What happened

The Justice Department's Civil Division and the Department of Health and Human Services opened a six month Healthcare False Claims Act Self-Disclosure Pilot Program on 22 October. A company that discloses potential civil violations, produces the documents behind them and repays under a published formula can receive a coordinated civil release from liability under the False Claims Act and certain HHS administrative authorities.

The price of coming forward is now stated. The repayment is 1.25 to 1.6 times a base amount the department calculates. Where a company lands in that range depends on five factors: how timely the disclosure was, how long the conduct lasted and how far it reached, whether senior leadership was involved, how much the company benefited, and whether it inherited the liability as a successor and then remediated promptly.

What participants avoid is the familiar ending. The HHS Office of Inspector General will not impose an exclusion or require a corporate integrity agreement, CMS will not revoke billing privileges, and neither will impose civil monetary penalties. The ordinary exposure is treble damages plus a penalty on each claim.

The pilot is civil only. Potentially criminal conduct goes to the National Fraud Enforcement Division under a separate policy issued on 15 October. Disclosures go to FCA-SDPP@usdoj.gov and the window closes on 22 April 2027, and late or incomplete submissions will not be reviewed.

Why this is a GRC story

A discount stopped being a negotiation. Credit for cooperation used to be argued case by case. A published range with named factors is something a compliance team can model, and a number a board can weigh against the cost of remediation and litigation.

Timeliness is priced. Four of the five factors sit largely inside a company's control: how fast it moved, whether leadership was implicated, how much it gained, and whether it fixed an inherited problem. Every month of internal debate now has an estimated cost, which argues for a dated decision record.

The document demand is the real test. Documents sufficient to reflect the nature, terms and operation of the conduct is an evidentiary standard, not a summary, and it lands on internal audit, billing analytics and legal hold. Firms whose audit trail lives in a vendor portal and two internal systems find out at the worst possible moment.

Removing the integrity agreement changes the calculation. Corporate integrity agreements are long, expensive and operationally intrusive, and the fear of one has kept some boards quiet. Whether removing that cost increases disclosure is the experiment the pilot is running.

One set of facts, two routes. Deciding what goes to the civil pilot and what goes to the Fraud Division is a judgement made under time pressure, so agree the routing in advance.

What to watch

Watch whether the department publishes outcomes and the multipliers it chose, because the first cases will set the market rate. Watch too whether the April 2027 end date holds, since a pilot that lapses mid disclosure leaves participants exposed.

The first step costs nothing. Pull the timeline of when the issue was first known internally, and who knew. That date is where the multiplier conversation starts.

Attribution: Analysis based on US Department of Justice and related public reporting. This article is original commentary, not a repost of the source material.

More daily case studies
← Back to GRC News