You ran the campaign, completed your outreach efforts, provider mailers went out, and members received their shots, but your immunization care gaps barely closed.
Before the finger pointing begins, consider a different explanation. Most immunization care gaps at a well-run plan are not members who skipped a vaccine. They are vaccinated members whose records never made it to the engine that counts. The shot happened. The data leaked.
There are three places where leaks may have occurred. Every plan has at least one. Most have all three, and almost nobody can say which one is costing them the most, because none of them show up on a standard vendor dashboard. Here they are, with the questions to ask your team about each one.
Leak One: The Measure That Never Reads Your Data
For Medicare Advantage, the flu measure that moves your Star Rating is not built from claims. It is a CAHPS survey.
That means a member can get her flu shot in October, on time, fully documented, and still count against you in the spring, because the measure never asked your claims system. It asked her. The survey checks two things your claims never touch: whether she remembers the shot and whether she answers at all. Forgotten shots count against you. Skipped surveys do not count as a no, but they shrink the sample your score is built from, so fewer voices carry more weight. The reverse happens too: members with no shot on record answer yes, and you get credit you cannot trace.
So, your administrative immunization data and your Stars flu score are answering the same clinical question through two different doors, and they will never fully agree. Plans that treat the flu measure as a claims problem keep wondering why the rate will not move. It is not a claims problem. It is a memory and measurement problem, which means flu outreach is really a member experience campaign wearing a clinical costume.
Ask your team this week: does our flu outreach do anything to help the member remember the shot and answer the survey when it comes? If the answer is a blank look, this leak is open.
Leak Two: The Shots You Never See
Now think about where people actually get vaccinated. The pharmacy inside a warehouse club. A workplace clinic. A church health fair. A retail clinic, paid in cash. The county health department.
Every one of those is a real vaccination that may never generate a claim to your plan. The record usually lands in the state’s immunization registry, an EHR, or an HIE feed. If your gap logic reads claims alone, those members sit on your outreach lists as non-compliant, and your call center phones a member about a flu shot she got six weeks ago.
Run the math on that call. It costs real money; it burns one of your limited outreach touches, and it teaches the member something you never wanted to teach her: her plan does not know her. Multiply it across your book of business and find you’re funding a campaign to annoy your own compliant members while your reported rate stays flat.
Ask your team this week: what percentage of our immunization numerator comes from supplemental data, registries, EHR feeds, HIE? If nobody knows the number, the number is probably close to zero, and this leak is wide open.
Leak Three: The Claims You Caught and Then Lost
This is the one almost nobody audits, because it hides between two departments.
Sometimes the plan did receive the claim. The vaccination came through the front door, and then the encounter got rejected, orphaned, or stuck in a hold. A rejection alone does not erase the record from HEDIS reporting. The gap opens when the record never reaches the data pipeline your quality engine reads, or gets excluded from it, and nobody is watching for either. Your member is compliant. The record just died in the pipes.
Quality teams do not audit encounter rejections. Submissions teams do not check which quality measures a rejected encounter was carrying. So, a vaccination sitting in a failed encounter file belongs to nobody, and it quietly turns a compliant member into an open gap. The same leak that understates your risk scores understates your quality rates, because it is the same pipe.
Ask your team this week: when an encounter gets rejected, does anyone check what measure data it was carrying before it gets reworked, or does it just wait in the queue? You already know the answer.
Why the Three Leaks Compound
Each leak makes your outreach a little dumber. Leak two puts already-vaccinated members on your call lists. Leak three makes your denominator math wrong. Leak one means even the members you reach may not convert into the score you earned. One member can fall through two leaks at once: she got her shot at the pharmacy your claims never saw, and the survey never gave you credit either.
The result is a plan whose reported immunization performance is meaningfully worse than its clinical reality. And here is the part that should bother you most: you cannot size any of these leaks from inside your current reporting, because the whole problem is data your current reporting does not read.
If you are reading this and realizing you cannot answer the three questions above, that is not a staffing problem or an outreach problem. It is a visibility problem, and it is fixable before this measurement year closes. The link at the end of this post is the fastest way to start sizing what your leaks are costing you.
What a Closed Loop Actually Requires
Whether you fix this with us or with anyone else, hold the solution to four requirements.
First, it builds the eligible population correctly, applying enrollment, age band, and product-line rules, so your gap list starts with members who actually belong on it. Second, it tests compliance across every data door at once: medical and pharmacy claims through CPT, HCPCS, and CVX codes, plus registries, EHR feeds, HIE connections, and chart review for hybrid measures. Third, it flags gaps at the member and antigen level, not “immunization gap” but “missing dose two of HPV, due in November,” because specificity is what makes a list workable. Fourth, it routes each gap to the channel that can close it: member outreach, the provider’s worklist, the pharmacy.
And one more, the one most quality vendors cannot offer: it should see your encounter pipeline too. A platform that runs analytics and submissions in one loop can tell you when a rejected encounter is carrying measure data, which closes leak three at the source. That closed loop, chart to CMS, is how our platform is built, and it is why we treat immunization gaps as a plumbing problem instead of an outreach problem.
The August Math
The measurement year ends December 31. Flu season starts in weeks. A leak you find in August gives every fall outreach dollar four months of runway aimed at members who truly need a shot. A leak you find in October gets a scramble, and a leak you find in February gets a lessons-learned meeting.
Find Out Which Leak Is Costing You Most
Start with the three questions in this post. Ask your team this week. Then pay attention to what comes back, because thin answers are the diagnosis.
If that is what happens, bring those answers to a thirty-minute conversation with our team. We will help you reason through which leak is most likely eating your rate, what closing it actually involves, and what to hold any vendor to, including us. No slide deck, no pitch, just people who work in this plumbing every day.
Thirty minutes, your three answers, and a clear read on what to chase first.
Frequently asked questions
Why do vaccinated members still show up as care gaps?
Because the vaccination happened somewhere the plan's claims never see, like a warehouse club pharmacy, a workplace clinic, or a health fair, or because the encounter was rejected downstream. The record usually lives in a state registry or an EHR. Plans reading claims alone keep those members on gap lists and waste outreach on closed gaps.
What are the HEDIS immunization measures?
There are four primary HEDIS immunization measure families: Childhood Immunization Status (CIS-E), Immunizations for Adolescents (IMA-E), Adult Immunization Status (AIS-E), and Prenatal Immunization Status (PRS-E). The E means ECDS reporting, so evidence can come from claims, encounters, and approved electronic clinical sources. Medicare Advantage plans also track the separate survey-based Annual Flu Vaccine Stars measure.
Is the Medicare Advantage flu measure claims-based or survey-based?
Survey-based. The Annual Flu Vaccine measure that affects Star Ratings comes from the CAHPS survey, so it reflects what members report, not what claims show. A vaccinated member who does not report the shot can count against the plan, and an unvaccinated member who answers yes can count for it.
Do pharmacy flu shots count toward HEDIS measures?
Yes, when the plan can see them. Pharmacy-administered vaccines count through pharmacy claims or CVX-coded records. Cash-pay and out-of-network shots reach the plan only through registry feeds or supplemental data, and some are never transmitted at all, which is why NCQA stresses exchanging immunization data across providers, plans, pharmacies, and registries.
What is supplemental data in HEDIS reporting?
Supplemental data is any approved non-claims source used to demonstrate compliance: state immunization registries, EHR feeds, HIE connections, lab files, and flat files from providers. For immunization measures it matters enormously, because many vaccinations are cash-paid, out of network, or never transmitted to the plan or a registry at all, so the shot happened but the proof never arrived.
How do state immunization registries help close care gaps?
State registries collect vaccination records from pharmacies, clinics, and health departments regardless of who paid. When a plan's analytics read registry data alongside claims, members vaccinated outside the claims stream get credited, gap lists shrink to real gaps, and outreach dollars go to members who actually need a shot.
Can rejected encounters affect HEDIS rates?
Yes. If an encounter carrying vaccination data is rejected or held and never reworked, that record never reaches the data quality measures read, so a compliant member reports as an open gap. Because quality teams rarely audit encounter rejections, this leak often goes unmeasured at otherwise well-run plans.
What vaccines are required for Childhood Immunization Status Combination 10?
Combination 10 requires DTaP (4 doses), IPV (3), MMR (1), Hib (3), hepatitis B (3), varicella (1), pneumococcal conjugate (4), hepatitis A (1), rotavirus (2 or 3 depending on series), and influenza (2), all by the child's second birthday. Missing any single antigen breaks the entire combination.
What is the Adult Immunization Status measure?
AIS-E is an electronic HEDIS measure for members 19 and older. It is a composite of age-banded antigens: influenza and Td/Tdap for all adults, zoster vaccination starting at age 50, pneumococcal and COVID-19 at 65 and older, and hepatitis B for ages 19 to 59. Members are only assessed on the antigens their age band requires.
When should health plans start closing immunization gaps?
By late summer. The measurement year ends December 31, and flu season begins in early fall, so gaps identified in August have months of outreach runway while gaps found in October force a scramble. Accurate gap lists in August are what make fall outreach spending efficient.
