| name | stark-law-aks-compliance |
| language | en |
| description | Drafts Stark Law and Anti-Kickback Statute compliance plans for healthcare organizations. Use when drafting physician self-referral compliance documents, AKS policies, healthcare fraud prevention frameworks, or arrangement-level risk assessments. |
| tags | ["checklist","drafting","memo","regulatory","research"] |
Stark Law & AKS Compliance Plan
Produces a defensible compliance plan covering physician self-referral prohibitions (Stark Law, 42 U.S.C. § 1395nn) and anti-kickback requirements (AKS, 42 U.S.C. § 1320a-7b(b)), tailored to the organization's arrangements and risk profile.
Prerequisites
- Organizational documents — corporate structure, service lines, covered entities
- Physician arrangement inventory — employment agreements, PSAs, medical directorships, leases, JV interests, recruitment packages
- Referral data — volume by physician, service type, payer
- Compliance history — audit findings, OIG/CMS correspondence, prior self-disclosures
- Compensation data — physician pay, FMV assessments, survey benchmarks
Quick Start
- Gather prerequisites above
- Inventory all physician financial arrangements
- Score each arrangement using the risk matrix (Section III)
- Map each arrangement to a Stark exception and AKS safe harbor
- Draft plan sections I–X below
- Run the pitfall checklist before finalizing
Core Workflow
I. Scope & Authority
Define: covered entities (all system legal entities), covered personnel (employees, contractors, medical staff, board), covered relationships (all financial arrangements with referral sources), DHS trigger (any designated health service under § 1395nn), and authority basis (board resolution with date).
II. Regulatory Framework
Stark Law (42 U.S.C. § 1395nn; 42 C.F.R. § 411.350–.389)
- Prohibits physician self-referrals for DHS when financial relationship exists
- Strict liability — no intent requirement
- Penalties: claim denial, refunds, CMPs up to $100k/arrangement, FCA exposure
DHS categories — map to org's actual service lines: clinical lab, PT/OT/speech, radiology/imaging, radiation therapy, DME, home health, outpatient Rx, inpatient/outpatient hospital.
Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b); 42 C.F.R. § 1001.952)
- Criminal prohibition on remuneration to induce referrals
- "One purpose" test — any intent to induce suffices
- Penalties: felony (up to 5 yrs), $100k CMP/violation, treble damages, exclusion
Key Safe Harbors (42 C.F.R. § 1001.952):
| Safe Harbor | Critical Elements |
|---|
| Employment | ≥1 yr, FMV, not volume/value-based, commercially reasonable |
| Personal services | Written agreement, specific services, ≥1 yr, FMV, aggregate set in advance |
| Space rental | Written agreement, specific space, ≥1 yr, FMV, not volume/value-based |
| Equipment rental | Written agreement, specific equipment, ≥1 yr, FMV, not volume/value-based |
| Practitioner recruitment | Written agreement, underserved area benefit, net cost to practice |
III. Risk Assessment
Arrangement inventory — catalog: employed physicians, independent contractor PSAs, medical directorships, physician ownership/JV interests, space/equipment leases, recruitment incentives, call coverage, research collaborations with referral overlap.
Risk scoring matrix:
| Factor | High (3) | Medium (2) | Low (1) |
|---|
| Referral volume | Top decile | Average | Minimal |
| DHS dollar value | >$500k/yr | $100k–$500k | <$100k |
| Compensation variability | Volume-linked | Partially variable | Fixed only |
| FMV verification | >24 mo stale | 12–24 mo | <12 mo current |
| Written agreement | Missing/expired | Gaps in terms | Fully compliant |
Referral pattern analysis: compare per-physician volumes to peer benchmarks; flag post-arrangement spikes >20%; identify exclusive referral patterns; validate utilization against clinical norms.
IV. Operational Policies
Arrangement lifecycle:
| Phase | Requirement |
|---|
| Pre-execution | Submit to compliance ≥30 days before effective date |
| Content | Parties, services, time commitment, specific compensation, term dates, termination provisions |
| FMV threshold | Third-party valuation if >$50k/yr OR high referral volume |
| Execution | Signed before services begin or compensation paid |
| Annual review | Verify compliance, FMV currency, services rendered |
| Renewal | Re-assess ≥60 days before expiration |
Prohibited practices: productivity bonuses tied to DHS volume; per-click leases varying with referred-patient use; director stipends fluctuating with referrals; above/below-FMV rental rates; free/discounted services to referral sources; undocumented recruitment guarantees.
V. Training Program
| Audience | Timing | Focus |
|---|
| All employees | Hire + annual | Basic framework, reporting obligations |
| Physician contracting | Quarterly | Arrangement structuring, exceptions/safe harbors |
| Business development | Quarterly | Relationship ID, prohibited inducements |
| Billing/coding | Semi-annual | DHS claim requirements |
| Physicians | Onboarding + annual | Personal liability, referral restrictions |
| Compliance staff | Ongoing | Regulatory updates, enforcement trends |
Require scenario-based assessments, passing score threshold, documented attendance.
VI. Monitoring & Audit
Continuous monitoring: automated tracking of referral volumes, compensation payments, utilization rates, contract expirations. Alert on volume breaches, >20% pattern deviations, approaching expirations.
Annual internal audit (risk-based sampling, weight toward high-risk):
- Written agreement completeness
- Exception/safe harbor satisfaction
- Current FMV documentation
- Services actually rendered (time records, deliverables)
- Referral patterns within normal parameters
- DHS billing compliance
External review: every 3 years minimum, or after mergers, enforcement actions, major regulatory changes.
VII. Reporting & Non-Retaliation
Channels: third-party hotline (24/7, multilingual), compliance email, physical mail, intranet portal, in-person to compliance/HR.
Non-retaliation policy — covers termination, demotion, pay reduction, schedule changes, hostile environment.
Triage:
| Severity | Criteria | Response |
|---|
| Critical | Ongoing violation, significant financial/safety risk | Immediate investigation, suspend arrangement |
| High | Systemic compliance failure | Expedited investigation (30 days) |
| Standard | Isolated potential violation | Standard investigation (60 days) |
VIII. Investigation & Remediation
- Immediate assessment — interim protective measures (suspend arrangement, restrict access)
- Engage external counsel for potential criminal violations or significant exposure
- Document scope, evidence, interviews, timeline, findings, regulatory citations
- Present findings to Compliance Officer / Committee / Board per severity
Corrective actions: terminate/restructure non-compliant arrangements, recover overpayments, discipline responsible individuals, enhance controls, self-disclose when required (OIG Self-Disclosure Protocol / CMS SRDP), verify implementation.
IX. Documentation & Retention
Per-arrangement file: executed agreement + amendments, FMV analysis with methodology, board/committee approval minutes, compliance review certification, evidence of services rendered, compensation records, correspondence, annual review documentation.
Retention: minimum 10 years from last service/payment; longer if litigation/investigation pending. Secure storage with role-based access.
X. Governance
| Role | Responsibilities |
|---|
| Compliance Officer | Day-to-day oversight, direct board access, authority to challenge business decisions |
| Compliance Committee | Quarterly review of findings, corrective actions, regulatory developments |
| Board of Directors | Ultimate oversight, annual effectiveness review, resource allocation |
Annual program review: policy currency, monitoring effectiveness, training outcomes, reporting utilization, benchmark against OIG guidance and HCCA standards.
Regulatory change protocol: monitor CMS/OIG final rules, advisory opinions, enforcement actions → draft amendment → legal review → Committee → Board → communication/training.
Pitfalls & Checks
- Stark exceptions are mandatory — if no exception applies, the arrangement violates the statute regardless of intent
- AKS safe harbors are voluntary — failure to meet one doesn't automatically establish violation, but arrangement must still lack improper intent
- Cite specific statutory provisions throughout (§ 1395nn, § 1320a-7b(b), 42 C.F.R. § 411.357, § 1001.952)
- Use directive language ("must," "shall") — not aspirational ("should generally")
- Address state-level self-referral and anti-kickback statutes where applicable
- Include CMS SRDP and OIG Self-Disclosure Protocol procedures
- Verify all regulatory citations are current before finalizing [VERIFY]
- Tailor DHS categories, safe harbors, and examples to the organization's actual service lines
It looks like I don't have write permission to the file. Could you grant write access so I can save the rewrite, or would you like to copy the content above directly?
