Your MQSA Audit Is Only as Credible as the Back Office Behind It

MammoComply · Richard D. Lippert Jr., President & Founder, Mammologix · Breast Imaging Operations since 1995

Per-physician PPV, cancer detection rate, and recall rate are only as defensible as the records that produced them. After September 10, 2024, that distinction is inspectable. Mammography has run a federally mandated diagnostic-safety loop since 1992, and the back office is where that head start either pays off or quietly fades.

Here's something you won't hear at your next staff meeting: your back office has been doing federally mandated diagnostic-safety work since 1992, and most of the people doing it think it's just paperwork.

I don't blame them. That's how the whole industry talks about it. Breast imaging is high-stakes work, everybody knows that, and the attention goes where you'd expect: the image, the read, the technology, the judgment behind a BI-RADS® score. Any one of them can change where a patient's life goes. No argument here.

But we've spent thirty years on the other side of that work, running the tracking and reporting that sits behind these programs, and from that seat there's a bigger story nobody has said out loud yet. The MQSA Final Rule that took effect September 10, 2024 made it impossible to keep ignoring.

Mammography is, in all but name, the only field in American medicine running a diagnostic-safety system that federal law actually requires. Has been since 1992. Now, before anyone emails me about CLIA: yes, other fields are regulated for quality, and labs have answered to CLIA since 1988. But no other field bundles a per-physician outcomes audit, pathology correlation, closed-loop reporting to both patient and provider, federal certification, and a yearly inspection into one required loop. That whole machine belongs to mammography. And the rest of medicine is now spending real federal money trying to build a version of it.

---

What That Head Start Is Actually Worth

That reframes how a breast imaging leader should think about audit, follow-up, reporting, and legal risk. It also reframes the back office. Most people picture it as where the paperwork lives. It's really the layer that decides whether thirty-three years of head start turns into outcomes or just sits on a shelf.

The Scale That Makes This Matter

Quick reminder of what's riding on it. The American Cancer Society projects that in 2026, about 321,910 U.S. women will be diagnosed with invasive breast cancer, 60,730 with DCIS, and 42,140 women will die of the disease, which keeps it the second-leading cause of cancer death in women, behind lung cancer.[1][2]

That volume is why breast imaging isn't just another service line. It's a population-health gateway, a diagnostic-safety setting, a trust engine, and a compliance-sensitive business, all at once. The market mostly talks about the visible assets: the mammography units, the 3D imaging, the AI, the risk models, the radiologist capacity. Those matter. But they aren't the whole quality story, and the quieter question is what happens after the finding.

A screening mammogram only delivers its value if the next step happens. A suspicious score only protects the patient if the follow-up gets done. A biopsy recommendation only matters if the biopsy occurs, the pathology comes back, the image and tissue get compared, and the outcome gets recorded. And a medical outcomes audit is only worth running if the tracking behind it is good enough to trust. That's all back-office work, and federal rule has been quietly requiring it for more than three decades.

The Rest of Medicine Is Racing to Build What You Already Have

Diagnostic safety is one of the most active areas of federal patient-safety research right now. The Agency for Healthcare Research and Quality runs a Diagnostic Excellence program, a federal interagency workgroup, a Patient Safety Network, and toolkits with names like Calibrate Dx and Measure Dx, all built to help health systems catch, measure, and correct diagnostic error.[8][9][10]

That work traces back to the 2015 National Academies report Improving Diagnosis in Health Care, which defined diagnostic error as the failure to land an accurate, timely explanation of a patient's problem, or to communicate it to the patient. The report also pointed out that diagnostic error had been largely missed in earlier patient-safety work.[7] Then in 2023, a BMJ Quality & Safety analysis from Newman-Toker and colleagues at Johns Hopkins, working with CRICO, estimated that roughly 795,000 Americans are permanently disabled or die every year from diagnostic error across all settings, with cancer among the three categories driving most of that harm.[11] That number gave the field a national price tag, and it gave AHRQ's mandate fresh urgency.

The Thirty-Three-Year Head Start

Here's the part that should make you smile a little. Wholesale national attention to diagnostic quality isn't new, at least not for you. Congress passed the Mammography Quality Standards Act on October 27, 1992.[3] That's twenty-three years before the National Academies got around to defining diagnostic error, thirty-one years before Newman-Toker put a number on it, and well before AHRQ built its toolkit for everybody else.

MQSA required a working system from the start: an outcomes audit, a pathology match, per-physician review, patient and referring-provider notice, federal certification, and a yearly inspection. Read it with 2026 eyes and that's a diagnostic-safety rule, plain and simple. The people who wrote it in 1992 didn't call it that, because the phrase didn't exist yet. But that's exactly what they built.

September 10, 2024: The Rule Catches Up to Its Own Purpose

The 2023 MQSA Final Rule, enforced from September 10, 2024, sharpened the statute in a way that reads less like a routine update and more like the rule finally catching up to what it had always been about.[5][6] Put it next to the diagnostic-safety literature and three changes jump out.

First, the annual medical outcomes audit now has to include positive predictive value, cancer detection rate, and recall rate, calculated and reviewed for each interpreting physician and for the facility as a whole.[6] That's per-clinician feedback paired with system-level feedback — the same principle behind AHRQ's Calibrate Dx and Measure Dx. The difference is that for mammography it isn't a voluntary toolkit. It's federal law, checked on a yearly inspection.

Second, a report with a final assessment of "Suspicious" or "Highly Suggestive of Malignancy" has to reach the provider, and the patient lay summary has to reach the patient, within seven calendar days of interpretation. A report marked "Incomplete: Need prior mammograms for comparison" has to produce a final assessment within thirty days.[6] Those are closed-loop reporting rules with hard deadlines attached. AHRQ's Patient Safety Network names closed-loop communication of results as a key driver of diagnostic error when it goes missing.[10] The rule didn't just nod at the loop. It tied it to dates an inspector can check.

Third, every report and lay summary has to place breast density in one of four categories and deliver a standardized patient notice.[6] That answers the second half of the 2015 definition — the part about telling the patient. The notice isn't optional anymore, isn't informal, and isn't left to the referring provider to maybe mention.

Put those three together and they bind the audit, the reporting, and the timing into one inspectable diagnostic-safety system. Mammography didn't adopt the diagnostic-safety movement's principles in 2024. The movement caught up to what MQSA had been requiring all along.

What the Literature Says About Where It Breaks

If MQSA is, looking back, a diagnostic-safety rule, then the back office is where it either delivers or quietly falls apart. A 2021 systematic review in BMC Cancer from Reece and colleagues found that the benefit of screening depends on timely follow-up of abnormal mammograms, and that follow-up breaks down more often than anyone would like. Across the studies, somewhere between about 7% and 33% of abnormal screening mammograms had no follow-up at three months, and between roughly 27% and 72% had none at six months.[13] The fixable causes were almost all back-office in nature: poor result reporting, alert overload, weak result retrieval, records that don't talk to each other, narrow clinic hours, thin ties to primary care. Patient navigation and case management got named as the tools that help.

That lines up with what we see in our own audit work. Follow-up rarely breaks on a single dramatic missed step. It breaks because nothing in the system surfaced an unresolved case before it quietly aged out of everyone's attention. These aren't reading errors. They're the exact failure modes diagnostic-safety researchers have spent a decade describing.

The Malpractice Signal Nobody Connects

Here's a related signal the market tends to skate past. Missed or delayed breast cancer diagnosis is still one of the leading sources of malpractice claims against radiologists. In a CRICO and Doctors Company analysis of 562 breast cancer malpractice claims from 2009 to 2014, 342 of them — about 61% — alleged a delay in diagnosis, and of those, 163, or 48%, involved radiology.[12] A lot of them turned on weak workup, missed reporting, or a failure to make sure the recommended follow-up actually happened. Which means the claims data describes the same failure pattern as the diagnostic-safety literature. Two completely different bodies of evidence, both pointing at the back office, and neither one calling it by name.

The Audit Is Only as Good as the Trail Behind It

The Breast Cancer Surveillance Consortium shows how grown-up the measurement side of breast imaging has become. Its screening benchmarks draw on more than 2.3 million screening exams from 2011 to 2018, across digital and 3D mammography, and its diagnostic benchmarks show that PPV2 and PPV3 swing quite a bit depending on the clinical reason for the exam.[14][15]

The lesson is hard to miss. Per-physician PPV, CDR, and recall rate — the very numbers MQSA now wants every facility to report each year — are only as credible as the system that captured the outcomes underneath them. Missing pathology, broken follow-up, unmatched outside records, patchy patient reporting: every one of those weakens the audit as a quality tool. And every one of them weakens your defense when a delayed-diagnosis claim shows up years down the road.

So Here's the Insight Worth Acting On

The breast imaging world has spent thirty-three years running a diagnostic-safety system without calling it one. September 10, 2024 made the system visible. The back office is the part of your practice that either honors that system or quietly hollows it out.

The practices that get this don't assemble audit readiness in the panicked days before an inspection. They build it into the daily work. They don't treat follow-up as clerical. They treat it as closed-loop diagnostic safety with legal teeth. They don't treat reporting records as paperwork. They treat them as proof that the care pathway worked.

It matters for radiologists, because the per-physician numbers are only as defensible as the records behind them. It matters for facilities, because audit readiness is a daily state, not a pre-inspection sprint. And it matters for patients, who don't divide the world into "front office," "back office," "clinical," and "administrative." They experience the whole thing as care. A late letter, a missed callback, an unresolved biopsy can shape their trust as much as the exam itself.

The future of breast imaging will still ride on excellent radiologists, better imaging, smart risk models, and thoughtful AI. But the next real gain in practice quality might come from the least glamorous corner of the building: the system that makes sure no abnormal result gets forgotten, no recommended follow-up gets dropped, no pathology result drifts away from the report, and no audit has to run on somebody's memory.

The diagnostic-safety movement caught up to mammography. The only question left is whether your practice has a daily system strong enough to honor a thirty-three-year head start. The back office is where you'll find the answer.

---

Disclosure

Mammologix provides MQSA compliance, medical outcomes auditing, clinical performance analytics, and patient navigation to breast imaging facilities. The observations here come out of that work. This is industry analysis, not a pitch for a specific product. And since fair is fair, you should know the author's firm operates in exactly the back-office layer this article argues is decisive.

Methodology

Statistics were verified against primary sources: FDA, eCFR, the Federal Register, AHRQ and its Patient Safety Network, the American Cancer Society, and peer-reviewed publications. Where source data covers a defined window (the 2009–2014 CRICO/Doctors Company claims analysis, the 2011–2018 BCSC cohort), the window is named in the text.

---

Bibliography

1. American Cancer Society. Cancer Facts & Figures 2026. Atlanta: American Cancer Society; 2026.
2. Siegel RL, Kratzer TB, Giaquinto AN, Sung H, Jemal A. Cancer statistics, 2026. CA Cancer J Clin. 2026. doi:10.3322/caac.70043
3. Mammography Quality Standards Act of 1992. Pub L No. 102-539, 42 USC § 263b (October 27, 1992).
4. 21 CFR 900.12 — Quality standards: mammography medical outcomes audit.
5. Mammography Quality Standards Act; Final Rule. 88 FR 15125 (March 10, 2023).
6. US Food and Drug Administration. Important Information: Final Rule to Amend the MQSA. Updated September 10, 2024 (7-day suspicious/highly-suggestive reporting; 30-day incomplete-needs-priors; per-physician and facility PPV, CDR, recall rate; four-category density notification).
7. National Academies of Sciences, Engineering, and Medicine. Improving Diagnosis in Health Care. Washington, DC: National Academies Press; 2015. doi:10.17226/21794
8. Agency for Healthcare Research and Quality. Diagnostic Safety and Quality.
9. Agency for Healthcare Research and Quality. Federal Interagency Workgroup on Improving Diagnostic Safety and Quality.
10. AHRQ Patient Safety Network. Advancing Safety With Closed-Loop Communication of Test Results.
11. Newman-Toker DE, Nassery N, Schaffer AC, et al. Burden of serious harms from diagnostic error in the USA. BMJ Qual Saf. 2023. doi:10.1136/bmjqs-2021-014130
12. The Doctors Company and CRICO Strategies. Breast cancer malpractice claims analysis, 2009–2014 (562 claims; 342 delay-in-diagnosis [~61%]; 163 of those [48%] involving radiology).
13. Reece JC, Neal EFG, Nguyen P, McIntosh JG, Emery JD, et al. Delayed or failure to follow-up abnormal breast cancer screening mammograms in primary care: a systematic review. BMC Cancer. 2021;21:373.
14. Breast Cancer Surveillance Consortium. Performance measures for 2,301,766 screening mammography examinations, 2011–2018, by modality.
15. Breast Cancer Surveillance Consortium. Benchmarks for abnormal diagnostic mammography.

---

BI-RADS® is a registered trademark of the American College of Radiology, used here for educational purposes only.