An ABA acquisition due diligence checklist should test whether the target can deliver lawful, clinically sound, financially supportable care through and after the transaction. Build linked workstreams for ownership, clinical quality, clients, workforce, payers, claims, finance, tax, privacy, security, technology, facilities, insurance, litigation, and compliance. Reconcile claims and cash to source records, sample exceptions, preserve unknowns, assign remediation, and tie closing conditions to evidence.

Define the transaction and diligence perimeter

Darius records the buyer, target, proposed asset or equity structure, entities, locations, services, payer products, systems, workforce, client populations, period, jurisdictions, and intended closing date. He distinguishes information needed for valuation, contract drafting, operational readiness, and regulatory analysis. The SBA buying guide recommends a thorough investigation with attorney and accountant support. It is general business guidance and does not settle healthcare diligence scope.

Build the ABA acquisition due diligence checklist around linked workstreams

Use workstreams for corporate and ownership, clinical governance and records, clients and continuity, workforce and benefits, credentialing and payers, authorizations and claims, finance and tax, privacy and security, technology and vendors, facilities and accessibility, insurance, litigation, complaints, and compliance. Every request maps to a decision. Findings record source, population, sample, period, severity, affected value, client or workforce impact, owner, remedy, closing effect, and validation.

Reconcile service evidence through cash

Select mature and open samples across sites, services, payers, clinicians, denials, refunds, corrections, incidents, and high-dollar cases. Trace scheduled and delivered service to the clinical record, authorization, provider and location configuration, claim, acknowledgment, adjudication, remittance, deposit, patient balance, refund, and general ledger. Report missing or contradictory evidence. A sample finding cannot be generalized beyond its defined population without a valid method.

Protect PHI and other confidential information

For a HIPAA covered entity, current 45 CFR 164.501 includes a scoped sale, transfer, merger, consolidation, and related due-diligence activity in the definition of health care operations when its conditions are met. Current 45 CFR 164.506 permits specified treatment, payment, and operations uses and disclosures subject to other Privacy Rule requirements. Privacy counsel should classify the parties, transaction, data, purpose, access, minimum-necessary obligations when applicable, other law, and contract controls. A deal label does not create universal access to records.

Assess clinical continuity and client impact

Review leadership authority, competence, supervision, treatment planning, consent and assent when applicable, communication and AAC access, incidents, complaints, discharge and transition, outcome review, record corrections, and open safety work. Identify what must remain local, what can change only through qualified clinical review, and what requires client or representative involvement. Closing cannot authorize a clinical change.

Test the compliance program and unresolved exposure

The OIG General Compliance Program Guidance is voluntary and nonbinding. Its seven-element framework, risk assessment, auditing, reporting, and corrective-action concepts can organize review. Test whether policies match practice, exclusions are screened under applicable sources, overpayments and refunds are tracked, billing concerns are investigated, reports reach accountable leaders, and corrective actions close. Keep self-disclosure, repayment, privilege, and legal conclusions with counsel.

Review privacy, security, and integration risk

HHS risk-analysis guidance reaches all ePHI a covered entity or business associate creates, receives, maintains, or transmits. Inventory target systems, data stores, devices, interfaces, vendors, accounts, facilities, remote access, backups, incidents, and unsupported technology. Record how the proposed transaction changes access and data flows. Integration planning begins during diligence, while access remains constrained to approved purposes and roles.

Keep tax allocation with qualified advisers

The IRS Form 8594 instructions apply to certain asset acquisitions under section 1060 and address the residual method and reporting. A qualified tax adviser determines applicability, asset classes, consistency, amendments, and other consequences. The diligence team can inventory assets and liabilities without presenting its operational schedule as a tax conclusion.

Design samples that can be reproduced

Write the population and sampling rule before selecting records. A claim sample might stratify by payer, site, service, clinician role, denial state, dollar band, and service month, then include both random items and targeted exceptions. A clinical record review may need different strata and qualified reviewers. Preserve the complete population extract, inclusion and exclusion logic, seed or selection method, selected identifiers, evidence requests, and unavailable records. Do not quietly replace a missing item with an easier one.

Require a second reviewer to reperform material calculations and trace a subset from source to conclusion. The review should distinguish a finding in one record, a repeated pattern in the sample, and a supported estimate for a defined population. If the evidence cannot support extrapolation, report the known affected items and the uncertainty. Management can still make a conservative deal decision without describing an unsupported estimate as measured exposure.

Control findings from discovery through closure

Give each finding a stable identifier and link it to raw evidence, affected entities and cohorts, financial or operational range, client or workforce impact, responsible target contact, buyer owner, reviewer, due date, and proposed treatment. Use states such as open, response received, testing, accepted, disputed, remediating, validated, and carried forward. Preserve the original finding when new evidence narrows or expands it; add a dated analysis rather than overwriting the history.

Closure requires evidence that matches the issue. A revised policy cannot close a sample showing different practice. A payment receipt may close one refund but not the full aged cohort. A vendor attestation may answer a contract question while leaving access or technical testing open. Material unresolved findings should appear in the transaction decision, closing conditions, integration plan, and continuity safeguards as applicable. This prevents the data room from looking complete while the operating consequence disappears between workstreams.

Work through a fictional diligence room

Darius locks twenty fictional diligence workstreams. Thirteen have complete requests, reconciliations, findings, owners, and closing dispositions. Two payer files omit location-level evidence, one clinical sample lacks correction history, one vendor list omits a data processor, one refund cohort is unreconciled, and two facility approvals are expired. Four repair. Three become closing conditions. Initial completeness is 13 of 20, or 65%.

Convert findings into deal and integration decisions

Classify each finding as information only, valuation input, representation or covenant issue, pre-close remedy, closing condition, holdback or escrow question, post-close plan, or stop condition, with counsel and advisers deciding transaction treatment. Preserve the raw evidence and affected cohort. Independent reviewers reproduce material reconciliations and verify closure. The final report distinguishes completed review from a finding that remains unresolved.

Questions for the diligence closeout

  • Which requested populations were complete, sampled, unavailable, or excluded, and why?
  • Can a second reviewer reproduce material clinical, claim, cash, workforce, privacy, security, and financial findings?
  • What remains unknown about client continuity, authority, payer transition, records, access, payroll, refunds, facilities, or technology?
  • Which findings change price, terms, closing conditions, transition services, integration sequencing, or the decision to proceed?
  • Do open items retain an affected cohort, interim safeguard, accountable owner, due date, and validation test?
  • Which evidence or access must remain available after closing, and under whose control?

The closeout report should state the limits of every conclusion and carry unresolved work into the exact document or operating plan that owns it. A completed request list is not the same as a supported transaction decision.

Related resources

Sources