Book a Consultation
Back to Resources

Free Resource

Common Compliance Gaps to Watch For

Eleven areas where New Jersey DDD provider requirements quietly slip — onboarding, recurring checks, separations, medication, documentation — and how to stay ahead of each.

Download this guide as a PDF

Compliance problems are not always caused by a provider failing to do something. Often, the requirement was completed but the proof cannot be located, a recurring deadline was missed, an employee remained connected to the agency after termination, or an annual document quietly expired.

A strong compliance system answers four questions at all times: What is required? Who owns it? When is it due? Where is the evidence?

The quick compliance lens

Current
Is the requirement still valid and within its timeframe?
Complete
Are all required components present?
Consistent
Does it match the ISP, orders, schedules, and other records?
Findable
Could the agency produce the proof today?

01 Employee onboarding & background checks

Common gaps

  • Fingerprint / CHRI: the employee starts before required steps are complete, the clearance cannot be produced, or the agency tracks the appointment rather than the actual result.
  • CARI: the application is not submitted within the required timeframe, the result is not retained, or applicable employees are overlooked.
  • Drug screening: pre-employment testing is incomplete, documentation is missing, or random and for-cause processes are not built into agency procedures.
  • Exclusion and debarment: checks occur only at hire rather than monthly, or the agency cannot show which databases were searched and when.
  • Other employment controls: required checks are not initiated, tracked, or filed consistently.

Stay ahead

Use one onboarding tracker with the hire date, each required check, submission date, result date, status, and exact storage location. The tracker should tell you what is missing without opening the personnel file.

Onboarding checklist

  • Fingerprint / CHRI clearance
  • CARI submission & result
  • Central Registry check
  • Pre-employment drug screen
  • Initial exclusion / debarment checks
  • Driver abstract, when applicable
  • Required orientation / training
  • Personnel documents & credentials

02 Recurring employee compliance

Hiring compliance is only the beginning. Recurring requirements are where strong agencies most often need a dependable tracking system.

Common gaps

  • Monthly exclusionary checks are skipped, incomplete, or not saved as evidence.
  • Fingerprint archiving is not tracked by archive month, or the updated result and related information are not returned to the personnel file.
  • CPR / First Aid certifications expire without being noticed, or current cards are not retained.
  • CDS / mandated training remains incomplete, or completion records cannot be produced.
  • Annual professional-development hours are not tracked throughout the year. Requirements should be verified against the current applicable DDD Appendix E.

Stay ahead

Run a monthly employee-compliance report. Track due dates and completion evidence centrally, rather than relying on certificates scattered across personnel files.

Fingerprint archiving & FARA

FARA is the system used to retrieve fingerprint approval notifications. Employee archiving uses previously captured fingerprints and should be monitored according to each employee’s required archive month. Providers should review due employees regularly and retain the resulting archive information in the personnel file.

Practical tracking fields

  • Training or credential name
  • Employee role and service type
  • Required completion timeframe
  • Completion date
  • Expiration or renewal date, if applicable
  • Annual professional-development hours accumulated
  • Certificate, transcript, or evidence location

03 Employee separation & access removal

Common gaps

  • The fingerprint flag or agency affiliation remains active after separation.
  • CDS, EHR, scheduling, payroll, email, shared-drive, or portal access remains active.
  • The employee remains on active rosters or compliance lists.
  • Agency property, keys, cards, or devices are not formally reconciled.

Stay ahead

Treat offboarding as a compliance process, not only an HR process. Use a standard separation checklist for every employee, and retain evidence that access and agency affiliations were removed.

Separation checklist

  • Submit required flag removal
  • Update CDS status / access
  • Disable email & system credentials
  • Remove documentation / EHR access
  • Update active employee roster
  • Remove scheduling / payroll access
  • Collect agency property
  • Document separation date

04 Medication administration

Common gaps

  • Staff administer medication without current required training, practicum, or competency documentation.
  • MAR entries are missing, late, incomplete, or inconsistent.
  • Physician orders, pharmacy labels, MARs, and medications on hand do not match.
  • Medication changes are not promptly reflected throughout the record.
  • PRN use, refusals, errors, omissions, or follow-up are not sufficiently documented.
  • Medication storage, counts, or controlled-medication accountability are not maintained as required.
  • Annual medication skills or competency requirements are missed.

Stay ahead

Use a recurring medication audit that compares physician order → pharmacy label → MAR → medication on hand. All four should tell the same story.

05 Medical appointments & follow-up

Common gaps

  • The appointment occurred, but no visit note or written outcome was retained.
  • Recommendations are filed but never converted into an action item.
  • Follow-up appointments, labs, referrals, or testing are not scheduled or tracked.
  • New medication orders, diet changes, restrictions, or treatment instructions are not communicated to the team.
  • ER or urgent care discharge instructions are placed in the file without documented follow-through.
  • Changes in medical status are not reflected in the ISP, risk plans, training, or daily supports when needed.

Stay ahead

Every medical encounter should answer: What happened? What was recommended? What happens next? Who owns the follow-up? Do not close the item until the recommendations are addressed.

06 Individual records

Common gaps

  • The current ISP is missing, or staff are working from an outdated version.
  • Risk, supervision, medical, behavioral, or dietary information conflicts across records.
  • Consents, annual documents, or authorizations expire without being replaced.
  • Participant-specific or specialized staff training cannot be demonstrated.
  • Documents exist electronically, but staff cannot readily locate them during review.

Stay ahead

Audit individual records using three questions: Current? Consistent? Implemented? A file is not compliant simply because it contains a large amount of paperwork.

07 Day Habilitation records

A frequent Day Habilitation compliance gap is simply not having the required Day Hab–specific documents maintained in the individual’s record. Two documents deserve particular attention: the Individualized Goal Sheet and the Annual Update Form.

Individualized Goal Sheet

Common gaps

  • The Individualized Goal Sheet is missing from the record.
  • The goal sheet exists but is incomplete, outdated, or not individualized.
  • The goal sheet does not clearly reflect ISP outcomes and related strategies.
  • The provider cannot show that strategies were developed within the required timeframe after Day Habilitation services began.

What the goal sheet should show

  • Individual’s full first and last name
  • ISP date
  • ISP outcomes
  • Strategies that support the ISP outcomes
  • Evidence strategies were developed within the required timeframe
  • Documentation of the individual’s participation in development
  • Strategies individualized to preferences, needs, and interests

Annual Update Form

Common gaps

  • The Annual Update Form is missing from the record.
  • The annual update is incomplete, or does not adequately reflect the individual’s progress and changes during the year.
  • The form does not address changes in strategies, issues or concerns, or health and safety matters when applicable.
  • The form is present, but staff cannot readily locate it during review.

What the annual update should show

  • Individual’s full first and last name
  • Current ISP start and end dates
  • Progress toward ISP outcomes
  • Needed strategy / activity changes
  • Outstanding issues or concerns, and steps taken
  • Involvement in planning activities
  • Community participation / new connections
  • Employment or additional community opportunities

Stay ahead

Build the Goal Sheet and Annual Update Form into the participant-file audit. For each Day Habilitation participant, confirm both documents are present, current, complete, aligned with the ISP, and easy to produce during review.

08 Addressing Enhanced Needs Form (AENF)

Common gaps

  • The AENF is missing, incomplete, or not updated when required.
  • The provider section does not clearly describe how enhanced needs will be supported.
  • Acuity-related supports do not match actual staffing, training, or practice.
  • Changes in medical or behavioral acuity occur without a corresponding AENF review.

Stay ahead

When applicable: obtain the form before service delivery, complete the provider section, maintain the current copy, update it annually or sooner when needs change, and verify that the ISP and actual supports align.

09 Service documentation

Common gaps

  • Notes are generic, repetitive, or copied from previous dates.
  • Activities are listed without connecting them to ISP outcomes, strategies, risks, or supports.
  • The individual’s response, participation, progress, or need for assistance is not documented.
  • Service date, time, location, signature, or other required documentation elements are incomplete.
  • Documentation does not support what was billed.
  • Multiple staff may provide service during the documented timeframe, but the note reflects only what the staff person completing it did, and does not capture the full range of services or supports provided. The note does not need to assign tasks staff-by-staff, but it should reflect all services delivered during that period — which requires staff communication.

Stay ahead

Periodically compare authorization → ISP → staff schedule → service note → billing. A small monthly sample catches drift before it becomes a larger retrospective problem.

10 Incident reporting & corrective follow-through

Common gaps

  • Staff are unsure what must be reported, or how quickly.
  • Internal documentation and the formal incident record tell different versions of the event.
  • Corrective actions are identified but not tracked to completion.
  • Retraining is recommended but later cannot be demonstrated.
  • Similar incidents occur repeatedly without pattern review.
  • Policy is revised after an event, but staff are not trained on the revision.

Stay ahead

Close the loop after every significant incident: reported correctly, immediate safety addressed, cause reviewed, corrective action completed, and recurrence risk considered.

11 Build a compliance calendar

Move recurring requirements out of people’s memories and into a centralized system with ownership, deadlines, alerts, and evidence.

Monthly

  • Exclusion / debarment checks
  • Employee compliance review
  • Upcoming credential expirations
  • Employees due for fingerprint archiving
  • Service documentation spot audit
  • Medical follow-up review
  • Open incident corrective actions
  • Access / roster reconciliation

Throughout the year

  • CPR / First Aid renewals
  • Required CDS / mandated training
  • Professional-development hours
  • Medication competencies
  • Individual annual documents
  • Day Habilitation goal-sheet review
  • Day Habilitation annual-update review
  • AENFs, when applicable
  • Policy and procedure reviews
  • Internal quality audits

The Wildflower & Rose compliance principle

  1. Track the requirement.
  2. Track the due date.
  3. Track the evidence.
  4. Then verify the system is actually working.

Official resources & sources

Use these to verify current requirements before relying on any checklist or implementing a compliance system.

Use this guide as a practical compliance roadmap — not as a substitute for current DDD, Medicaid, licensing, certification, employment-control, or service-specific requirements. Requirements may change, and may vary by service, setting, employee role, funding source, participant needs, and licensure or certification status. Confirm current requirements directly with DDD, Medicaid, DHS/OPIA, the Office of Licensing, and other applicable authorities. Reviewed against New Jersey guidance available September 23, 2026.

Want a second set
of eyes on your systems?

If you would like help building a compliance calendar, setting up trackers, or running an internal review before your next audit, I am glad to talk it through with you.

Book a Consultation