Our business operations and current and future arrangements with investigators, healthcare professionals, consultants, third-party payors, patient organizations, and customers, may expose us to broadly applicable fraud and abuse and other healthcare laws and regulations. These laws may constrain the business or financial arrangements and relationships through which we conduct our operations, including how we research, market, sell and distribute our product candidates, if approved. Such laws include:
- the U.S. federal Anti-Kickback Statute, which prohibits, among other things, persons or entities from knowingly and willfully soliciting, offering, receiving, or providing any remuneration (including any kickback, bribe, or certain rebate), directly or indirectly, overtly or covertly, in cash or in kind, to induce or reward, or in return for, either the referral of an individual for, or the purchase, lease, order, or recommendation of, any good, facility, item, or service, for which payment may be made, in whole or in part, under U.S. federal and state healthcare programs such as Medicare and Medicaid. A person or entity does not need to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation. The U.S. federal Anti-Kickback Statute has been interpreted to apply to arrangements between pharmaceutical manufacturers on the one hand and prescribers, purchasers and formulary managers on the other hand;- the U.S. federal false claims and civil monetary penalties laws, including the civil False Claims Act, or FCA, which, among other things, impose criminal and civil penalties, including through civil whistleblower or qui tam actions, against individuals or entities for knowingly presenting, or causing to be presented, to the U.S. federal government, claims for payment or approval that are false or fraudulent, knowingly making, using or causing to be made or used, a false record or statement material to a false or fraudulent claim, or from knowingly making a false statement to avoid, decrease or conceal an obligation to pay money to the U.S. federal government. In addition, the government may assert that a claim including items and services resulting from a violation of the U.S. federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the FCA. A claim includes "any request or demand" for money or property presented to the federal government. In addition, manufacturers can be held liable under the FCA even when they do not submit claims directly to government payors if they are deemed to "cause" the submission of false or fraudulent claims;- the U.S. federal Health Insurance Portability and Accountability Act of 1996, or HIPAA, which imposes criminal and civil liability for, among other things, knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program or obtain, by means of false or fraudulent pretenses, representations, or promises, any of the money or property owned by, or under the custody or control of, any healthcare benefit program, regardless of the payor (e.g., public or private) and knowingly and willfully falsifying, concealing or covering up a material fact or making any materially false statement, in connection with the delivery of, or payment for, healthcare benefits, items or services. Similar to the U.S. federal Anti-Kickback Statute, a person or entity does not need to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation;- HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009, or HITECH, and their respective implementing regulations, which impose, among other things, specified requirements relating to the privacy, security and transmission of individually identifiable health information without appropriate authorization by covered entities subject to the rule, such as health plans, healthcare clearinghouses and healthcare providers as well as their business associates that perform certain services involving the use or disclosure of individually identifiable health information. HITECH also created new tiers of civil monetary penalties, amended HIPAA to make civil and criminal penalties directly applicable to business associates and gave state attorneys general new authority to file civil actions for damages or injunctions in federal courts to enforce the federal HIPAA laws and seek attorneys' fees and costs associated with pursuing federal civil actions;- the FDCA, which prohibits, among other things, the adulteration or misbranding of drugs, biologics and medical devices;- the U.S. federal legislation commonly referred to as the Physician Payments Sunshine Act, enacted as part of the ACA, and its implementing regulations, which requires certain manufacturers of drugs, devices, biologics, and medical supplies that are reimbursable under Medicare, Medicaid, or the Children's Health Insurance Program to report annually to the government information related to certain payments and other transfers of value to physicians and teaching hospitals, as well as ownership and investment interests held by the physicians described above and their immediate family members; and - analogous U.S. state laws and regulations, including: state anti-kickback and false claims laws, which may apply to our business practices, including but not limited to, research, distribution, sales, and marketing arrangements and claims involving healthcare items or services reimbursed by any third-party payor, including private insurers; state laws that require pharmaceutical companies to comply with the pharmaceutical industry's voluntary compliance guidelines and the relevant compliance guidance promulgated by the U.S. federal government, or otherwise restrict payments that may be made to healthcare providers and other potential referral sources; state laws and regulations that require drug manufacturers to file reports relating to pricing and marketing information, which requires tracking gifts and other remuneration and items of value provided to healthcare professionals and entities; and state laws governing the privacy and security of health information in certain circumstances, many of which differ from each other in significant ways and often are not preempted by HIPAA, thus complicating compliance efforts.
Because of the breadth of these laws and the narrowness of the statutory exceptions and regulatory safe harbors available under such laws, it is possible that some of our business activities, including our consulting agreements and other relationships with physicians and other healthcare providers, some of whom receive stock or stock options as compensation for their services, could be subject to challenge under one or more of such laws. Ensuring that our current and future internal operations and business arrangements with third parties comply with applicable healthcare laws and regulations will involve substantial costs. It is possible that governmental authorities will conclude that our business practices do not comply with current or future statutes, regulations, agency guidance or case law involving applicable fraud and abuse or other healthcare laws and regulations.
If our operations are found to be in violation of any of the laws described above or any other governmental laws and regulations that may apply to us, we may be subject to the imposition of civil, criminal and administrative penalties, damages, disgorgement, monetary fines, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, individual imprisonment, contractual damages, reputational harm, diminished profits and future earnings, additional reporting requirements or oversight if we become subject to a corporate integrity agreement or similar agreement to resolve allegations of non-compliance with these laws, and curtailment or restructuring of our operations, any of which could adversely affect our ability to operate our business and our results of operations. If any of the physicians or other providers or entities with whom we expect to do business are found to not be in compliance with applicable laws, they may be subject to criminal, civil or administrative sanctions, including exclusions from government funded healthcare programs and imprisonment, which could affect our ability to operate our business. Further, defending against any such actions can be costly, time-consuming and may require significant personnel resources. Therefore, even if we are successful in defending against any such actions that may be brought against us, our business may be impaired.