Stark Law & AKS Compliance Plan

Produces a defensible compliance plan covering physician self-referral prohibitions (Stark Law, 42 U.S.C. § 1395nn) and anti-kickback requirements (AKS, 42 U.S.C. § 1320a-7b(b)), tailored to the organization's arrangements and risk profile.

Prerequisites

1. Organizational documents — corporate structure, service lines, covered entities
2. Physician arrangement inventory — employment agreements, PSAs, medical directorships, leases, JV interests, recruitment packages
3. Referral data — volume by physician, service type, payer
4. Compliance history — audit findings, OIG/CMS correspondence, prior self-disclosures
5. Compensation data — physician pay, FMV assessments, survey benchmarks

Quick Start

1. Gather prerequisites above
2. Inventory all physician financial arrangements
3. Score each arrangement using the risk matrix (Section III)
4. Map each arrangement to a Stark exception and AKS safe harbor
5. Draft plan sections I–X below
6. Run the pitfall checklist before finalizing

Core Workflow

I. Scope & Authority

Define: covered entities (all system legal entities), covered personnel (employees, contractors, medical staff, board), covered relationships (all financial arrangements with referral sources), DHS trigger (any designated health service under § 1395nn), and authority basis (board resolution with date).

II. Regulatory Framework

Stark Law (42 U.S.C. § 1395nn; 42 C.F.R. § 411.350–.389)

• Prohibits physician self-referrals for DHS when financial relationship exists
• Strict liability — no intent requirement
• Penalties: claim denial, refunds, CMPs up to $100k/arrangement, FCA exposure

DHS categories — map to org's actual service lines: clinical lab, PT/OT/speech, radiology/imaging, radiation therapy, DME, home health, outpatient Rx, inpatient/outpatient hospital.

Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b); 42 C.F.R. § 1001.952)

• Criminal prohibition on remuneration to induce referrals
• "One purpose" test — any intent to induce suffices
• Penalties: felony (up to 5 yrs), $100k CMP/violation, treble damages, exclusion

Key Safe Harbors (42 C.F.R. § 1001.952):

| Safe Harbor | Critical Elements | |---|---| | Employment | ≥1 yr, FMV, not volume/value-based, commercially reasonable | | Personal services | Written agreement, specific services, ≥1 yr, FMV, aggregate set in advance | | Space rental | Written agreement, specific space, ≥1 yr, FMV, not volume/value-based | | Equipment rental | Written agreement, specific equipment, ≥1 yr, FMV, not volume/value-based | | Practitioner recruitment | Written agreement, underserved area benefit, net cost to practice |

III. Risk Assessment

Arrangement inventory — catalog: employed physicians, independent contractor PSAs, medical directorships, physician ownership/JV interests, space/equipment leases, recruitment incentives, call coverage, research collaborations with referral overlap.

Risk scoring matrix:

| Factor | High (3) | Medium (2) | Low (1) | |---|---|---|---| | Referral volume | Top decile | Average | Minimal | | DHS dollar value | >$500k/yr | $100k–$500k | <$100k | | Compensation variability | Volume-linked | Partially variable | Fixed only | | FMV verification | >24 mo stale | 12–24 mo | <12 mo current | | Written agreement | Missing/expired | Gaps in terms | Fully compliant |

Referral pattern analysis: compare per-physician volumes to peer benchmarks; flag post-arrangement spikes >20%; identify exclusive referral patterns; validate utilization against clinical norms.

IV. Operational Policies

Arrangement lifecycle:

| Phase | Requirement | |---|---| | Pre-execution | Submit to compliance ≥30 days before effective date | | Content | Parties, services, time commitment, specific compensation, term dates, termination provisions | | FMV threshold | Third-party valuation if >$50k/yr OR high referral volume | | Execution | Signed before services begin or compensation paid | | Annual review | Verify compliance, FMV currency, services rendered | | Renewal | Re-assess ≥60 days before expiration |

Prohibited practices: productivity bonuses tied to DHS volume; per-click leases varying with referred-patient use; director stipends fluctuating with referrals; above/below-FMV rental rates; free/discounted services to referral sources; undocumented recruitment guarantees.

V. Training Program

| Audience | Timing | Focus | |---|---|---| | All employees | Hire + annual | Basic framework, reporting obligations | | Physician contracting | Quarterly | Arrangement structuring, exceptions/safe harbors | | Business development | Quarterly | Relationship ID, prohibited inducements | | Billing/coding | Semi-annual | DHS claim requirements | | Physicians | Onboarding + annual | Personal liability, referral restrictions | | Compliance staff | Ongoing | Regulatory updates, enforcement trends |

Require scenario-based assessments, passing score threshold, documented attendance.

VI. Monitoring & Audit

Continuous monitoring: automated tracking of referral volumes, compensation payments, utilization rates, contract expirations. Alert on volume breaches, >20% pattern deviations, approaching expirations.

Annual internal audit (risk-based sampling, weight toward high-risk):

• Written agreement completeness
• Exception/safe harbor satisfaction
• Current FMV documentation
• Services actually rendered (time records, deliverables)
• Referral patterns within normal parameters
• DHS billing compliance

External review: every 3 years minimum, or after mergers, enforcement actions, major regulatory changes.

VII. Reporting & Non-Retaliation

Channels: third-party hotline (24/7, multilingual), compliance email, physical mail, intranet portal, in-person to compliance/HR.

Non-retaliation policy — covers termination, demotion, pay reduction, schedule changes, hostile environment.

Triage:

| Severity | Criteria | Response | |---|---|---| | Critical | Ongoing violation, significant financial/safety risk | Immediate investigation, suspend arrangement | | High | Systemic compliance failure | Expedited investigation (30 days) | | Standard | Isolated potential violation | Standard investigation (60 days) |

VIII. Investigation & Remediation

1. Immediate assessment — interim protective measures (suspend arrangement, restrict access)
2. Engage external counsel for potential criminal violations or significant exposure
3. Document scope, evidence, interviews, timeline, findings, regulatory citations
4. Present findings to Compliance Officer / Committee / Board per severity

Corrective actions: terminate/restructure non-compliant arrangements, recover overpayments, discipline responsible individuals, enhance controls, self-disclose when required (OIG Self-Disclosure Protocol / CMS SRDP), verify implementation.

IX. Documentation & Retention

Per-arrangement file: executed agreement + amendments, FMV analysis with methodology, board/committee approval minutes, compliance review certification, evidence of services rendered, compensation records, correspondence, annual review documentation.

Retention: minimum 10 years from last service/payment; longer if litigation/investigation pending. Secure storage with role-based access.

X. Governance

| Role | Responsibilities | |---|---| | Compliance Officer | Day-to-day oversight, direct board access, authority to challenge business decisions | | Compliance Committee | Quarterly review of findings, corrective actions, regulatory developments | | Board of Directors | Ultimate oversight, annual effectiveness review, resource allocation |

Annual program review: policy currency, monitoring effectiveness, training outcomes, reporting utilization, benchmark against OIG guidance and HCCA standards.

Regulatory change protocol: monitor CMS/OIG final rules, advisory opinions, enforcement actions → draft amendment → legal review → Committee → Board → communication/training.

Pitfalls & Checks

• Stark exceptions are mandatory — if no exception applies, the arrangement violates the statute regardless of intent
• AKS safe harbors are voluntary — failure to meet one doesn't automatically establish violation, but arrangement must still lack improper intent
• Cite specific statutory provisions throughout (§ 1395nn, § 1320a-7b(b), 42 C.F.R. § 411.357, § 1001.952)
• Use directive language ("must," "shall") — not aspirational ("should generally")
• Address state-level self-referral and anti-kickback statutes where applicable
• Include CMS SRDP and OIG Self-Disclosure Protocol procedures
• Verify all regulatory citations are current before finalizing [VERIFY]
• Tailor DHS categories, safe harbors, and examples to the organization's actual service lines

---

It looks like I don't have write permission to the file. Could you grant write access so I can save the rewrite, or would you like to copy the content above directly?