We are required to comply with extensive and complex laws and regulations at the federal, state and local government levels in the U.S. and other countries where we operate. We, and certain of our employees, also are required to hold permits and licenses and to comply with the operational and security standards of various governmental bodies and agencies. Any failure to comply with these laws and regulations or any failure to maintain the necessary permits, licenses or approvals, or to comply with the required standards, could disrupt our operations and/or adversely affect our results of operations, financial condition and cash flows.
Among the U.S. healthcare related laws that we are subject to include the Anti-kickback Statute, the Stark Law, the FCA and similar state laws relating to fraud, waste and abuse. The requirements of these laws are complex and subject to varying interpretations, and it is possible that regulatory authorities could challenge our policies and practices. If we fail to comply with these laws, we could be subject to federal or state government investigations or qui tam actions (false claims cases initiated by private parties purporting to act on behalf of federal or state governments), which could result in civil or criminal sanctions, including the loss of licenses or the ability to participate in Medicare, Medicaid and other federal and state healthcare programs. Such sanctions and damages could adversely affect our results of operations, financial condition and cash flows.
Our global operations are also subject to risks of violation of laws, including those that prohibit improper payments to and bribery of government officials and other individuals and organizations. These laws include the U.S. FCPA, the U.K. Bribery Act and other similar laws and regulations in foreign jurisdictions, any violation of which could result in substantial liability and a loss of reputation in the marketplace. Failure to comply with these laws also could subject us to civil and criminal penalties that could adversely affect our business, results of operations, financial condition and cash flows.
Our Patient Direct segment is a Medicare-certified supplier and participates in state Medicaid programs. Failure to comply with applicable standards and regulations could result in civil or criminal sanctions, including the loss of our ability to participate in Medicare, Medicaid and other federal and state healthcare programs.
We collect, handle and maintain patient-identifiable health information and other sensitive personal and financial information, which are subject to federal, state and foreign laws that regulate the use and disclosure of such information. Regulations currently in place continue to evolve, and new laws in this area could further restrict our ability to collect, handle and maintain personal or patient information, or could require us to incur additional compliance costs, either of which could have an adverse impact on our results of operations and cash flows. Violations of federal (such as
HIPAA), state or foreign laws (such as the EU GDPR or U.K. GDPR) concerning privacy and data protection could subject us to civil or criminal penalties, breach of contract claims, costs for remediation and harm to our reputation.
Our operations, including our billing practices and our arrangements with healthcare providers, are also subject to extensive federal and state laws and audits, inquiries and investigations from government agencies. For example, in connection with the settlement agreements resolving the investigation conducted by the U.S. Attorney's Office for the Southern District of New York regarding civil investigative demands, Apria was required to enter into a five-year CIA with the HHS OIG. The CIA provides that Apria will, among other things, impose certain oversight obligations on Apria's board of directors, provide certain management certifications, and continue or implement, as applicable certain compliance training and education. The CIA also requires Apria to engage independent third parties to review compliance with the CIA, as well as certain reporting, certification, record retention and notification requirements. Failure to comply with the obligations under the CIA could have material consequences for us including monetary penalties or exclusion from participation in federal healthcare programs.
Applicable laws may be directed at payments for the products and services we provide, conduct of our operations, preventing fraud and abuse, and billing and reimbursement from government programs such as Medicare, Medicaid and from commercial Payors. These laws may have related rules and regulations that are subject to interpretation and may not provide definitive guidance as to their application to our operations, including our arrangements with hospitals, physicians, and other healthcare providers.
Federal and state governments have contracted with private entities to audit and recover revenue resulting from payments made in excess of those permitted by federal and state benefit program rules. These entities include, but are not limited to, Recovery Audit Contractors that are responsible for auditing Medicare claims, Unified Program Integrity Contractors that are responsible for the identification of suspected fraud through medical record review and Medicaid Integrity Contractors, that are responsible for auditing Medicaid claims. We believe audits, inquiries, and investigations from these contractors and others will occur from time to time in the ordinary course of our business. We also may be subject to increased audits from commercial Payors and pursuant to federal, civil, and criminal statutes that relate to our billings to commercial Payors. Our efforts to be responsive to these audits, inquiries, and investigations may result in substantial costs and divert management's time and attention away from the operation of our business. Moreover, an adverse outcome with respect to any audit, inquiry or investigation may result in damage to our reputation, or in fines, penalties or other sanctions imposed on us. Such pending or future audits, inquiries, or investigations, or the public disclosure of such matters, could have a material adverse effect on our business, financial condition, results of operations, cash flows, capital resources and liquidity.
Federal and state laws are broadly worded and may be interpreted or applied by prosecutorial, regulatory, or judicial authorities in ways that we cannot predict. Additionally, in many instances, there are only limited publicly available guidelines and methodologies for determining errors with certain audits. As a result, there can be a significant lack of clarity regarding required documentation and audit methodology. The clarity and completeness of each patient medical file, some of which is the work product of physicians not employed by us, is essential to successfully challenging any payment denials.
Certain of our operations engage in Ethylene Oxide (EtO) sterilization of medical products either directly or indirectly through third-parties. In the U.S., several regulators, including the EPA, the FDA, and agencies at the state and local level, play a role in regulating the use of EtO sterilization. Recent announcements of the temporary or permanent closure of sterilization facilities operated by others have been associated with state and/or local regulatory or other legal action related to EtO emissions at those facilities. We have taken and will continue to take measures to comply with all applicable emissions regulations and to reduce emissions. However, no assurance can be given that current or future legislative or regulatory action, or current or future litigation to which we may become a party, will not significantly increase the costs of conducting sterilization operations or curtail or eliminate the use of EtO in our operations. Further, we could be liable for damages and fines as a result of legislative or regulatory action or litigation, which could have a material adverse effect on our financial condition, results of operations, cash flows, capital resources and liquidity.
Accordingly, our arrangements and business practices may be the subject of government scrutiny or be found to violate applicable laws. If federal or state government officials challenge our operations or arrangements with third parties that we have structured based upon our interpretation of these laws, rules, and regulations, such a challenge could potentially disrupt our business operations and we may incur substantial defense costs, even if we successfully defend our interpretation of these laws, rules, and regulations. If the government or third parties successfully challenge our interpretation, such a challenge may have a material adverse effect on our business, financial condition, results of operations, cash flows, capital resources and liquidity.