With H.R.1 work requirements enforced from January 1, 2027, and the member-notice window opening June 30, 2026, most MCOs have a narrow runway to stand up a retention capability. The first fork in the road is build versus buy. Neither answer is universally right; the answer depends on time, scale, and the specific gaps in your current operation.

The case for in-house

Building internally gives you control over the member relationship, keeps protected health information inside your own systems, and lets you integrate outreach tightly with your existing care management. If you already have a mature data warehouse, a multilingual contact center, and slack capacity, extending it may be cheaper at steady state than paying a vendor margin.

The catch is the calendar. Hiring and training multilingual outreach staff, building the trigger logic that fires when a member misses a report, and testing it against real data takes months you may not have. An in-house build that goes live in February 2027 missed the entire first enforcement cycle.

The case for a vendor

A specialized outreach vendor brings a running start: existing multi-channel infrastructure, address-and-phone refresh capabilities, and staff already trained on procedural-disenrollment workflows. For a plan without that muscle today, a vendor can be live before the notice window, which is often the deciding factor.

The risks are real and worth naming. You inherit the vendor's data-security posture, so the business associate agreement and breach terms matter enormously. You depend on their language coverage actually matching your membership, not just a brochure list. And a vendor optimizing for contact volume may not be optimizing for the action you care about, which is a completed report or a claimed exemption. Tie payment to outcomes, not dials.

The hybrid most plans actually need

In practice the strongest model is rarely pure. Many plans keep segmentation, governance, and the inbound line in-house while contracting the outbound, multi-channel, multilingual heavy lifting to a partner who can scale fast for the enforcement surge. Keep the brain inside; rent the reach.

Whichever path you choose, evaluate it against three concrete tests: can it be live before June 30, 2026; can it reach members in every language your panel speaks; and does it report on completed actions rather than attempts. A model that fails any of those three will not protect your members or your capitation when enforcement begins.