Stark Law & AKS Compliance Plan

Stark Law & AKS Compliance Plan

Produces a defensible compliance plan covering physician self-referral prohibitions (Stark Law, 42 U.S.C. § 1395nn) and anti-kickback requirements (AKS, 42 U.S.C. § 1320a-7b(b)), tailored to the organization's arrangements and risk profile.

Prerequisites

1. Organizational documents — corporate structure, service lines, covered entities
2. Physician arrangement inventory — employment agreements, PSAs, medical directorships, leases, JV interests, recruitment packages
3. Referral data — volume by physician, service type, payer
4. Compliance history — audit findings, OIG/CMS correspondence, prior self-disclosures
5. Compensation data — physician pay, FMV assessments, survey benchmarks

Quick Start

1. Gather prerequisites above
2. Inventory all physician financial arrangements
3. Score each arrangement using the risk matrix (Section III)
4. Map each arrangement to a Stark exception and AKS safe harbor
5. Draft plan sections I–X below
6. Run the pitfall checklist before finalizing

Core Workflow

I. Scope & Authority

Define: covered entities (all system legal entities), covered personnel (employees, contractors, medical staff, board), covered relationships (all financial arrangements with referral sources), DHS trigger (any designated health service under § 1395nn), and authority basis (board resolution with date).

II. Regulatory Framework

Stark Law (42 U.S.C. § 1395nn; 42 C.F.R. § 411.350–.389)

• Prohibits physician self-referrals for DHS when financial relationship exists
• Strict liability — no intent requirement
• Penalties: claim denial, refunds, CMPs up to $100k/arrangement, FCA exposure

DHS categories — map to org's actual service lines: clinical lab, PT/OT/speech, radiology/imaging, radiation therapy, DME, home health, outpatient Rx, inpatient/outpatient hospital.

Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b); 42 C.F.R. § 1001.952)

• Criminal prohibition on remuneration to induce referrals
• "One purpose" test — any intent to induce suffices
• Penalties: felony (up to 5 yrs), $100k CMP/violation, treble damages, exclusion

Key Safe Harbors (42 C.F.R. § 1001.952):

Safe Harbor	Critical Elements
Employment	≥1 yr, FMV, not volume/value-based, commercially reasonable
Personal services	Written agreement, specific services, ≥1 yr, FMV, aggregate set in advance
Space rental	Written agreement, specific space, ≥1 yr, FMV, not volume/value-based
Equipment rental	Written agreement, specific equipment, ≥1 yr, FMV, not volume/value-based
Practitioner recruitment	Written agreement, underserved area benefit, net cost to practice

III. Risk Assessment

Arrangement inventory — catalog: employed physicians, independent contractor PSAs, medical directorships, physician ownership/JV interests, space/equipment leases, recruitment incentives, call coverage, research collaborations with referral overlap.

Risk scoring matrix:

Factor	High (3)	Medium (2)	Low (1)
Referral volume	Top decile	Average	Minimal
DHS dollar value	>$500k/yr	$100k–$500k	<$100k
Compensation variability	Volume-linked	Partially variable	Fixed only
FMV verification	>24 mo stale	12–24 mo	<12 mo current
Written agreement	Missing/expired	Gaps in terms	Fully compliant

Referral pattern analysis: compare per-physician volumes to peer benchmarks; flag post-arrangement spikes >20%; identify exclusive referral patterns; validate utilization against clinical norms.

IV. Operational Policies

Arrangement lifecycle:

Phase	Requirement
Pre-execution	Submit to compliance ≥30 days before effective date
Content	Parties, services, time commitment, specific compensation, term dates, termination provisions
FMV threshold	Third-party valuation if >$50k/yr OR high referral volume
Execution	Signed before services begin or compensation paid
Annual review	Verify compliance, FMV currency, services rendered
Renewal	Re-assess ≥60 days before expiration

Prohibited practices: productivity bonuses tied to DHS volume; per-click leases varying with referred-patient use; director stipends fluctuating with referrals; above/below-FMV rental rates; free/discounted services to referral sources; undocumented recruitment guarantees.

V. Training Program

Audience	Timing	Focus
All employees	Hire + annual	Basic framework, reporting obligations
Physician contracting	Quarterly	Arrangement structuring, exceptions/safe harbors
Business development	Quarterly	Relationship ID, prohibited inducements
Billing/coding	Semi-annual	DHS claim requirements
Physicians	Onboarding + annual	Personal liability, referral restrictions
Compliance staff	Ongoing	Regulatory updates, enforcement trends

Require scenario-based assessments, passing score threshold, documented attendance.

VI. Monitoring & Audit

Continuous monitoring: automated tracking of referral volumes, compensation payments, utilization rates, contract expirations. Alert on volume breaches, >20% pattern deviations, approaching expirations.

Annual internal audit (risk-based sampling, weight toward high-risk):

• Written agreement completeness
• Exception/safe harbor satisfaction
• Current FMV documentation
• Services actually rendered (time records, deliverables)
• Referral patterns within normal parameters
• DHS billing compliance

External review: every 3 years minimum, or after mergers, enforcement actions, major regulatory changes.

VII. Reporting & Non-Retaliation

Channels: third-party hotline (24/7, multilingual), compliance email, physical mail, intranet portal, in-person to compliance/HR.

Non-retaliation policy — covers termination, demotion, pay reduction, schedule changes, hostile environment.

Triage:

Severity	Criteria	Response
Critical	Ongoing violation, significant financial/safety risk	Immediate investigation, suspend arrangement
High	Systemic compliance failure	Expedited investigation (30 days)
Standard	Isolated potential violation	Standard investigation (60 days)

VIII. Investigation & Remediation

1. Immediate assessment — interim protective measures (suspend arrangement, restrict access)
2. Engage external counsel for potential criminal violations or significant exposure
3. Document scope, evidence, interviews, timeline, findings, regulatory citations
4. Present findings to Compliance Officer / Committee / Board per severity

Corrective actions: terminate/restructure non-compliant arrangements, recover overpayments, discipline responsible individuals, enhance controls, self-disclose when required (OIG Self-Disclosure Protocol / CMS SRDP), verify implementation.

IX. Documentation & Retention

Per-arrangement file: executed agreement + amendments, FMV analysis with methodology, board/committee approval minutes, compliance review certification, evidence of services rendered, compensation records, correspondence, annual review documentation.

Retention: minimum 10 years from last service/payment; longer if litigation/investigation pending. Secure storage with role-based access.

X. Governance

Role	Responsibilities
Compliance Officer	Day-to-day oversight, direct board access, authority to challenge business decisions
Compliance Committee	Quarterly review of findings, corrective actions, regulatory developments
Board of Directors	Ultimate oversight, annual effectiveness review, resource allocation

Annual program review: policy currency, monitoring effectiveness, training outcomes, reporting utilization, benchmark against OIG guidance and HCCA standards.

Regulatory change protocol: monitor CMS/OIG final rules, advisory opinions, enforcement actions → draft amendment → legal review → Committee → Board → communication/training.

Pitfalls & Checks

• Stark exceptions are mandatory — if no exception applies, the arrangement violates the statute regardless of intent
• AKS safe harbors are voluntary — failure to meet one doesn't automatically establish violation, but arrangement must still lack improper intent
• Cite specific statutory provisions throughout (§ 1395nn, § 1320a-7b(b), 42 C.F.R. § 411.357, § 1001.952)
• Use directive language ("must," "shall") — not aspirational ("should generally")
• Address state-level self-referral and anti-kickback statutes where applicable
• Include CMS SRDP and OIG Self-Disclosure Protocol procedures
• Verify all regulatory citations are current before finalizing [VERIFY]
• Tailor DHS categories, safe harbors, and examples to the organization's actual service lines

---

It looks like I don't have write permission to the file. Could you grant write access so I can save the rewrite, or would you like to copy the content above directly?