Resources

Client Alerts, News Articles, Blog Posts, & Multimedia

Everything you need to know about BMD and the industry.

DOJ Updates Corporate Compliance Plan Guidance

Client Alert

With the passage of the Affordable Care Act in 2010, all healthcare providers were required to adopt and implement a corporate compliance plan. Historically, having an effective corporate compliance plan in place has been key to defending healthcare providers in fraud and abuse actions by Medicare, Medicaid, and commercial payers. Over the past couple of years, the U.S. Department of Justice’s (DOJ) Criminal Division has increased the number of prosecutions against U.S. corporations, including healthcare providers. Earlier this month, the DOJ’s Criminal Division updated its “Evaluation of Corporate Compliance Programs” guidance to educate prosecutors on how a corporate compliance program will be evaluated going forward. https://www.justice.gov/criminal-fraud/page/file/937501/download

If a healthcare provider is able to actively demonstrate its commitment to a culture of compliance as reflected in a comprehensive program, an Assistant U.S. Attorney (hereinafter “AUSA”) may elect to not file charges and/or may seek reduced charges. Regardless if an AUSA does bring formal charges, the new guidance allows a federal judge to impose a reduced sentence. Now, more than ever, it’s critically important that healthcare providers have an effective compliance program in place as it materially affects the penalties imposed for healthcare fraud and abuse violations. Having an effective compliance program can mean the difference in whether criminal charges are brought (which could result in prison time or large fines).

The June 2020 update from the DOJ covers a variety of specific topics, but essentially focuses on three questions in relation to an organization’s compliance program: 

  1. Is the compliance program well designed?
  2. Is the program applied earnestly and in good faith?
  3. Does the program work in practice?

In other words, an effective compliance plan must be a “living, breathing document” and not just a generic set of policies and procedures that is left forgotten on a shelf or computer system. 

A successful compliance program should focus on the provider’s internal compliance training program. The DOJ described an appropriately tailored training as “the hallmark of a well-designed compliance program” and periodic training helps to ensure that a compliance program is integrated into the organization. Relevant employees, as well as, senior managers (and in some situations, agents and business partners) should have training provided by the company regularly so that they may properly communicate and implement compliance policies and procedures. Furthermore, the organization must pay special attention to providing employees with the tools in which to seek assistance and/or respond to any potential compliance issues.

Throughout the update, the DOJ identifies specific areas where AUSA’s should focus in their determination of whether a compliance program is well-designed, earnestly implemented and effective. Two of these areas assist providers in designing, implementing and improving their compliance-based programs.

  1. Risk-Bask Training

Providers are expected to conduct an in-depth analysis of which employees require training and on what subjects. The organization should provide tailored trainings which reflect the specific risks in the work environment. Any employee who works in a high-risk role, has been involved in prior misconduct, or is senior management should receive ongoing trainings. 

  1. Form/Content/Effectiveness of Training

AUSA’s will not be impressed by merely having a program designed. They will instead focus on the form in which the training is being provided, including who is presenting the trainings. Real-world compliance lapses and testing by companies should be frequent.

The attorneys of Brennan, Manna & Diamond’s healthcare team are available to assist healthcare providers in drafting, implementing and improving their corporate compliance programs, trainings, and implementation processes.  Please contact Jeana Singleton at jmsingleton@bmdllc.com or 330-253-2001, Richard Crosby at rlcrosby@bmdpl.com or 614-246-7500, or your BMD healthcare attorney for more information. 


January 2025 Notice of Proposed Rulemaking Brings Notable Changes to HIPAA Security Rule

In January 2025, the U.S. Department of Health and Human Services proposed amendments to the HIPAA Security Rule, aiming to enhance cybersecurity for covered entities (CEs) and business associates (BAs). Key changes include mandatory compliance audits, workforce training, vulnerability scans, and risk assessments. Comments on the proposed rule are due by March 7, 2025.

Corporate Transparency Act Effective Again

The federal judiciary has issued multiple rulings on the enforceability of the Corporate Transparency Act (CTA), which took effect on January 1, 2024. Previously, enforcement was halted nationwide due to litigation in Smith v. U.S. Department of the Treasury. However, on February 18th, the court lifted the stay, reinstating the CTA’s reporting requirements. Non-exempt entities now have until March 21, 2025, to comply. Businesses should act promptly to avoid civil penalties of $591 per day and potential criminal liability.

Status Update: Physician Noncompete Agreements in Ohio

Noncompete agreements remain enforceable in Ohio if they meet specific legal requirements. While the AMA and FTC have challenged these restrictions, courts continue to uphold reasonable noncompete provisions for physicians. Recent cases, like MetroHealth System v. Khandelwal, highlight how courts may modify overly restrictive agreements to balance employer interests with patient care. With ongoing legal challenges to the FTC’s proposed ban, Ohio physicians should consult a healthcare attorney before signing or challenging a noncompete agreement.

Immigration Orders and Their Economic Impact on Small Business: Insights from Attorney and Former Immigration Judge Rob Ratliff

President Trump's recent executive orders, targeting immigration policies, could significantly impact small businesses in Ohio, particularly those owned by undocumented immigrants. With stricter visa vetting, halted refugee admissions, and potential deportations, these businesses face uncertainty, workforce disruption, and closures. Ohio's immigrant-owned businesses, especially in food services and transportation, contribute billions to the state economy, and any disruption could result in economic ripple effects.

Corporate Transparency Act Ruling from the U.S. Supreme Court

The U.S. Supreme Court recently ruled on the enforceability of the Corporate Transparency Act (CTA), lifting an injunction previously imposed by the Fifth Circuit. However, a separate nationwide injunction remains in effect, meaning businesses are still not required to comply with the CTA’s reporting requirements. FinCEN continues to accept voluntary reporting while enforcement remains paused.