45 C.F.R. § 155.1200

(a) General requirement. A State Exchange must:

(1) Keep an accurate accounting of Exchange receipts and expenditures in accordance with generally accepted accounting principles (GAAP).

(2) Monitor and report to HHS on Exchange related activities.

(3) Collect and report to HHS performance monitoring data.

(b) Reporting. The State Exchange must, at least annually, provide to HHS, in a manner specified by HHS and by applicable deadlines specified by HHS, the following data and information:

(1) A financial statement presented in accordance with GAAP,

(2) Information showing compliance with Exchange requirements under this part 155 through submission of annual reports,

(3) Performance monitoring data, and

(4) If the Exchange is collecting premiums under § 155.240, a report on instances in which it did not reduce an enrollee's premium by the amount of the advance payment of the premium tax credit in accordance with § 155.340(g)(1) and (2).

(c) External audits. The State Exchange must engage an independent qualified auditing entity which follows generally accepted government auditing standards (GAGAS) to perform an annual independent external financial and programmatic audit and must make such information available to HHS for review. The State Exchange must:

(1) Provide to HHS the results of the annual external audit; and

(2) Inform HHS of any material weakness or significant deficiency identified in the audit and must develop and inform HHS of a corrective action plan for such material weakness or significant deficiency;

(3) Make public a summary of the results of the external audit.

(d) External audit standard. The State Exchange must ensure that independent audits of State Exchange financial activities and program activities under paragraph (c) of this section address the following requirements, unless a State Exchange is satisfying certain programmatic audit requirements for a given benefit year, as identified by HHS in sub-regulatory guidance, under paragraph (e) of this section:

(1) Compliance with paragraph (a)(1) of this section;

(2) Compliance with subparts D and E of this part 155, or other requirements under this part 155 as specified by HHS;

(3) Processes and procedures designed to prevent improper eligibility determinations and enrollment transactions, as applicable;

(4) Compliance with eligibility and enrollment standards through sampling, testing, or other equivalent auditing procedures that demonstrate the accuracy of eligibility determinations and enrollment transactions; and

(5) Identification of errors that have resulted in incorrect eligibility determinations, as applicable.

(e) State Exchange Improper Payment Measurement (SEIPM) program. For a given benefit year, a State Exchange may satisfy certain requirements of the independent external programmatic audit, particularly the review of compliance with subparts D and E of this part, as identified by HHS in sub-regulatory guidance, as outlined in paragraph (d) of this section, by completing the SEIPM process established through 45 CFR part 155, subpart Q.