After two decades of Operational Site Visits, BPHC audits, and Single Audit findings, the patterns are clear. The same categories of mistakes appear across health centers of all sizes, in all regions. Most are preventable with systematic processes and institutional awareness. This guide catalogs the most consequential errors and provides concrete strategies for avoiding them.
Application Mistakes
Application errors are the most costly because they are the least forgivable. A rejected or low-scoring application means years of preparation are wasted. Unlike ongoing compliance issues, which can often be corrected in place, application failures mean starting over.
1. Scope-Narrative Misalignment
The most damaging application error is inconsistency between the project narrative and the scope of project forms (5A, 5B, 5C). This manifests as:
- •Services described in the narrative that do not appear on Form 5B
- •Sites listed on Form 5A with service configurations that contradict the narrative
- •Patient projections in the narrative that are inconsistent with staffing on Form 5C
- •Budget line items for services or positions not mentioned in the narrative
How to avoid it: Create a cross-reference matrix before submission. List every service, site, and position mentioned in the narrative, and verify that each appears on the corresponding form and in the budget. Have someone who did not write the narrative perform this cross-reference as a quality check. See the application guide for details on how forms must align.
2. Weak Needs Documentation
Reviewers see hundreds of applications claiming that their community has “significant unmet healthcare needs.” What separates funded applications from rejected ones is specificity. Common weaknesses include:
- •Using state-level health statistics instead of service-area-level data
- •Citing data that is more than 3–5 years old
- •Describing need without quantifying it (e.g., “many residents lack access” instead of “42% of residents report no usual source of care”)
- •Failing to include community input (surveys, focus groups, stakeholder feedback)
How to avoid it: Build needs documentation as an ongoing practice, not a one-time application exercise. Maintain a community health profile that is updated annually with fresh data from the Census Bureau, CDC PLACES, state health department, and local community needs assessments. Include primary data (your own patient data, community surveys) alongside secondary data.
3. Budget Arithmetic Errors
This is embarrassingly common and entirely preventable. Budget errors include:
- •SF-424A line item totals that do not match the budget narrative calculations
- •Personnel costs that do not match the position list (e.g., 3 physicians described but only 2 budgeted)
- •Fringe benefit rates that do not compute to the stated amount
- •Federal and non-federal shares that do not sum to the total
How to avoid it: Have your finance director independently verify every calculation in the budget before submission. Use a spreadsheet with formulas (not manually calculated numbers entered into EHBs), and check that the EHBs entries match the spreadsheet exactly. See the budget management guide for SF-424A category requirements.
4. Ignoring the NOFO Instructions
Every NOFO specifies exactly what must be included, in what order, and sometimes with page limits. The most common violations:
- •Not following the narrative outline prescribed in the NOFO
- •Exceeding page limits (truncated content is not reviewed)
- •Missing required attachments
- •Using a narrative structure from a prior NOFO without checking for changes
How to avoid it: Read the entire NOFO before writing a single word. Create a compliance checklist from the NOFO requirements and check off each item during the review process. Attend the HRSA technical assistance webinars — they often clarify ambiguities in the written NOFO.
Compliance and Governance Mistakes
These errors accumulate over time and are often invisible until an OSV reveals them. The health center may have been compliant when the grant was awarded but has drifted out of compliance through gradual organizational changes.
5. Board Composition Drift
The 51% patient majority requirement is continuous, not a one-time application criterion. Board composition drift occurs when:
- •Patient board members stop receiving care at the health center (often because they gain employer-sponsored insurance or move out of the service area)
- •Non-patient members are added to fill expertise gaps without verifying that the patient majority is maintained
- •Patient members resign or let their terms expire without timely replacement
- •The organization changes its definition of “patient” in a way that reduces the number of qualifying patient members
How to avoid it: Track board composition monthly, not just at board meetings. Maintain a board roster spreadsheet that includes each member's patient status, date of last visit, term expiration, and whether they are counted toward the 51% threshold. Set an alert when patient majority drops below 55% to provide a buffer for unexpected departures. See governance compliance requirements for the full board authority framework.
6. Sliding Fee Discount Program Gaps
The SFDP is the most frequently cited area of non-compliance during OSVs. Common problems include:
- •Percentage discounts instead of nominal charges: Patients at or below 100% FPL must pay a flat nominal charge, not a percentage of the full fee. Applying a 90% discount still leaves some patients with unaffordable charges.
- •Outdated poverty guidelines: The FPL is updated annually (usually in January). The SFDP must be recalculated and board-approved with the new guidelines each year. Using prior-year guidelines after new ones are published is a finding.
- •Inconsistent application across services: The SFDP must apply to all services within the approved scope — including dental, behavioral health, and pharmacy. Excluding any service type is non-compliant.
- •No income verification process: There must be a documented process for verifying patient income at intake and periodically (at least annually). Self-attestation is acceptable but must be documented.
How to avoid it: Build SFDP review into your annual compliance calendar. When HHS publishes new poverty guidelines, update the schedule within 30 days, obtain board approval, retrain front desk staff, update the practice management system, and document the entire process.
7. Conflict of Interest Failures
Conflict of interest findings are particularly damaging because they undermine public trust and suggest governance failures:
- •Annual disclosure forms not collected from all board members and key staff
- •Board members voting on matters where they have a disclosed or undisclosed financial interest
- •No documentation of recusal in board minutes when conflicts are present
- •Procurement decisions made by individuals with conflicts (e.g., a board member's company providing services to the health center)
How to avoid it: Collect conflict of interest disclosure forms at the beginning of each fiscal year and when new members join the board. Review disclosures before every board meeting against the agenda items. Document recusal in the minutes with the specific reason: “Board member [name] recused from discussion and vote on [item] due to [specific conflict].”
8. Quorum and Meeting Documentation Issues
Board governance requires regular meetings with proper quorum and documentation. Problems HRSA identifies include:
- •Board meetings held without quorum, resulting in invalid votes
- •Minutes that lack sufficient detail to demonstrate board engagement (e.g., “The budget was discussed and approved” without any indication of what was discussed)
- •Extended periods without board meetings (bylaws typically require monthly or bimonthly meetings)
- •Minutes that are not signed or approved by the board
How to avoid it: Use a board meeting template that includes quorum verification at the top of every meeting. Minutes should reflect not just what was approved, but what questions were asked and what information was considered. Train the board secretary or minute-taker on HRSA's expectations for documentation.
Reporting Mistakes
9. UDS Data Quality Failures
UDS is the highest-visibility report you submit. Data quality problems not only trigger HRSA follow-up but can negatively impact competitive applications because reviewers evaluate prior UDS data as evidence of organizational capacity.
- •High unknown/unreported rates: More than 5% of patients with unknown race, ethnicity, or insurance status suggests weak data collection processes.
- •Clinical measure anomalies: Quality measure rates that are dramatically higher or lower than national benchmarks without explanation. A 95% HbA1c control rate should prompt internal verification before submission.
- •Cross-table inconsistencies: Tables 3A, 3B, and 4 all report patient counts from different angles. If these totals do not reconcile, the report will be rejected.
- •Late submission: UDS submissions after the deadline (typically mid-February) result in a late filing record that HRSA tracks and that can affect competitive scoring.
How to avoid it: Begin UDS preparation in July with mid-year preliminary reports. Run HRSA's Data Quality Check Tool before final submission. Designate a UDS coordinator who owns data quality year-round. See the reporting requirements guide for a detailed preparation timeline.
10. SF-425 and PMS Reconciliation Gaps
The Federal Financial Report (SF-425) must reconcile with Payment Management System (PMS) drawdown records and the general ledger. Common errors include:
- •Reporting expenditures on the SF-425 that exceed actual PMS drawdowns
- •Drawing down funds in advance of need (exceeding the 3-day disbursement rule)
- •Misclassifying expenditures between federal share and non-federal share
- •Failing to report unliquidated obligations accurately
How to avoid it: Reconcile PMS drawdowns with the general ledger monthly — not just at SF-425 due dates. Establish a drawdown schedule that aligns with actual expenditure patterns. Have your finance director sign off on each SF-425 before the AOR submits it.
Financial Management Mistakes
11. Cost Allocation Errors
Cost allocation errors are among the most costly mistakes because they can result in disallowed costs that must be returned to the federal government. Multi-funded health centers commonly make these errors:
- •No written cost allocation plan: Every health center with multiple funding sources needs a written plan that describes how shared costs are distributed. Without one, auditors have no basis for verifying that allocations are reasonable.
- •Inconsistent treatment of like costs: Charging the same type of cost as direct to one grant and indirect to another violates the consistency requirement under 2 CFR 200.403(d).
- •Using outdated allocation bases: Allocation bases (patient volume, FTEs, square footage) must reflect current reality. Using last year's allocation percentages when volumes have changed significantly produces inaccurate allocations.
- •Double-charging: Charging the same cost to both the direct cost pool and recovering it through the indirect cost rate.
How to avoid it: Maintain a written cost allocation plan and review it annually. Update allocation bases quarterly. Have your auditor review the cost allocation methodology during the annual audit. If you are uncertain, consult with your PCA or a cost allocation specialist.
12. Unallowable Expenditures
Charging unallowable costs to the Section 330 grant can result in disallowed costs, questioned costs in the Single Audit, and conditions of award. The most common unallowable charges health centers make include:
- •Charging fundraising and development costs to the grant
- •Charging entertainment expenses (staff appreciation events, holiday parties)
- •Charging bad debts (uncollectable patient accounts)
- •Making facility improvements that constitute construction without prior approval
- •Charging lobbying costs (including staff time spent on legislative advocacy)
How to avoid it: Train all staff who code expenditures on the list of unallowable costs under 2 CFR 200. Build cost coding review into your accounts payable process. Have the finance director review a sample of grant-coded expenditures monthly. See the budget management guide for allowable cost details.
13. Scope Changes Without CIS Approval
Implementing changes that alter the approved scope of project without filing a Change in Scope (CIS) request is a compliance violation that can have cascading consequences:
- •Opening a new site before CIS approval — the site is not considered part of the FQHC for 340B, FTCA, or PPS purposes until approved
- •Adding dental services without CIS — costs for unapproved services may be disallowed
- •Closing a site without notifying HRSA — creates a mismatch between approved scope and actual operations
How to avoid it: Before any operational change, ask: “Does this change what is on Form 5A, 5B, or 5C?” If the answer is yes, file the CIS before implementing the change. CIS processing in EHBs typically takes 60–90 days, so plan accordingly.
Operational Mistakes
14. Credentialing and Privileging Gaps
Incomplete provider credentialing is a high-risk compliance issue because it affects FTCA coverage and clinical quality:
- •Providers practicing without current primary source verification of licenses and certifications
- •Privilege delineation documents that are expired or do not match the provider's actual scope of practice
- •No peer review process or documented peer review for clinical staff
- •Temporary or locum providers practicing without expedited credentialing
How to avoid it: Maintain a credentialing database or spreadsheet with expiration dates for every provider credential. Set alerts 90 days before expirations. Conduct an annual review of all credentialing files. Ensure that the credentialing policy includes a process for temporary/locum providers that maintains FTCA compliance.
15. After-Hours Coverage Documentation
Program Requirement 5 requires documented after-hours coverage for all patients. Common gaps include:
- •No written after-hours coverage arrangement on file
- •The arrangement exists but is not tested periodically to ensure it works
- •Patients calling the health center after hours and not reaching a live person or getting clear instructions
- •Phone tree messages that direct patients to the ER without offering nurse triage or callback options
How to avoid it: Test your after-hours system quarterly by calling outside business hours. Document the result. Ensure the after-hours arrangement is described in writing (contract with answering service, nurse triage agreement, or internal on-call rotation) and that the arrangement is reviewed annually.
Building a Compliance Prevention System
The most effective health centers do not rely on individual vigilance to prevent compliance errors. They build systems:
- •Annual compliance self-assessment: Evaluate all 19 Program Requirements at least annually, documenting findings and corrective actions.
- •Compliance calendar: Maintain a centralized calendar with every reporting deadline, board action item, policy renewal date, and registration expiration.
- •Designated compliance officer: Even at small health centers, one person should own overall compliance monitoring and report directly to the board or a board compliance committee.
- •Board compliance education: Include a compliance update at every board meeting. Board members who understand the requirements are better equipped to govern effectively.
- •PCA engagement: Your state Primary Care Association offers compliance support, training, and peer networking. If you are not using PCA resources, you are leaving free technical assistance on the table.
For the full set of program requirements and what HRSA verifies during site visits, see the compliance requirements page. For financial management practices that prevent budget and cost allocation errors, see the budget guide. And for organizations still preparing to apply, the eligibility page will help you identify structural gaps before they become application weaknesses.