Healthcare providers, physicians and third-party payors will play a primary role in the recommendation and prescription of our products for which we obtain marketing approval. Our operations, including any arrangements with healthcare providers, physicians, third-party payors and customers may expose us to broadly applicable fraud and abuse and other healthcare laws that may affect the business or financial arrangements and relationships through which we would market, sell and distribute our products. The healthcare laws that may affect our ability to operate include, but are not limited to:
- The federal Anti-Kickback Statute, which prohibits any person or entity from, among other things, knowingly and willfully soliciting, receiving, offering or paying any remuneration, directly or indirectly, overtly or covertly, in cash or in kind, to induce or reward either the referral of an individual for, or the purchase, order or recommendation of an item or service reimbursable, in whole or in part, under a federal healthcare program, such as the Medicare and Medicaid programs. The term "remuneration" has been broadly interpreted to include anything of value. The federal Anti-Kickback Statute has also been interpreted to apply to arrangements between pharmaceutical manufacturers, on the one hand, and prescribers, purchasers, and formulary managers, on the other hand. There are a number of statutory exceptions and regulatory safe harbors protecting some common activities from prosecution, but the exceptions and safe harbors are drawn narrowly and require strict compliance in order to offer protection.
- Federal civil and criminal false claims laws, such as the False Claims Act ("FCA"), which can be enforced by private citizens through civil qui tam actions, and the Civil Monetary Penalties Law prohibit individuals or entities from, among other things, knowingly presenting, or causing to be presented, false, fictitious or fraudulent claims for payment of federal funds, and knowingly making, using or causing to be made or used a false record or statement material to a false or fraudulent claim to avoid, decrease or conceal an obligation to pay money to the federal government. For example, pharmaceutical companies have been prosecuted under the FCA in connection with their alleged off-label promotion of drugs, purportedly concealing price concessions in the pricing information submitted to the government for government price reporting purposes, and allegedly providing free product to customers with the expectation that the customers would bill federal healthcare programs for the product. In addition, a claim including items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the FCA. As a result of a modification made by the Fraud Enforcement and Recovery Act of 2009, a claim includes "any request or demand" for money or property presented to the U.S. government. In addition, manufacturers can be held liable under the FCA even when they do not submit claims directly to government payors if they are deemed to "cause" the submission of false or fraudulent claims.
- HIPAA, which, among other things, imposes criminal liability for executing or attempting to execute a scheme to defraud any healthcare benefit program, including private third-party payors, knowingly and willfully embezzling or stealing from a healthcare benefit program, or willfully obstructing a criminal investigation of a healthcare offense, and creates federal criminal laws that prohibit knowingly and willfully falsifying, concealing or covering up a material fact or making any materially false, fictitious or fraudulent statement or representation, or making or using any false writing or document knowing the same to contain any materially false, fictitious or fraudulent statement or entry in connection with the delivery of or payment for healthcare benefits, items or services.
- HIPAA, as amended by HITECH, and its implementing regulations, which impose privacy, security and breach reporting obligations with respect to individually identifiable health information upon entities subject to the law, such as health plans, healthcare clearinghouses and certain healthcare providers, known as covered entities, and their respective business associates and covered subcontractors that perform services for them that involve individually identifiable health information. HITECH also created new tiers of civil monetary penalties, amended HIPAA to make civil and criminal penalties directly applicable to business associates, and gave state attorneys general new authority to file civil actions for damages or injunctions in U.S. federal courts to enforce HIPAA laws and seek attorneys' fees and costs associated with pursuing federal civil actions.
- Federal and state consumer protection and unfair competition laws, which broadly regulate marketplace activities and activities that potentially harm consumers.
- The federal transparency requirements under the Physician Payments Sunshine Act, which requires, among other things, certain manufacturers of drugs, devices, biologics and medical supplies reimbursed under Medicare, Medicaid, or the Children's Health Insurance Program to report annually to the Centers for Medicare & Medicaid Services (the "CMS") information related to payments and other transfers of value provided to physicians, as defined by such law, certain other healthcare professionals, and teaching hospitals and physician ownership and investment interests, including such ownership and investment interests held by a physician's immediate family members.
- State and foreign laws that are analogous to each of the above federal laws, such as anti-kickback and false claims laws, that may impose similar or more prohibitive restrictions, and may apply to items or services reimbursed by non-governmental third-party payors, including private insurers.
- State and foreign laws that require pharmaceutical companies to implement compliance programs, comply with the pharmaceutical industry's voluntary compliance guidelines and the relevant compliance guidance promulgated by the federal government, or to track and report gifts, compensation and other remuneration provided to physicians and other healthcare providers; state laws that require the reporting of marketing expenditures or drug pricing, including information pertaining to and justifying price increases; state and local laws that require the registration of pharmaceutical sales representatives; state laws that prohibit various marketing-related activities, such as the provision of certain kinds of gifts or meals; state laws that require the posting of information relating to clinical trials and their outcomes; and other federal, state and foreign laws that govern the privacy and security of health information or personally identifiable information in certain circumstances, including state health information privacy and data breach notification laws which govern the collection, use, disclosure, and protection of health-related and other personal information, many of which differ from each other in significant ways and often are not pre-empted by HIPAA, thus requiring additional compliance efforts.
Ensuring that our operations and business arrangements with third parties comply with applicable healthcare laws and regulations is costly. If our operations are found to be in violation of any of these laws or any other current or future healthcare laws that may apply to us, we may be subject to significant civil, criminal and administrative penalties, damages, fines, disgorgement, imprisonment, exclusion from government funded healthcare programs, such as Medicare and Medicaid, contractual damages, reputational harm, diminished profits and future earnings, additional reporting obligations and oversight if we become subject to a corporate integrity agreement or other agreement to resolve allegations of non-compliance with these laws, and the curtailment or restructuring of our operations, any of which could substantially disrupt our operations. Although effective compliance programs can mitigate the risk of investigation and prosecution for violations of these laws, these risks cannot be entirely eliminated. Any action against us for an alleged or suspected violation could cause us to incur significant legal expenses and could divert our management's attention from the operation of our business, even if our defense is successful.