Stark Law & AKS Compliance Plan

Stark Law & AKS Compliance Plan

Produces a defensible compliance plan covering physician self-referral prohibitions (Stark Law, 42 U.S.C. § 1395nn) and anti-kickback requirements (AKS, 42 U.S.C. § 1320a-7b(b)), tailored to the organization's arrangements and risk profile.

Prerequisites

1. Organizational documents — corporate structure, service lines, covered entities
2. Physician arrangement inventory — employment agreements, PSAs, medical directorships, leases, JV interests, recruitment packages
3. Referral data — volume by physician, service type, payer
4. Compliance history — audit findings, OIG/CMS correspondence, prior self-disclosures
5. Compensation data — physician pay, FMV assessments, survey benchmarks

Quick Start

1. Gather prerequisites above
2. Inventory all physician financial arrangements
3. Score each arrangement using the risk matrix (Section III)
4. Map each arrangement to a Stark exception and AKS safe harbor
5. Draft plan sections I–X below
6. Run the pitfall checklist before finalizing

Core Workflow

I. Scope & Authority

Define: covered entities (all system legal entities), covered personnel (employees, contractors, medical staff, board), covered relationships (all financial arrangements with referral sources), DHS trigger (any designated health service under § 1395nn), and authority basis (board resolution with date).

II. Regulatory Framework

Stark Law (42 U.S.C. § 1395nn; 42 C.F.R. § 411.350–.389)

• Prohibits physician self-referrals for DHS when financial relationship exists
• Strict liability — no intent requirement
• Penalties: claim denial, refunds, CMPs up to $100k/arrangement, FCA exposure

DHS categories — map to org's actual service lines: clinical lab, PT/OT/speech, radiology/imaging, radiation therapy, DME, home health, outpatient Rx, inpatient/outpatient hospital.

Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b); 42 C.F.R. § 1001.952)

• Criminal prohibition on remuneration to induce referrals
• "One purpose" test — any intent to induce suffices
• Penalties: felony (up to 5 yrs), $100k CMP/violation, treble damages, exclusion

Key Safe Harbors (42 C.F.R. § 1001.952):

III. Risk Assessment

Arrangement inventory — catalog: employed physicians, independent contractor PSAs, medical directorships, physician ownership/JV interests, space/equipment leases, recruitment incentives, call coverage, research collaborations with referral overlap.

Risk scoring matrix:

Referral pattern analysis: compare per-physician volumes to peer benchmarks; flag post-arrangement spikes >20%; identify exclusive referral patterns; validate utilization against clinical norms.

IV. Operational Policies

Arrangement lifecycle:

Prohibited practices: productivity bonuses tied to DHS volume; per-click leases varying with referred-patient use; director stipends fluctuating with referrals; above/below-FMV rental rates; free/discounted services to referral sources; undocumented recruitment guarantees.

V. Training Program

Require scenario-based assessments, passing score threshold, documented attendance.

VI. Monitoring & Audit

Continuous monitoring: automated tracking of referral volumes, compensation payments, utilization rates, contract expirations. Alert on volume breaches, >20% pattern deviations, approaching expirations.

Annual internal audit (risk-based sampling, weight toward high-risk):

• Written agreement completeness
• Exception/safe harbor satisfaction
• Current FMV documentation
• Services actually rendered (time records, deliverables)
• Referral patterns within normal parameters
• DHS billing compliance

External review: every 3 years minimum, or after mergers, enforcement actions, major regulatory changes.

VII. Reporting & Non-Retaliation

Channels: third-party hotline (24/7, multilingual), compliance email, physical mail, intranet portal, in-person to compliance/HR.

Non-retaliation policy — covers termination, demotion, pay reduction, schedule changes, hostile environment.

Triage:

VIII. Investigation & Remediation

1. Immediate assessment — interim protective measures (suspend arrangement, restrict access)
2. Engage external counsel for potential criminal violations or significant exposure
3. Document scope, evidence, interviews, timeline, findings, regulatory citations
4. Present findings to Compliance Officer / Committee / Board per severity

Corrective actions: terminate/restructure non-compliant arrangements, recover overpayments, discipline responsible individuals, enhance controls, self-disclose when required (OIG Self-Disclosure Protocol / CMS SRDP), verify implementation.

IX. Documentation & Retention

Per-arrangement file: executed agreement + amendments, FMV analysis with methodology, board/committee approval minutes, compliance review certification, evidence of services rendered, compensation records, correspondence, annual review documentation.

Retention: minimum 10 years from last service/payment; longer if litigation/investigation pending. Secure storage with role-based access.

X. Governance

Annual program review: policy currency, monitoring effectiveness, training outcomes, reporting utilization, benchmark against OIG guidance and HCCA standards.

Regulatory change protocol: monitor CMS/OIG final rules, advisory opinions, enforcement actions → draft amendment → legal review → Committee → Board → communication/training.

Pitfalls & Checks

• Stark exceptions are mandatory — if no exception applies, the arrangement violates the statute regardless of intent
• AKS safe harbors are voluntary — failure to meet one doesn't automatically establish violation, but arrangement must still lack improper intent
• Cite specific statutory provisions throughout (§ 1395nn, § 1320a-7b(b), 42 C.F.R. § 411.357, § 1001.952)
• Use directive language ("must," "shall") — not aspirational ("should generally")
• Address state-level self-referral and anti-kickback statutes where applicable
• Include CMS SRDP and OIG Self-Disclosure Protocol procedures
• Verify all regulatory citations are current before finalizing [VERIFY]
• Tailor DHS categories, safe harbors, and examples to the organization's actual service lines

It looks like I don't have write permission to the file. Could you grant write access so I can save the rewrite, or would you like to copy the content above directly?