Healthcare providers, physicians and third-party payors in the U.S. and elsewhere will play a primary role in the recommendation and prescription of any current or future product candidates for which we obtain marketing approval. Our future arrangements with third-party payors and customers may expose us to broadly applicable fraud and abuse and other healthcare laws and regulations, including, without limitation, the federal Anti-Kickback Statute and the federal False Claims Act, which may constrain the business or financial arrangements and relationships through which we sell, market and distribute any current or future product candidates for which we obtain marketing approval. In addition, we may be subject to transparency laws and patient privacy regulation by the federal and state governments and by governments in foreign jurisdictions in which we conduct our business. The applicable federal, state and foreign healthcare laws and regulations that may affect our ability to operate include, but are not necessarily limited to:
- the federal Anti-Kickback Statute, which prohibits, among other things, persons from knowingly and willfully soliciting, offering, receiving or providing remuneration, directly or indirectly, in cash or in kind, to induce or reward, or in return for, either the referral of an individual for, or the purchase, order or recommendation of, any good or service, for which payment may be made under federal and state healthcare programs, such as Medicare and Medicaid;- federal civil and criminal false claims laws and civil monetary penalty laws, including the federal False Claims Act, which impose criminal and civil penalties, including civil whistleblower or qui tam actions, against individuals or entities for knowingly presenting, or causing to be presented, to the federal government, including the Medicare and Medicaid programs, claims for payment that are false or fraudulent or making a false statement to avoid, decrease or conceal an obligation to pay money to the federal government; the federal Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), which imposes criminal and civil liability for executing a scheme to defraud any healthcare benefit program or making false statements relating to healthcare matters;- HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009, and their respective implementing regulations, which impose obligations on covered healthcare providers, health plans, and healthcare clearinghouses, as well as their business associates that create, receive, maintain or transmit individually identifiable health information for or on behalf of a covered entity, with respect to safeguarding the privacy, security and transmission of individually identifiable health information;- the federal Open Payments program, which requires manufacturers of certain drugs, devices, biologics and medical supplies for which payment is available under Medicare, Medicaid or the Children's Health Insurance Program, with specific exceptions, to report annually to CMS, information related to "payments or other transfers of value" made to "covered recipients," which include physicians (defined to include doctors, dentists, optometrists, podiatrists and chiropractors, and teaching hospitals) and applicable manufacturers. Applicable group purchasing organizations also are required to report annually to CMS the ownership and investment interests held by the physicians and their immediate family members. The SUPPORT for Patients and Communities Act added to the definition of covered recipient practitioners including physician assistants, nurse practitioners, clinical nurse specialists, certified registered nurse anesthetists and certified nurse-midwives effective in 2022. Data collection began on August 1, 2013 with requirements for manufacturers to submit reports to CMS by March 31, 2014 and 90 days after the end of each subsequent calendar year. Disclosure of such information was made by CMS on a publicly available website beginning in September 2014; and - analogous state and foreign laws and regulations, such as state anti-kickback and false claims laws, which may apply to sales or marketing arrangements and claims involving healthcare items or services reimbursed by non-governmental third-party payors, including private insurers; state and foreign data privacy or data protection laws and regulations, such as state health data privacy legislation, state data breach legislation, or general state privacy legislation such as California's Consumer Privacy Act (CCPA) and its implementing regulations; state and foreign laws that require pharmaceutical companies to comply with the pharmaceutical industry's voluntary compliance guidelines and the relevant compliance guidance promulgated by the federal government or otherwise restrict payments that may be made to healthcare providers; state and foreign laws that require drug manufacturers to report information related to payments and other transfers of value to physicians and other healthcare providers or marketing expenditures; and state and foreign laws governing the privacy and security of health information in certain circumstances, many of which differ from each other in significant ways and often are not preempted by HIPAA, thus complicating compliance efforts.
Efforts to ensure that our business arrangements with third parties will comply with applicable healthcare laws and regulations may involve substantial costs. It is possible that government authorities will conclude that our business practices may not comply with current or future statutes, regulations or case law involving applicable fraud and abuse or other healthcare laws and regulations. If our operations are found to be in violation of any of these laws or any other governmental regulations that may apply to us, we may be subject to significant civil, criminal and administrative penalties, including, without limitation, damages, fines, imprisonment, exclusion from participation in government healthcare programs, such as Medicare and Medicaid, and the curtailment or restructuring of our operations, which could have a material adverse effect on our businesses. If any of the physicians or other healthcare providers or entities with whom we expect to do business, including our collaborators, is found not to be in compliance with applicable laws, it may be subject to criminal, civil or administrative sanctions, including exclusions from participation in government healthcare programs, which could also materially affect our businesses.