Specialty Carve-Outs and Network Adequacy: When Benefits Are Covered Outside Your Network
Many MA plans carve out specific benefits — dental, vision, behavioral health, pharmacy — to specialized vendors. But carve-outs don't eliminate adequacy obligations. Here's how CMS views carved-out benefits in the context of network adequacy.
What a Benefit Carve-Out Is in the MA Context
A benefit carve-out in Medicare Advantage is an arrangement in which the sponsoring plan delegates the administration of a specific benefit category — and often the management of the associated provider network — to a specialized third-party vendor. Common carve-out categories include dental, vision, hearing, behavioral health, pharmacy benefit management, and transportation. The carve-out vendor contracts directly with providers, manages utilization, and often operates its own member-facing portal and directory. From the member's perspective, the experience may feel seamless, but operationally, a different organization is managing a distinct sub-network.
Carve-outs exist for legitimate operational reasons. Dental and vision benefits require contracting expertise, provider credentialing infrastructure, and claims systems that most MA plans do not maintain in-house. Behavioral health carve-outs emerged partly in response to the clinical complexity of managing mental health and substance use benefits and partly from the market structure of the specialty — large behavioral health managed care organizations have invested in provider networks that no individual plan could replicate at comparable cost. Pharmacy carve-outs to PBMs are essentially universal in Medicare because of the Part D structure.
The key point for network adequacy purposes is that a carve-out arrangement does not transfer the plan's regulatory responsibility to the vendor. CMS's position, stated clearly in sub-regulatory guidance and repeated in audit findings, is that the sponsoring MA plan remains fully responsible for ensuring that carved-out benefits meet applicable network adequacy standards. The plan cannot point to its carve-out vendor's network as the vendor's problem if that network fails adequacy testing. This is the foundational principle that should govern how network ops teams approach every carve-out relationship.
CMS's Position: The Plan Remains Responsible
CMS has been consistent and explicit on the question of carve-out responsibility. The Medicare Managed Care Manual states that a plan that delegates activities to a first-tier, downstream, or related entity (FDR) retains ultimate responsibility for ensuring that those activities are performed in compliance with CMS requirements. Network adequacy is among the activities explicitly covered by this principle. When CMS conducts a network adequacy review — whether as part of an annual bid review, a HPMS-based adequacy analysis, or a focused audit — it evaluates the plan's total network, including all carved-out benefit categories, against applicable standards.
This means that if a plan's carve-out dental vendor has an inadequate network in two of the plan's service area counties, the plan has an adequacy deficiency — even if the plan's own medical provider network is entirely sufficient. The plan cannot resolve that deficiency by pointing to its vendor contract and claiming the vendor is responsible. The plan must either require the vendor to remediate the network gap, source an alternative dental provider for those counties, or file an exception with CMS and provide an access plan for affected members.
Practically, this means that network ops teams need visibility into carve-out vendor network data that most vendor contracts do not automatically provide. A plan that simply signs a carve-out agreement and assumes the vendor's network is adequate is accepting compliance risk it cannot see. Vendor contracts should include data sharing provisions that give the plan access to the vendor's credentialed provider data, organized by county, specialty, and accepting-new-patients status, on a schedule that supports the plan's adequacy monitoring obligations.
Behavioral Health Carve-Outs and MHPAEA Parity Requirements
Behavioral health carve-outs carry a compliance layer beyond the basic network adequacy framework: the Mental Health Parity and Addiction Equity Act (MHPAEA). Although MHPAEA was originally enacted for commercial insurance, CMS has applied parity principles to Medicare Advantage supplemental benefits, and HHS has been steadily expanding the regulatory interpretation of parity requirements. For MA plans that offer supplemental behavioral health benefits — which most do, given the competitive environment — carving out those benefits does not eliminate parity obligations.
The parity analysis for a behavioral health carve-out is more complex than for dental or vision because it requires comparing network composition across behavioral health and comparable medical/surgical specialties. If the plan's medical network has specialists available within a certain time-and-distance standard, parity principles require that behavioral health specialists be available within comparable parameters. Plans that carve out behavioral health to a vendor with a thinner network than the medical network may be creating a parity gap even if the behavioral health network, viewed in isolation, meets CMS adequacy standards.
Network ops teams should conduct an explicit parity analysis of their carved-out behavioral health networks annually, comparing behavioral health time-and-distance and provider-to-member ratios against medical/surgical equivalents. This analysis should be documented and retained as a compliance artifact. If the analysis identifies a potential parity gap, the plan should work with its carve-out vendor to remediate the gap or seek guidance from legal counsel on the appropriate regulatory response.
Dental and Vision Adequacy in the Context of Supplemental Benefits
Dental and vision benefits in Medicare Advantage are supplemental benefits — they are not original Medicare benefits, and CMS's adequacy requirements for them are less prescriptive than for medical benefits. CMS does not publish time-and-distance standards for dental and vision the way it does for medical specialties. However, CMS requires that supplemental benefits be meaningful to members, and a dental or vision network so thin that members cannot realistically use the benefit does not meet that standard.
The practical adequacy standard for dental carve-outs is typically evaluated in terms of network breadth — the percentage of enrollees who have at least one contracted dental provider within a reasonable distance — and access indicators such as the number of covered visits per year, wait times for routine appointments, and the scope of covered services. Plans should establish internal adequacy standards for their dental carve-out networks and monitor vendor performance against those standards at least annually.
Vision benefit adequacy introduces the additional consideration of provider type mix. A vision network composed entirely of optometrists may be adequate for routine eye exams but may not serve members who need ophthalmologic services for conditions such as diabetic retinopathy or glaucoma — conditions that are highly prevalent in the Medicare population. Plans should work with their vision carve-out vendors to ensure the network includes both optometrists and ophthalmologists in adequate numbers, particularly in service areas with high rates of diabetes and age-related eye disease.
Documenting Adequacy for Vendor-Managed Carve-Outs
Documentation is the mechanism by which a plan demonstrates to CMS that it has actively monitored and ensured the adequacy of its carved-out benefit networks. A plan that cannot produce documentation of its oversight of carve-out vendor network adequacy is in a weak position in an audit, even if the vendor's actual network is adequate. The documentation requirement is separate from the adequacy requirement — both must be satisfied.
Adequate documentation for a vendor-managed carve-out typically includes: the vendor contract language establishing the adequacy standards the vendor is required to meet; quarterly or annual network adequacy reports produced by the vendor and reviewed by the plan; evidence that the plan reviewed those reports and took action when deficiencies were identified; any corrective action plans issued to the vendor; and attestations from the vendor confirming network adequacy for each benefit period. This documentation should be maintained in the plan's compliance management system and be accessible for CMS audit.
Plans should also document the oversight meetings and communications with carve-out vendors that are part of ongoing network monitoring. A regular network adequacy review meeting between the plan's network ops team and the vendor's account management team — even a quarterly call documented with meeting notes — demonstrates active oversight and is a meaningful compliance artifact. Plans that treat their carve-out vendor relationship as purely commercial, with no ongoing network oversight interaction, are missing both a compliance requirement and a risk management opportunity.
When a Carve-Out Vendor Fails Adequacy
Network adequacy failures by carve-out vendors create a specific set of plan obligations. When a plan becomes aware — through vendor reporting, member complaints, CMS data, or its own analysis — that a carve-out vendor's network is failing to meet adequacy standards, the plan must act. The response typically involves three parallel tracks: remediation, member notification, and regulatory reporting if required.
Remediation means working with the vendor to recruit additional providers in the deficient specialty or geography, or identifying alternative access mechanisms for members — telehealth, single-case agreements with out-of-network providers, or referral assistance through the plan's care management team. The remediation timeline should be documented and tracked against milestones. CMS expects plans to demonstrate that they moved with urgency to address adequacy gaps, not that they simply identified them.
If the adequacy gap is material — affecting a significant number of members or implicating a high-utilization specialty — the plan may need to notify affected members proactively and provide them with information about alternative access options. This is particularly true for behavioral health gaps, where members may be mid-treatment and particularly vulnerable to disruption. The notification should be documented, and member responses — including those who request help finding alternative providers — should be tracked.
Coordination Between Your Network Team and Carve-Out Vendors
The operational relationship between a plan's internal network team and its carve-out vendors is a meaningful driver of compliance outcomes. Plans that treat carve-out vendors as external black boxes — delivering a benefit and reporting summary statistics — consistently underperform on directory accuracy and network adequacy for carved-out benefits. Plans that establish integrated oversight structures — with regular data sharing, joint adequacy reviews, and clear escalation protocols — perform significantly better.
The most effective carve-out oversight structures designate an internal network operations team member as the primary relationship owner for each major carve-out vendor. This person is responsible for reviewing vendor network reports, escalating deficiencies to vendor account management, documenting oversight activities, and serving as the internal subject matter expert on the vendor's network for audit purposes. Without clear internal ownership, carve-out oversight tends to fall through the cracks between the network team, the vendor management team, and the compliance team.
Contract language is the foundation of an effective carve-out oversight structure. Vendor contracts should specify: the adequacy standards the vendor is required to maintain; the data the vendor is required to provide to the plan and at what frequency; the plan's right to audit the vendor's network data and credentialing processes; the remediation process and timeline when adequacy deficiencies are identified; and the consequences — including contract termination rights — if the vendor persistently fails to meet adequacy standards. Contracts that lack specific adequacy language leave the plan without enforceable mechanisms to hold vendors accountable.
See Blueprint in action
Blueprint automates the network build workflows described in this article — from adequacy modeling to provider outreach tracking. See it with your state and line of business.