Healthcare providers, including physicians, and others play a primary role in the recommendation and prescribing of any products for which we may obtain marketing approval. Our business operations and arrangements with investigators, healthcare professionals, consultants, commercial partners, hospitals, third-party payers and customers may expose us to broadly applicable fraud and abuse and other healthcare laws. These laws may constrain the business or financial arrangements and relationships through which we research, market, sell and distribute the products for which we obtain marketing approval. Applicable federal and state healthcare laws include, but are not limited to, the following:
- the federal healthcare Anti-Kickback Statute, which prohibits, among other things, persons or entities from knowingly and willfully soliciting, offering, receiving or paying any remuneration (including any kickback, bribe, or rebate), directly or indirectly, overtly or covertly, in cash or in kind, to induce or reward either the referral of an individual for, or the purchase, lease, order or recommendation of, any good, facility, item or service, for which payment may be made, in whole or in part, under federal healthcare programs such as Medicare and Medicaid;- the federal civil and criminal false claims laws, which prohibit, among other things, individuals or entities from knowingly presenting, or causing to be presented, to the federal government, claims for payment or approval that are false or fraudulent or from knowingly making a false statement to improperly avoid, decrease or conceal an obligation to pay money to the federal government;- the federal Health Insurance Portability and Accountability Act of 1996, or HIPAA, which, among other things, imposes criminal liability for knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program or to obtain, by means of false or fraudulent pretenses, representations, or promises, any of the money or property owned by, or under the custody or control of, any healthcare benefit program, regardless of the payer (e.g., public or private) and knowingly or willfully falsifying, concealing, or covering up by any trick or device a material fact or making any materially false statement in connection with the delivery of, or payment for, healthcare benefits, items or services relating to healthcare matters;- HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act, or HITECH, and their implementing regulations, which impose certain obligations, including mandatory contractual terms, on covered healthcare providers, health plans and clearinghouses, and their respective business associates that perform services for them that involve the use, or disclosure of, individually identifiable health information, as well as their covered subcontractors with respect to safeguarding the privacy, security and transmission of individually identifiable health information;- foreign laws, regulations, standards and regulatory guidance which govern the collection, use, disclosure, retention, security and transfer of personal data, including the European Union General Data Privacy Regulation, or GDPR, which introduces strict requirements for processing personal data of individuals within the European Union;- the federal Physician Payment Sunshine Act, enacted as part of the Affordable Care Act, and its implementing regulations, which requires certain manufacturers of drugs, devices, biologicals and medical supplies to report annually to the Centers for Medicare & Medicare Services, or CMS information related to payments and other transfers of value provided to physicians, (defined to include, doctors, dentists, optometrists, podiatrists and chiropractors), other healthcare professionals (such as physician assistants and nurse practitioners), and teaching hospitals, as well as ownership and investment interests held by physicians and their immediate family members;- analogous state laws that may apply to our business practices, including but not limited to, state laws that require pharmaceutical companies to implement compliance programs and/or comply with the pharmaceutical industry's voluntary compliance guidelines; state laws that impose restrictions on pharmaceutical companies' marketing practices and require manufacturers to track and file reports relating to pricing and marketing information, which requires tracking and reporting gifts, compensation and other remuneration and items of value provided to healthcare professionals and entities, state and local laws that require the registration of pharmaceutical sales representatives, and state laws governing the privacy and security of health information in certain circumstances, many of which differ from each other in significant ways, with differing effects; and - the federal Foreign Corrupt Practices Act of 1977, United Kingdom Bribery Act 2010 and other similar anti-bribery laws in other jurisdictions which generally prohibit companies and their intermediaries from providing money or anything of value to officials of foreign governments, foreign political parties, or international organizations with the intent to obtain or retain business or seek a business advantage.
Recently, there has been a substantial increase in anti-bribery law enforcement activity by U.S. regulators, with more frequent and aggressive investigations and enforcement proceedings by both the Department of Justice and the SEC. A determination that our operations or activities are not, or were not, in compliance with United States or foreign laws or regulations could result in the imposition of substantial fines, interruptions of business, loss of supplier, vendor or other third-party relationships, termination of necessary licenses and permits, and other legal or equitable sanctions. Other internal or government investigations or legal or regulatory proceedings, including lawsuits brought by private litigants, may also follow as a consequence.
Efforts to ensure that our business arrangements with third parties will comply with applicable healthcare laws involve substantial costs. It is possible that governmental authorities will conclude that our or our partners' business practices may not comply with current or future statutes, regulations, agency guidance or case law involving applicable fraud and abuse or other healthcare laws. If our operations are found to be in violation of any of these or any other healthcare regulatory laws or any other governmental regulations that may apply to us, we may be subject to significant civil, criminal and administrative penalties, damages, fines, disgorgement, imprisonment, exclusion from government funded healthcare programs, such as Medicare and Medicaid, contractual damages, reputational harm, increased losses and diminished profits, additional oversight and reporting obligations if we become subject to a corporate integrity agreement or other agreement to resolve allegations of non-compliance with these laws, and the curtailment or restructuring of our operations any of which could adversely affect our ability to operate our business and our financial results. Any action against us for violation of these laws, even if we successfully defend against it, could cause us to incur significant legal expenses or divert our management's attention from the operation of our business.