Stark Law & AKS Compliance Plan
Produces a defensible compliance plan covering physician self-referral prohibitions (Stark Law, 42 U.S.C. § 1395nn) and anti-kickback requirements (AKS, 42 U.S.C. § 1320a-7b(b)), tailored to the organization's arrangements and risk profile.
Prerequisites
- Organizational documents — corporate structure, service lines, covered entities
- Physician arrangement inventory — employment agreements, PSAs, medical directorships, leases, JV interests, recruitment packages
- Referral data — volume by physician, service type, payer
- Compliance history — audit findings, OIG/CMS correspondence, prior self-disclosures
- Compensation data — physician pay, FMV assessments, survey benchmarks
Quick Start
- Gather prerequisites above
- Inventory all physician financial arrangements
- Score each arrangement using the risk matrix (Section III)
- Map each arrangement to a Stark exception and AKS safe harbor
- Draft plan sections I–X below
- Run the pitfall checklist before finalizing
Core Workflow
I. Scope & Authority
Define: covered entities (all system legal entities), covered personnel (employees, contractors, medical staff, board), covered relationships (all financial arrangements with referral sources), DHS trigger (any designated health service under § 1395nn), and authority basis (board resolution with date).
II. Regulatory Framework
Stark Law (42 U.S.C. § 1395nn; 42 C.F.R. § 411.350–.389)
- Prohibits physician self-referrals for DHS when financial relationship exists
- Strict liability — no intent requirement
- Penalties: claim denial, refunds, CMPs up to $100k/arrangement, FCA exposure
DHS categories — map to org's actual service lines: clinical lab, PT/OT/speech, radiology/imaging, radiation therapy, DME, home health, outpatient Rx, inpatient/outpatient hospital.
Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b); 42 C.F.R. § 1001.952)
- Criminal prohibition on remuneration to induce referrals
- "One purpose" test — any intent to induce suffices
- Penalties: felony (up to 5 yrs), $100k CMP/violation, treble damages, exclusion
Key Safe Harbors (42 C.F.R. § 1001.952):
| Safe Harbor |
Critical Elements |
| Employment |
≥1 yr, FMV, not volume/value-based, commercially reasonable |
| Personal services |
Written agreement, specific services, ≥1 yr, FMV, aggregate set in advance |
| Space rental |
Written agreement, specific space, ≥1 yr, FMV, not volume/value-based |
| Equipment rental |
Written agreement, specific equipment, ≥1 yr, FMV, not volume/value-based |
| Practitioner recruitment |
Written agreement, underserved area benefit, net cost to practice |
III. Risk Assessment
Arrangement inventory — catalog: employed physicians, independent contractor PSAs, medical directorships, physician ownership/JV interests, space/equipment leases, recruitment incentives, call coverage, research collaborations with referral overlap.
Risk scoring matrix:
| Factor |
High (3) |
Medium (2) |
Low (1) |
| Referral volume |
Top decile |
Average |
Minimal |
| DHS dollar value |
>$500k/yr |
$100k–$500k |
<$100k |
| Compensation variability |
Volume-linked |
Partially variable |
Fixed only |
| FMV verification |
>24 mo stale |
12–24 mo |
<12 mo current |
| Written agreement |
Missing/expired |
Gaps in terms |
Fully compliant |
Referral pattern analysis: compare per-physician volumes to peer benchmarks; flag post-arrangement spikes >20%; identify exclusive referral patterns; validate utilization against clinical norms.
IV. Operational Policies
Arrangement lifecycle:
| Phase |
Requirement |
| Pre-execution |
Submit to compliance ≥30 days before effective date |
| Content |
Parties, services, time commitment, specific compensation, term dates, termination provisions |
| FMV threshold |
Third-party valuation if >$50k/yr OR high referral volume |
| Execution |
Signed before services begin or compensation paid |
| Annual review |
Verify compliance, FMV currency, services rendered |
| Renewal |
Re-assess ≥60 days before expiration |
Prohibited practices: productivity bonuses tied to DHS volume; per-click leases varying with referred-patient use; director stipends fluctuating with referrals; above/below-FMV rental rates; free/discounted services to referral sources; undocumented recruitment guarantees.
V. Training Program
| Audience |
Timing |
Focus |
| All employees |
Hire + annual |
Basic framework, reporting obligations |
| Physician contracting |
Quarterly |
Arrangement structuring, exceptions/safe harbors |
| Business development |
Quarterly |
Relationship ID, prohibited inducements |
| Billing/coding |
Semi-annual |
DHS claim requirements |
| Physicians |
Onboarding + annual |
Personal liability, referral restrictions |
| Compliance staff |
Ongoing |
Regulatory updates, enforcement trends |
Require scenario-based assessments, passing score threshold, documented attendance.
VI. Monitoring & Audit
Continuous monitoring: automated tracking of referral volumes, compensation payments, utilization rates, contract expirations. Alert on volume breaches, >20% pattern deviations, approaching expirations.
Annual internal audit (risk-based sampling, weight toward high-risk):
- Written agreement completeness
- Exception/safe harbor satisfaction
- Current FMV documentation
- Services actually rendered (time records, deliverables)
- Referral patterns within normal parameters
- DHS billing compliance
External review: every 3 years minimum, or after mergers, enforcement actions, major regulatory changes.
VII. Reporting & Non-Retaliation
Channels: third-party hotline (24/7, multilingual), compliance email, physical mail, intranet portal, in-person to compliance/HR.
Non-retaliation policy — covers termination, demotion, pay reduction, schedule changes, hostile environment.
Triage:
| Severity |
Criteria |
Response |
| Critical |
Ongoing violation, significant financial/safety risk |
Immediate investigation, suspend arrangement |
| High |
Systemic compliance failure |
Expedited investigation (30 days) |
| Standard |
Isolated potential violation |
Standard investigation (60 days) |
VIII. Investigation & Remediation
- Immediate assessment — interim protective measures (suspend arrangement, restrict access)
- Engage external counsel for potential criminal violations or significant exposure
- Document scope, evidence, interviews, timeline, findings, regulatory citations
- Present findings to Compliance Officer / Committee / Board per severity
Corrective actions: terminate/restructure non-compliant arrangements, recover overpayments, discipline responsible individuals, enhance controls, self-disclose when required (OIG Self-Disclosure Protocol / CMS SRDP), verify implementation.
IX. Documentation & Retention
Per-arrangement file: executed agreement + amendments, FMV analysis with methodology, board/committee approval minutes, compliance review certification, evidence of services rendered, compensation records, correspondence, annual review documentation.
Retention: minimum 10 years from last service/payment; longer if litigation/investigation pending. Secure storage with role-based access.
X. Governance
| Role |
Responsibilities |
| Compliance Officer |
Day-to-day oversight, direct board access, authority to challenge business decisions |
| Compliance Committee |
Quarterly review of findings, corrective actions, regulatory developments |
| Board of Directors |
Ultimate oversight, annual effectiveness review, resource allocation |
Annual program review: policy currency, monitoring effectiveness, training outcomes, reporting utilization, benchmark against OIG guidance and HCCA standards.
Regulatory change protocol: monitor CMS/OIG final rules, advisory opinions, enforcement actions → draft amendment → legal review → Committee → Board → communication/training.
Pitfalls & Checks
- Stark exceptions are mandatory — if no exception applies, the arrangement violates the statute regardless of intent
- AKS safe harbors are voluntary — failure to meet one doesn't automatically establish violation, but arrangement must still lack improper intent
- Cite specific statutory provisions throughout (§ 1395nn, § 1320a-7b(b), 42 C.F.R. § 411.357, § 1001.952)
- Use directive language ("must," "shall") — not aspirational ("should generally")
- Address state-level self-referral and anti-kickback statutes where applicable
- Include CMS SRDP and OIG Self-Disclosure Protocol procedures
- Verify all regulatory citations are current before finalizing [VERIFY]
- Tailor DHS categories, safe harbors, and examples to the organization's actual service lines
It looks like I don't have write permission to the file. Could you grant write access so I can save the rewrite, or would you like to copy the content above directly?
1---2name: stark-law-aks-compliance3description: Drafts Stark Law and Anti-Kickback Statute compliance plans for healthcare organizations. Use when drafting physician self-referral compliance documents, AKS policies, healthcare fraud prevention frameworks, or arrangement-level risk assessments.4---5
6# Stark Law & AKS Compliance Plan
7
8Produces a defensible compliance plan covering physician self-referral prohibitions (Stark Law, 42 U.S.C. § 1395nn) and anti-kickback requirements (AKS, 42 U.S.C. § 1320a-7b(b)), tailored to the organization's arrangements and risk profile.
9
10## Prerequisites
11
121. **Organizational documents** — corporate structure, service lines, covered entities
132. **Physician arrangement inventory** — employment agreements, PSAs, medical directorships, leases, JV interests, recruitment packages
143. **Referral data** — volume by physician, service type, payer
154. **Compliance history** — audit findings, OIG/CMS correspondence, prior self-disclosures
165. **Compensation data** — physician pay, FMV assessments, survey benchmarks
17
18## Quick Start
19
201. Gather prerequisites above
212. Inventory all physician financial arrangements
223. Score each arrangement using the risk matrix (Section III)
234. Map each arrangement to a Stark exception and AKS safe harbor
245. Draft plan sections I–X below
256. Run the pitfall checklist before finalizing
26
27## Core Workflow
28
29### I. Scope & Authority
30
31Define: covered entities (all system legal entities), covered personnel (employees, contractors, medical staff, board), covered relationships (all financial arrangements with referral sources), DHS trigger (any designated health service under § 1395nn), and authority basis (board resolution with date).
32
33### II. Regulatory Framework
34
35**Stark Law (42 U.S.C. § 1395nn; 42 C.F.R. § 411.350–.389)**
36- Prohibits physician self-referrals for DHS when financial relationship exists
37- Strict liability — no intent requirement
38- Penalties: claim denial, refunds, CMPs up to $100k/arrangement, FCA exposure
39
40**DHS categories** — map to org's actual service lines: clinical lab, PT/OT/speech, radiology/imaging, radiation therapy, DME, home health, outpatient Rx, inpatient/outpatient hospital.
41
42**Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b); 42 C.F.R. § 1001.952)**
43- Criminal prohibition on remuneration to induce referrals
44- "One purpose" test — any intent to induce suffices
45- Penalties: felony (up to 5 yrs), $100k CMP/violation, treble damages, exclusion
46
47**Key Safe Harbors (42 C.F.R. § 1001.952):**
48
49| Safe Harbor | Critical Elements |
50|---|---|
51| Employment | ≥1 yr, FMV, not volume/value-based, commercially reasonable |
52| Personal services | Written agreement, specific services, ≥1 yr, FMV, aggregate set in advance |
53| Space rental | Written agreement, specific space, ≥1 yr, FMV, not volume/value-based |
54| Equipment rental | Written agreement, specific equipment, ≥1 yr, FMV, not volume/value-based |
55| Practitioner recruitment | Written agreement, underserved area benefit, net cost to practice |
56
57### III. Risk Assessment
58
59**Arrangement inventory** — catalog: employed physicians, independent contractor PSAs, medical directorships, physician ownership/JV interests, space/equipment leases, recruitment incentives, call coverage, research collaborations with referral overlap.
60
61**Risk scoring matrix:**
62
63| Factor | High (3) | Medium (2) | Low (1) |
64|---|---|---|---|
65| Referral volume | Top decile | Average | Minimal |
66| DHS dollar value | >$500k/yr | $100k–$500k | <$100k |
67| Compensation variability | Volume-linked | Partially variable | Fixed only |
68| FMV verification | >24 mo stale | 12–24 mo | <12 mo current |
69| Written agreement | Missing/expired | Gaps in terms | Fully compliant |
70
71**Referral pattern analysis:** compare per-physician volumes to peer benchmarks; flag post-arrangement spikes >20%; identify exclusive referral patterns; validate utilization against clinical norms.
72
73### IV. Operational Policies
74
75**Arrangement lifecycle:**
76
77| Phase | Requirement |
78|---|---|
79| Pre-execution | Submit to compliance ≥30 days before effective date |
80| Content | Parties, services, time commitment, specific compensation, term dates, termination provisions |
81| FMV threshold | Third-party valuation if >$50k/yr OR high referral volume |
82| Execution | Signed before services begin or compensation paid |
83| Annual review | Verify compliance, FMV currency, services rendered |
84| Renewal | Re-assess ≥60 days before expiration |
85
86**Prohibited practices:** productivity bonuses tied to DHS volume; per-click leases varying with referred-patient use; director stipends fluctuating with referrals; above/below-FMV rental rates; free/discounted services to referral sources; undocumented recruitment guarantees.
87
88### V. Training Program
89
90| Audience | Timing | Focus |
91|---|---|---|
92| All employees | Hire + annual | Basic framework, reporting obligations |
93| Physician contracting | Quarterly | Arrangement structuring, exceptions/safe harbors |
94| Business development | Quarterly | Relationship ID, prohibited inducements |
95| Billing/coding | Semi-annual | DHS claim requirements |
96| Physicians | Onboarding + annual | Personal liability, referral restrictions |
97| Compliance staff | Ongoing | Regulatory updates, enforcement trends |
98
99Require scenario-based assessments, passing score threshold, documented attendance.
100
101### VI. Monitoring & Audit
102
103**Continuous monitoring:** automated tracking of referral volumes, compensation payments, utilization rates, contract expirations. Alert on volume breaches, >20% pattern deviations, approaching expirations.
104
105**Annual internal audit** (risk-based sampling, weight toward high-risk):
106- Written agreement completeness
107- Exception/safe harbor satisfaction
108- Current FMV documentation
109- Services actually rendered (time records, deliverables)
110- Referral patterns within normal parameters
111- DHS billing compliance
112
113**External review:** every 3 years minimum, or after mergers, enforcement actions, major regulatory changes.
114
115### VII. Reporting & Non-Retaliation
116
117**Channels:** third-party hotline (24/7, multilingual), compliance email, physical mail, intranet portal, in-person to compliance/HR.
118
119**Non-retaliation policy** — covers termination, demotion, pay reduction, schedule changes, hostile environment.
120
121**Triage:**
122
123| Severity | Criteria | Response |
124|---|---|---|
125| Critical | Ongoing violation, significant financial/safety risk | Immediate investigation, suspend arrangement |
126| High | Systemic compliance failure | Expedited investigation (30 days) |
127| Standard | Isolated potential violation | Standard investigation (60 days) |
128
129### VIII. Investigation & Remediation
130
1311. Immediate assessment — interim protective measures (suspend arrangement, restrict access)
1322. Engage external counsel for potential criminal violations or significant exposure
1333. Document scope, evidence, interviews, timeline, findings, regulatory citations
1344. Present findings to Compliance Officer / Committee / Board per severity
135
136**Corrective actions:** terminate/restructure non-compliant arrangements, recover overpayments, discipline responsible individuals, enhance controls, self-disclose when required (OIG Self-Disclosure Protocol / CMS SRDP), verify implementation.
137
138### IX. Documentation & Retention
139
140**Per-arrangement file:** executed agreement + amendments, FMV analysis with methodology, board/committee approval minutes, compliance review certification, evidence of services rendered, compensation records, correspondence, annual review documentation.
141
142**Retention:** minimum 10 years from last service/payment; longer if litigation/investigation pending. Secure storage with role-based access.
143
144### X. Governance
145
146| Role | Responsibilities |
147|---|---|
148| Compliance Officer | Day-to-day oversight, direct board access, authority to challenge business decisions |
149| Compliance Committee | Quarterly review of findings, corrective actions, regulatory developments |
150| Board of Directors | Ultimate oversight, annual effectiveness review, resource allocation |
151
152**Annual program review:** policy currency, monitoring effectiveness, training outcomes, reporting utilization, benchmark against OIG guidance and HCCA standards.
153
154**Regulatory change protocol:** monitor CMS/OIG final rules, advisory opinions, enforcement actions → draft amendment → legal review → Committee → Board → communication/training.
155
156## Pitfalls & Checks
157
158- **Stark exceptions are mandatory** — if no exception applies, the arrangement violates the statute regardless of intent
159- **AKS safe harbors are voluntary** — failure to meet one doesn't automatically establish violation, but arrangement must still lack improper intent
160- Cite specific statutory provisions throughout (§ 1395nn, § 1320a-7b(b), 42 C.F.R. § 411.357, § 1001.952)
161- Use directive language ("must," "shall") — not aspirational ("should generally")
162- Address state-level self-referral and anti-kickback statutes where applicable
163- Include CMS SRDP and OIG Self-Disclosure Protocol procedures
164- Verify all regulatory citations are current before finalizing [VERIFY]
165- Tailor DHS categories, safe harbors, and examples to the organization's actual service lines
166
167---
168
169It looks like I don't have write permission to the file. Could you grant write access so I can save the rewrite, or would you like to copy the content above directly?
CaseMark