Health Care

On January 13, 2025, California Attorney General Rob Bonta (the California AG) issued two Legal Advisories regarding the utilization of artificial intelligence (AI). The first Legal Advisory provides guidance to consumers and entities developing, selling, and using AI describing their rights and obligations under California law. The second Legal Advisory, entitled Application of Existing California Law to Artificial Intelligence in Healthcare (the Health Care Legal Advisory), is expressly directed at health care providers, insurers, vendors, investors, and other health care entities who develop, sell, and use AI and other automated decision-making tools.

New York employers are – once again – required to provide employees with notice regarding New York’s reproductive health decision making protections.  The U.S. Court of Appeals for the Second Circuit vacated a lower court’s permanent injunction of a New York law that requires employers to include a notice in their employee handbooks regarding the State’s prohibition of discrimination based on reproductive health choices. 

In 2024, the COVID-19 Fraud Enforcement Task Force, in conjunction with five COVID Fraud Enforcement Strike Forces and other government agencies, has resolved many significant criminal and civil pandemic fraud cases. More civil pandemic fraud enforcement actions and continuing criminal actions are expected in 2025.

Host Of Counsel Bridgette Keller is joined by Alex Hecht, ML Strategies Executive Vice President & Director of Operations, Washington, DC, as they dive into potential health care policy changes on the horizon following the 2024 election and what stakeholders can expect in 2025.

Over the past two years, the Department of Justice has actively incentivized companies to voluntarily self-disclose potential civil and criminal violations. This article explores the DOJ’s new policies, the benefits of self-disclosure, and the challenges companies face in complying with these initiatives.

In 2024, federal courts issued significant False Claims Act decisions for the health care and life sciences industries. These decisions further develop the FCA scienter standard addressed by the Supreme Court in its 2023 SuperValu decision and reexamine the constitutionality of the FCA’s qui tam provisions. A circuit split on the interpretation of “causation” for FCA suits based on alleged violations of the Anti-Kickback Statute (AKS) has also emerged.

In 2024, DOJ and the OIG expanded telehealth enforcement beyond traditional telefraud schemes, addressing compliance with state corporate practice and telehealth-specific billing codes. Two cases, including the first criminal telemedicine prosecution, signal a trend of heightened regulatory scrutiny for the maturing telehealth industry.

Following the Supreme Court’s decision in Securities and Exchange Commission v. Jarkesy, holding that the Seventh Amendment entitles defendants to a jury trial when the SEC seeks to impose civil monetary penalties for a securities fraud violation, parties are starting to assert Jarkesy-based arguments in appealing administrative actions of the Department of Health and Human Services.

Our 2025 edition of EnforceMintz reflects on health care enforcement trends, predicts how health care enforcement may evolve, and offers practical guidance about what these trends and predictions mean for health care providers, payors, and other stakeholders.

As opioid-related enforcement efforts continued across the opioid supply chain in 2024, the government pursued criminal charges in two matters that resulted in significant settlements. Additionally, a number of recent cases against pharmacies involve a common theory of liability based on the Controlled Substances Act, which served as the basis for civil liability under the False Claims Act.

In 2024, DOJ resolved several noteworthy False Claims Act cases against hospitals and health systems, obtaining numerous large recoveries in cases where Stark Law and federal Anti-Kickback Statute violations served as a predicate for FCA claims.

In 2024, the Department of Justice ramped up cybersecurity enforcement under the Civil Cyber-Fraud Initiative (CCFI), targeting entities that failed to safeguard PHI and PII in federally funded contracts. Key cases highlight trends in False Claims Act litigation and underscore the importance of cybersecurity compliance heading into 2025.

In 2024, the Department of Justices and Centers for Medicare & Medicaid Services intensified enforcement in Medicare Advantage and Part D, with a focus on risk adjustment audits and Star Ratings disputes. Key developments, including litigation and regulatory changes, signal heightened scrutiny for MAOs, PDP Sponsors, and their vendors in 2025.

Government scrutiny of value-based care (VBC) health care delivery models is expected to increase as VBC adoption grows. In 2024, the DOJ announced a large FCA settlement with a VBC primary care practice, and HHS’s Office of Inspector General issued a Special Fraud Alert focusing on VBC business arrangements.

In 2024, the HHS Office of Inspector General added the University of Colorado Health d/b/a/ UCHealth, an established provider, to the Heightened Scrutiny list after UCHealth settled an FCA case for $23 million, without an admission of wrongdoing.

In 2024, the FTC and state attorneys general pursued various theories of liability against a diverse array of entities offering health care or health care–related services, and employed numerous different enforcement tools and partnerships. We expect that the agencies will continue developing these strategies in 2025.

The latest entrant in a national wave of policymakers enacting health care market oversight laws that have a significant impact on providers and investors, Massachusetts Governor Maura Healey has signed into law House Bill 5159, “An Act enhancing the health care market review process” (the Act). The product of nearly five months in conference committee following disagreeing votes of the House and Senate, the Act substantially broadens the applicability of one of the oldest state health care market review laws in the country.  The changes brought about by the Act will increase financial transparency and the Commonwealth’s ability to examine both the anticipated and long-term impact of health care transactions. The Act expands the authority of the Massachusetts Attorney General’s Office (AGO), the Center for Health Information and Analysis (CHIA), and the Health Policy Commission (HPC) to require financial, structural, and operational information from a wide array of health care providers and those seeking to provide them with investment, management, and other services. 

Last fall at the Safeguarding Health Information: Building Assurance Through HIPAA Security 2024 conference, U.S. Department of Health & Human Services Office for Civil Rights (OCR) promised that before year’s end, it would publish amendments to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule. On December 27, 2024, OCR made good on that promise and released an unpublished version of the Security Rule amendments proposal.

Governor Newsom signed over 1300 bills and vetoed almost 190 bills in 2024.  Consistent with prior years, in 2024, California enacted multiple laws significantly impacting the health care industry.  From artificial intelligence (AI) to providers to health plans, these new laws require proactive efforts to ensure on-going compliance.

We highlight below the most important of the heath care-focused bills passed during this year.  Unless otherwise noted, these new laws are effective January 1, 2025.

As part of its Modernization Initiative, the Department of Health and Human Services’ Office of Inspector General (OIG) recently published its first industry-segment specific Compliance Program Guidance, which focuses on skilled nursing facilities (SNFs) (SNF ICPG). Since 1998, the OIG has issued voluntary compliance program guidance documents, each tailored to a specific segment of the health care industry and providing important insights on specific risk areas and tips for implementing an effective compliance program.  In April 2023, the OIG announced a long overdue modernization of these compliance program guidance documents and rolled out its General Compliance Program Guidance the following November.