Kentucky sometimes failed to ensure that all consumers who signed up for insurance on the state’s health exchange were eligible for coverage, the latest federal audit found.

The audit, released Thursday by the inspector general for the Department of Health and Human Services, found that some of the Kentucky exchange’s controls for confirming consumers’ eligibility weren’t effective. Earlier audits also identified deficiencies in the federal exchange, Healthcare.gov, as well as state-run exchanges in California, Connecticut and New York.

Some controls New York state relied on to make sure people were eligible for health-insurance coverage and subsidies on the state-run exchange were deficient, potentially letting some consumers get benefits they weren’t entitled to, an audit found.

The Affordable Care Act, signed by President Obama five years ago this week, sparked a host of changes. For some workers, the law’s legacy amounts to fewer hours of paid work.

The law’s requirement that larger employers provide affordable insurance to workers putting in 30-plus hour weeks has led some companies to cap the number of hours employees can log. A new survey out Tuesday from the Society for Human Resource Management finds that 14% of employers have cut back on hours for part-time employees, and an additional 6% plan to do so. The survey, which included more than 740 human resources professionals, found that a small subset of companies were considering reducing hours for full-time employees too.

Firms are playing around with how they classify and schedule workers, but the strategy comes with risk. James Napoli, a partner with Seyfarth Shaw LLP who helps employers comply with the ACA, says he’s seen an uptick in audits focused on compliance with the health care law by the Department of Labor and the Internal Revenue Service. The audits, which began about three years ago, are starting to become broader, more frequent and more serious, he said.