. When a facility miscalculates eligibility or files fragmented data, tracking hours is no longer the primary challenge — the real test is whether your organization can legally defend that historical data against an IRS penalty assessment.

How Does the IRS AIRS System Trigger ACA Audits?

A common misconception among HR leaders is that an ACA audit is initiated by an IRS agent manually reviewing a company’s files. In reality, the enforcement mechanism is entirely automated through the IRS Affordable Care Act Information Returns (AIRS) System.

The AIRS system is a data-matching engine. The primary catalyst for this matching process is Form 1095-A, the statement generated by the Health Insurance Marketplace. The system actively cross-references the Form 1094-C and Form 1095-C submissions provided by your facility against the individual tax returns filed by your employees.

The system is specifically looking for discrepancies between the health coverage an employer reports offering, and the actual Premium Tax Credits reported by the health exchanges.

The two operational failures we explored earlier — failing to track PRN hours accurately and leaving workforce data siloed — are the primary catalysts for these automated flags. When HR data does not perfectly align with scheduling realities, the AIRS system catches the discrepancy and generates a penalty notice automatically.

The Compliance Reality: The Anatomy of Letter 226J 

The typical timeline of an IRS penalty assessment follows a strict chronological path:

  • The Trigger: A PRN nurse crosses the 130-hour ACA threshold, is not offered coverage due to an internal tracking error, and subsequently claims a Premium Tax Credit (PTC) on a state or federal health exchange.
  • The Match: The IRS AIRS System detects the mismatch between the employee’s PTC claim and your organization’s Form 1095-C coding (which likely indicates they were not a full-time employee).
  • The Assessment: The IRS issues Letter 226J, proposing an Employer Shared Responsibility Payment (ESRP) based on the assumption of your organization’s non-compliance.

How Are IRS Letter 226J Penalties Calculated?

The penalties proposed in a Letter 226J are not arbitrary; they are calculated based on specific sections of the tax code, and they snowball rapidly across large healthcare workforces.

  • The 4980H(a) Penalty: This is triggered if an ALE fails to offer minimum essential coverage to at least 95% of its full-time employees, and at least one full-time employee receives a PTC. This penalty is multiplied across your entire full-time workforce, routinely resulting in multi-million-dollar assessments for hospitals and large clinic networks.
  • The 4980H(b) Penalty: This is triggered if you met the 95% threshold, but the coverage offered was not affordable or did not provide minimum value, leading an employee to claim a PTC. This penalty is assessed on a per-employee basis.

What Data Do Employers Need to Pass an ACA Audit?

A Letter 226J is an official proposal of a penalty, not a standard inquiry. When it arrives, the assumption of liability has already been made by the IRS. The burden of proof rests entirely on the healthcare employer to overturn the assessment. 

Responding to an audit requires establishing a defensible historical record long before the IRS issues a notice. Healthcare organizations must maintain three core pillars of ACA data in a unified, instantly accessible format:

  1. Time and Attendance Data: Exact, unalterable records of every shift worked, particularly for PRN and per diem staff.
  2. Payroll Data: Historical proof of wages, which is critical for proving the affordability of the health plans offered under IRS safe harbors (such as the W-2 or Rate of Pay safe harbors).
  3. Benefits Administration Data: Time-stamped records of when coverage was offered, accepted, or explicitly waived by the employee.

If any point of this triangle is misaligned — or if the data lives in different, non-communicating software platforms — the defense crumbles.

How Long Do Employers Have to Respond to Letter 226J?

To successfully contest an ESRP assessment, HR teams have 90 days to respond to the IRS.

Because IRS audits operate on a lag, you are usually asked to reconstruct historical shift data from two to three years prior. 

This is where manual spreadsheets definitively fail. Attempting to manually align historical timecards, payroll records, and benefits enrollment data retroactively is nearly impossible in a high-turnover clinical environment. 

You cannot successfully reverse-engineer complex Look-Back Measurement calculations while an IRS deadline is ticking. You must have the data properly formatted and stored at the time of the original filing.

How to Automate Your ACA Audit Defense

Trusaic’s ACA Complete® platform goes beyond monthly tracking; it is a comprehensive penalty defense mechanism.

By natively integrating your disparate HRIS, payroll, and scheduling systems, Trusaic establishes a single source of truth that preserves every PRN shift, eligibility calculation, and Form 1095-C code indefinitely.

If the IRS issues an inquiry, our regulatory experts handle the defense from start to finish, lifting the burden entirely off your HR department. Stop hoping manual spreadsheets will survive federal scrutiny.