Health Care

There has been a lot of discussion of the Food and Drug Omnibus Reform Act of 2022 (FDORA), which was enacted on December 29, 2022 as part of the larger Consolidated Appropriations Act for 2023, but we should also take a moment to review last year’s actions and policy updates on digital health from the Food and Drug Administration (FDA). The year 2022 marked the conclusion of the five-year Software Precertification Pilot Program and the release of the final Clinical Decision Support Software guidance, among other things (both described below); however, major digital health policy updates and announcements were few and far between. In this post, we summarize the agency’s key actions in the digital health space in 2022.

Record Settlement in a Declined Case Continued; Pursuit of EHR Technology Vendors; Slowdown in Qui Tam Cases Involving Private Equity Firms; First Settlement of a Civil Cyber-Fraud Case

Although DOJ and the Office of the Inspector General for the Department of Health and Human Services have joint authority to promulgate regulations implementing EKRA, we do not anticipate the publication of any such regulations. Based on the current enforcement activity and court decisions, we recommend recovery homes, clinical treatment facilities, and laboratories perform a risk assessment of employee compensation arrangements and update as necessary; conduct fair market value assessments of service arrangements; and train staff regarding the requirements of EKRA.

While the Biden Administration has indicated it will let the PHE expire on May 11, 2023 and not all telehealth flexibilities will remain in place, the expansion of telehealth is undoubtedly here to stay, given its continued popularity. Telehealth providers should continue to monitor state and federal developments closely to ensure ongoing compliance with applicable billing requirements, conduct auditing and monitoring activities, and evaluate compliance program effectiveness.

From an agency guidance and regulatory developments perspective, 2022 was fairly quiet until the latter part of the year. Consistent with past practice, the Office of Inspector General for the Department of Health and Human Services (HHS OIG) issued a number of Advisory Opinions throughout the course of 2022. But DOJ issued four guidance documents between September 2022 and January 2023, all of which related to criminal prosecution of both individuals and corporations and reiterated a theme we have seen from DOJ over the last several years when discussing the resolution of cases: individual accountability, cooperation, and self-disclosure (among others). At tail end the end of December, Centers for Medicare & Medicaid Services (CMS) also issued a new proposed rule setting forth potential amendments to regulations for Medicare Part A - D regarding overpayments. We highlight some key takeaways from these publications below.

Individuals and entities in the opioid supply chain continue to be a top enforcement priority for the Department of Justice (DOJ) and other enforcement agencies, and we expect this trend will continue in 2023. Federal enforcement efforts this past year were a mixed bag: DOJ suffered a significant setback at the Supreme Court, devoted new resources to curb opioid-related criminal conduct by individuals, and further expanded its civil enforcement toolkit to limit opioid overprescribing by pharmacies and pharmacists. DOJ’s civil enforcement efforts will continue unabated in 2023 as well, as evidenced by the government’s newest lawsuit against a major distributor filed in the final days of 2022. Additionally, state governments and private plaintiffs procured massive civil settlements in the national opioid litigation involving three major pharmacies in 2022.

Over the last year, a few important questions related to False Claims Act (FCA) cases have garnered significant attention. Two of those questions ultimately made their way to the Supreme Court. In one case, which has already been argued, the Court addresses whether the government has authority to dismiss an FCA case brought by a private citizen on the government’s behalf (a qui tam action) after originally declining to intervene and, if so, the applicable standard of judicial review. More recently, the Court has agreed to hear two cases that address whether a defendant’s “objectively reasonable” interpretation of ambiguous statutory language presents a cognizable defense to “knowledge” under the FCA. We cover both of these issues in more detail.

Based upon the increase in both financial and staffing resources, we expect to see an increase in COVID-19 related fraud prosecutions in 2023 as DOJ tries to recover additional funds and resolve cases in order to meet its stated Priority Goals. We anticipate that these cases will be a mixture of larger or more complex cases and cases that will bring heightened media scrutiny such as the recent charges brought in the Northern District of Florida against a controversial Florida state representative stemming from his applications for $150,000 in pandemic relief.

Medicare Advantage (Medicare Part C) remained a top enforcement priority in 2022, and Medicare Advantage Organizations (MAOs) are the subject of intense scrutiny by the Department of Justice (DOJ); the Office of Inspector General for the Department of Health and Human Services (HHS OIG); and the press. MAOs undoubtedly will continue to face considerable enforcement in 2023 and beyond, particularly as Medicare Advantage continues to grow in both number of enrollees and in federal spending. As of January 31, 2023, more than 30 million people are enrolled in MAOs—nearly half of all Medicare enrollees.

The U.S. Department of Health and Human Services Office of Inspector General (OIG) recently partnered with various law enforcement agencies in a multi-state enforcement action aimed at uncovering a nursing degree fraud scheme: Operation Nightingale. This blog post discusses the related enforcement actions surrounding the fraud scheme and the broader implication on healthcare. 

The Stark Law’s Self-Referral Disclosure Protocol (SRDP) will include a new Group Practice Information Form for physician practices to report any noncompliance arising from not fully satisfying the Stark Law’s definition for a “group practice,” effective March 1, 2023. The Centers for Medicare & Medicaid Services (CMS) intends for the changes to reduce regulatory burden and streamline the disclosure process.

On December 16, 2022, United States Attorney General Merrick Garland issued two related memoranda (collectively, the “Garland Memo”) which provide guidance to federal prosecutors regarding department policies for charging, pleas, and sentencing. Following publication of the Garland Memo, on January 17, 2023, Assistant Attorney General for the DOJ’s Criminal Division Kenneth Allen Polite Jr. announced important revisions to the Criminal Division’s Corporate Enforcement Policy (the “CEP”), which alter how it will evaluate corporate criminal matters.

As many of our readers are likely aware, last week the Supreme Court agreed to hear a second False Claims Act (FCA) issue this term. Having previously accepted and heard argument on a case concerning the government’s authority to dismiss an FCA whistleblower case after declining to intervene, the Court has now granted certiorari to hear two cases addressing what constitutes a “knowing” violation of the FCA. Hanging in the balance is the fate of two lower court decisions that endorsed a powerful defense to FCA liability.

The Centers for Medicare & Medicaid Services (CMS) proposed a rule late last year to harmonize the standard it would apply for providers to identify and refund overpayments with the “knowledge” standard under the False Claims Act (FCA) and the Civil Monetary Penalties Law. Though this proposal purportedly ensures that a lack of “reasonable diligence” cannot create civil liability, it would create significant confusion as to how CMS expects providers and Medicare Advantage organizations (MAOs) to “identify” and quantify potential overpayments before triggering the 60-day period to refund them. The proposed rule, if adopted, would likely become part of the framework for the Department of Justice and Department of Health & Human Services’ Office of Inspector General when evaluating potential liability for the alleged failure to return overpayments.

The COVID-19 Public Health Emergency (PHE), which was originally declared nearly three years ago, has been renewed through April 2023. As we’ve previously covered, the PHE allowed federal and state regulators to relax certain telehealth requirements, which has led to a rapid expansion in the availability of telehealth services. The Biden Administration has committed to provide at least 60 days’ notice prior to terminating the PHE or allowing it to expire, but several news outlets are reporting that this could be the final extension. 

On December 29, 2022, President Biden signed into law the Consolidated Appropriations Act for 2023, colloquially referred to as the omnibus funding bill, that includes a similarly expansive and diverse piece of legislation called the Food and Drug Omnibus Reform Act (FDORA). This latest addition to the rich history of amendments to the Federal Food, Drug, and Cosmetic Act (FD&C Act) authorizes a variety of new and important changes to the laws governing therapeutic products and medical devices, clinical trials, and (in a much rarer occurrence) cosmetics and other personal care products. Many of the statutory changes had been requested by the Food and Drug Administration (FDA), whether formally via budget requests or more informally via its leadership. The agency also received an increase of $226 million (or 6.5%) in its congressional appropriation for fiscal year 2023 as compared to its funding level for fiscal year 2022, suggesting continued bipartisan support for its public health mission.  

As the 2022 calendar year ended, the Consolidated Appropriations Act, 2023 was signed into law by President Biden. The massive piece of legislation included the Modernization of Cosmetics Regulation Act of 2022 (MOCRA), comprising a long-awaited update to the nation’s cosmetic laws. MOCRA amends Chapter VI of the Federal Food, Drug, and Cosmetic Act (FD&C Act). As noted by one of the bill’s co-sponsors, Senator Dianne Feinstein, after its passage, it finally brings the federal government’s “oversight tools” for cosmetics and personal care products “into the 21^st century.”

As illustrated by a recent Office for Civil Rights (OCR) settlement with a dental practice, health care entities continue to struggle with how to respond to negative online reviews while maintaining compliance with the HIPAA Privacy Rule. Given the significant reputational harm that negative reviews on Yelp and other social media and public platforms (Platforms) can create, providers may be tempted to respond to such negative comments with patient specifics in an attempt to mitigate harm to their businesses.

The Pandemic Response Accountability Committee (PRAC) Health Care Subgroup recently published an expansive report that highlighted the sheer volume of expanded access to and use of telehealth services in certain federal health care programs during the first year of the COVID-19 pandemic. The report also focused on program integrity risks related to this expanded use and included recommended safeguards for future oversight of telehealth services.

Governor Gavin Newsom signed 997 bills into law in 2022, including a substantial number relating to health care. In Part II of our legislative update, this blog post summarizes many of the laws relevant to health facilities, a number of which will go into effect January 1, 2023.