We are subject to extensive regulation by the U.S. federal government and the states and other countries in which we conduct our business. U.S. federal government healthcare laws apply when we submit a claim on behalf of a U.S. federal healthcare program beneficiary, or when a customer submits a claim for an item or service that is reimbursed under a U.S. federal government-funded healthcare program, such as Medicare or Medicaid. The laws that affect our ability to operate our business in addition to the Federal Food, Drug, and Cosmetic Act and FDA regulations include, but are not limited to, the following:
- the Federal Anti-Kickback Statute, an intent-based federal criminal statute which prohibits knowingly and willfully offering, providing, soliciting or receiving remuneration of any kind to induce or reward, or in return for, referrals or the purchase, lease, order or recommendation or arranging of any items or services reimbursable by a federal healthcare program;- the Federal Civil False Claims Act, which imposes civil penalties, including through civil whistleblower or "qui tam" actions, for knowingly submitting or causing the submission of false or fraudulent claims of payment to the federal government, knowingly making, using or causing to be made or used a false statement or record material to payment of a false claim or avoiding, decreasing or concealing an obligation to pay money to the federal government;- the Federal Criminal False Claims Act, which is similar to the Federal Civil False Claims Act and imposes criminal liability on those that make or present a false, fictitious or fraudulent claim to the federal government;- Medicare laws and regulations that prescribe requirements for coverage and reimbursement, including the conditions of participation for DME suppliers, and laws prohibiting false claims or unduly influencing selection of products for reimbursement under Medicare and Medicaid;- healthcare fraud statutes that prohibit false statements and improper claims to any third-party payer;- the Federal Physician Self-Referral Law, commonly known as the Stark law, which, absent an applicable exception, prohibits physicians from referring Medicare and Medicaid patients to an entity for the provision of certain designated health services ("DHS"), including DME, if the physician (or a member of the physician's immediate family) has an impermissible financial relationship with that entity and prohibits the DHS entity from billing for such improperly referred services;- the Federal Beneficiary Anti-Inducement Statute, which prohibits the offering of any remuneration to a beneficiary of Medicare or Medicaid that is likely to influence that beneficiary's choice of provider or supplier. This can include, but is not limited to, inappropriate provision of patient services including financial assistance. Recent government investigations have focused on this particular prohibition. There are established exceptions from liability, but we cannot guarantee that all of our practices will fall squarely within those exceptions;- similar state anti-kickback, false claims, insurance fraud and self-referral laws, which may not be limited to government-reimbursed items, as well as state laws that require us to maintain permits or licenses to distribute DME;- federal and state accreditation and licensing requirements applicable to DME providers and equivalent requirements in other jurisdictions;- the U.S. Foreign Corrupt Practices Act, which can be used to prosecute companies in the U.S. for arrangements with physicians or other parties outside the U.S. if the physician or party is a government official of another country and the arrangement violates the law of that country;- the Federal Trade Commission Act, the Lanham Act and similar federal and state laws regulating truthfulness in advertising and consumer protection; and - the Federal Physician Payments Sunshine Act, the French Sunshine Act and similar state and foreign laws, which require periodic reporting of payments and other transfers of value made to U.S. and French-licensed physicians, teaching hospitals, and in the U.S., physician assistants, nurse practitioners, clinical nurse specialists, certified nurse anesthetists, and certified nurse-midwives.
Similar laws exist in the EU, individual EU member states and other countries. These laws are complemented by EU or national professional codes of practices.
HIPAA provides data privacy and security provisions for safeguarding medical information. Additionally, states in the U.S. are enacting local privacy laws (e.g., California). In the EU, the GDPR harmonizes data privacy laws and rules on the processing of personal data, including patient and employee data, across the EU. The GDPR has a number of strict data protection and security requirements for companies processing data of EU residents, including when such data is transferred outside of the EU. Additionally, we need to comply with analogous privacy laws in other jurisdictions in which we operate, such as the Israeli Privacy Protection Law, the Asia Pacific Economic Cooperation Privacy Framework, and Japan's Act on the Protection of Personal Information.
The laws and codes of practices applicable to us are subject to evolving interpretations. Moreover, certain U.S. federal and state laws regarding healthcare fraud and abuse and certain laws in other jurisdictions regarding interactions with healthcare professionals and patients are broad and we may be required to restrict certain of our practices to be in compliance with these laws. Healthcare fraud and abuse laws also are complex and even minor, inadvertent irregularities, or even the perception of impropriety, can potentially give rise to claims that a statute has been violated.
Any violation of these laws could have a material adverse effect on our business, prospects, financial condition and results of operations and cause our stock price to decline. Similarly, if there is a change in law, regulation or administrative or judicial interpretations, we may have to change our business practices or our existing business practices could be challenged as unlawful, which likewise could have a material adverse effect on our business, prospects, financial condition and results of operations and cause our stock price to decline. Fines and penalties for violations of these laws and regulations could include severe criminal and civil penalties, including, for example, significant monetary damages, exclusion from participation in the federal healthcare programs and permanent disbarment of key employees. Any penalties, damages, fines, curtailment or restructuring of our operations would adversely affect our ability to operate our business, our prospects and our financial results. In addition, any action against us for violation of these laws, even if we successfully defend against it, could cause us to incur significant legal expenses, divert our management's attention from the operation of our business and damage our reputation.
In addition, although we believe that we have the required licenses, permits and accreditation to dispense our Products in the future, a regulator could find that we need to obtain additional licenses or permits. We also may be subject to mandatory reaccreditation and other requirements in order to maintain our billing privileges. Failure to satisfy those requirements could cause us to lose our privileges to bill governmental and private payers. If we are required to obtain permits or licenses that we do not already possess, we also may become subject to substantial additional regulation or incur significant expense.
To ensure compliance with Medicare, Medicaid and other regulations, federal and state governmental agencies and their agents, including DME MACs, may conduct audits of our operations to support our claims submitted for reimbursement of items furnished to beneficiaries and health care providers. Depending on the nature of the conduct found in such audits and whether the underlying conduct could be considered systemic, the resolution of these audits could adversely impact our revenue, financial condition and results of operations.