These laws may impact, among other things, our clinical research program, as well as our proposed and future sales, marketing and education programs. In particular, the promotion, sales and marketing of healthcare items and services is subject to extensive laws and regulations designed to prevent fraud, kickbacks, self-dealing and other abusive practices, including, without limitation, the federal Anti-Kickback Statute and the federal False Claims Act, which may constrain the business or financial arrangements and relationships through which such companies sell, market and distribute pharmaceutical products. These laws and regulations may restrict or prohibit a wide range of pricing, discounting, marketing and promotion, sales commission, customer incentive and other business arrangements. We may also be subject to federal, state and foreign laws governing the privacy and security of individual identifiable health information and other personally identifiable information. The U.S. healthcare laws and regulations that may affect our ability to operate include, but are not limited to:
- the federal Anti-Kickback Statute, which prohibits, among other things, knowingly and willfully soliciting, receiving, offering or paying any remuneration (including any kickback, bribe or rebate), directly or indirectly, overtly or covertly, in cash or in kind, to induce, or in return for, either the referral of an individual, or the purchase, lease, order or recommendation of any good, facility, item or service for which payment may be made, in whole or in part, under a federal healthcare program, such as the Medicare and Medicaid programs. A person or entity can be found guilty of violating the statute without actual knowledge of the statute or specific intent to violate it. In addition, a claim including items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the False Claims Act, or FCA. The Anti-Kickback Statute has been interpreted to apply to arrangements between pharmaceutical manufacturers on the one hand and prescribers, purchasers, and formulary managers on the other. There are a number of statutory exceptions and regulatory safe harbors protecting some common activities from prosecution;- federal civil and criminal false claims laws and civil monetary penalty laws, including the FCA, which prohibit, among other things, individuals or entities from knowingly presenting, or causing to be presented, false or fraudulent claims for payment to, or approval by Medicare, Medicaid, or other federal healthcare programs, knowingly making, using or causing to be made or used a false record or statement material to a false or fraudulent claim or an obligation to pay or transmit money to the federal government, or knowingly concealing or knowingly and improperly avoiding or decreasing or concealing an obligation to pay money to the federal government. Manufacturers can be held liable under the FCA even when they do not submit claims directly to government payors if they are deemed to "cause" the submission of false or fraudulent claims. The FCA also permits a private individual acting as a "whistleblower" to bring actions on behalf of the federal government alleging violations of the FCA and to share in any monetary recovery;- the federal Health Insurance Portability and Accountability Act of 1996, or HIPAA, which created new federal criminal statutes that prohibit knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program or obtain, by means of false or fraudulent pretenses, representations, or promises, any of the money or property owned by, or under the custody or control of, any healthcare benefit program, regardless of the payor (e.g., public or private) and knowingly and willfully falsifying, concealing or covering up by any trick or device a material fact or making any materially false statements in connection with the delivery of, or payment for, healthcare benefits, items or services relating to healthcare matters. Similar to the federal Anti-Kickback Statute, a person or entity can be found guilty of violating HIPAA without actual knowledge of the statute or specific intent to violate it;- HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009, or HITECH, and their respective implementing regulations, which impose, among other things, requirements on certain covered healthcare providers, health plans, and healthcare clearinghouses as well as their respective business associates that perform services for them that involve the use, or disclosure of, individually identifiable health information, relating to the privacy, security and transmission of individually identifiable health information without appropriate authorization. HITECH also created new tiers of civil monetary penalties, amended HIPAA to make civil and criminal penalties directly applicable to business associates, and gave state attorneys general new authority to file civil actions for damages or injunctions in federal courts to enforce the federal HIPAA laws and seek attorneys' fees and costs associated with pursuing federal civil actions; the federal Physician Payment Sunshine Act, created under the Patient Protection and Affordable Care Act, and its implementing regulations, which require manufacturers of drugs, devices, biologicals and medical supplies for which payment is available under Medicare, Medicaid or the Children's Health Insurance Program (with certain exceptions) to report annually to the HHS information related to payments or other transfers of value made to physicians (defined to include doctors, dentists, optometrists, podiatrists and chiropractors) and teaching hospitals, as well as ownership and investment interests held by physicians and their immediate family members. Effective January 1, 2022, these reporting obligations will extend to include transfers of value made to certain non-physician providers such as physician assistants and nurse practitioners;- federal consumer protection and unfair competition laws, which broadly regulate marketplace activities and activities that potentially harm consumers; and - analogous state and foreign laws and regulations, such as state anti-kickback and false claims laws, which may apply to sales or marketing arrangements and claims involving healthcare items or services reimbursed by non-governmental third-party payors, including private insurers, and may be broader in scope than their federal equivalents; state and foreign laws that require pharmaceutical companies to comply with the pharmaceutical industry's voluntary compliance guidelines and the relevant compliance guidance promulgated by the federal government or otherwise restrict payments that may be made to healthcare providers; state and foreign laws that require drug manufacturers to report information related to payments and other transfers of value to physicians and other healthcare providers or marketing expenditures; and state and foreign laws governing the privacy and security of individually identifiable health information and other personally identifiable information in certain circumstances, many of which differ from each other in significant ways and often are not preempted by HIPAA, thus complicating compliance efforts.
The distribution of pharmaceutical products is subject to additional requirements and regulations, including extensive record-keeping, licensing, storage and security requirements intended to prevent the unauthorized sale of pharmaceutical products.
The scope and enforcement of each of these laws is uncertain and subject to rapid change in the current environment of healthcare reform, especially in light of the lack of applicable precedent and regulations. Federal and state enforcement bodies have recently increased their scrutiny of interactions between healthcare companies and healthcare providers, which has led to a number of investigations, prosecutions, convictions and settlements in the healthcare industry. Ensuring business arrangements comply with applicable healthcare laws, as well as responding to possible investigations by government authorities, can be time- and resource-consuming and can divert a company's attention from the business.
The failure to comply with any of these laws or regulatory requirements subjects entities to possible legal or regulatory action. Depending on the circumstances, failure to meet applicable regulatory requirements can result in civil, criminal and administrative penalties, damages, fines, disgorgement, individual imprisonment, possible exclusion from participation in federal and state funded healthcare programs, contractual damages and the curtailment or restructuring of our operations, as well as additional reporting obligations and oversight if we become subject to a corporate integrity agreement or other agreement to resolve allegations of non-compliance with these laws. Any action for violation of these laws, even if successfully defended, could cause a pharmaceutical manufacturer to incur significant legal expenses and divert management's attention from the operation of the business. Prohibitions or restrictions on sales or withdrawal of future marketed products could materially affect business in an adverse way.
Because of the breadth of these laws and the narrowness of the statutory exceptions and regulatory safe harbors available, it is possible that some of our business activities, or our arrangements with physicians, some of who receive stock options as compensation, could be subject to challenge under one or more of such laws. If we or our employees, independent contractors, consultants, commercial partners and vendors violate these laws, we may be subject to investigations, enforcement actions and/or significant penalties. We have adopted a code of business conduct and ethics, but it is not always possible to identify and deter employee misconduct or business noncompliance, and the precautions we take to detect and prevent inappropriate conduct may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations. Efforts to ensure that our business arrangements will comply with applicable healthcare laws may involve substantial costs. It is possible that governmental and enforcement authorities will conclude that our business practices may not comply with current or future statutes, regulations or case law interpreting applicable fraud and abuse or other healthcare laws and regulations. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business, including the imposition of civil, criminal and administrative penalties, damages, disgorgement, monetary fines, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, contractual damages, reputational harm, diminished profits and future earnings, additional reporting requirements and/or oversight if we become subject to a corporate integrity agreement or similar agreement to resolve allegations of non-compliance with these laws, and curtailment of our operations, any of which could adversely affect our ability to operate our business and our results of operations.