1. Regulatory Framework of Federal Healthcare Enforcement
Federal healthcare enforcement involves agencies and contractors with different statutory responsibilities. The source of an inquiry can affect the available investigative tools, administrative remedies, and potential civil or criminal exposure.
Unified Program Integrity Contractors and Administrative Audits
Unified Program Integrity Contractors (UPICs) perform program-integrity work for the Centers for Medicare & Medicaid Services, including review of Medicare billing data and medical records. UPIC reviews can address potential overpayments, coverage and billing compliance, and suspected fraud, while CMS retains authority over payment suspensions and other program actions. These reviews can become relevant to a broader Medicare Billing Fraud matter when the billing issues extend beyond routine claim correction.
HHS-OIG Authority and Administrative Sanctions
The Office of Inspector General of the Department of Health and Human Services has civil monetary penalty authority under 42 U.S.C. § 1320a-7a and separate exclusion authority under federal healthcare statutes. HHS-OIG can pursue administrative remedies while its investigative work may also contribute to civil or criminal enforcement. The applicable knowledge or intent standard depends on the statute and alleged conduct.
Department of Justice Criminal and Civil Proceedings
The Department of Justice handles matters involving potential civil False Claims Act liability and federal criminal violations. DOJ attorneys may use Civil Investigative Demands under 31 U.S.C. § 3733 in FCA investigations, while federal prosecutors can use grand jury subpoenas and other criminal investigative tools. These matters can involve Government and Internal Investigations concerning the False Claims Act or 18 U.S.C. § 1347.
2. Key Statutory Elements in Federal Defense
Medicare fraud allegations can implicate statutes with different liability and intent requirements. Separating those elements is necessary when evaluating billing conduct, referral arrangements, financial relationships, and statements submitted to federal healthcare programs.
False Claims Act and Scienter Thresholds
The civil False Claims Act imposes liability for specified conduct involving false or fraudulent claims submitted knowingly. Under 31 U.S.C. § 3729(b), actual knowledge, deliberate ignorance, and reckless disregard can satisfy the knowledge requirement, while negligence alone does not. Coding or medical-necessity disputes therefore require examination of what the defendant actually knew or believed when the claims were submitted through a potential False Claims Act matter.
Anti-Kickback Statute Safe Harbors
The Anti-Kickback Statute, 42 U.S.C. § 1320a-7b(b), prohibits specified knowing and willful conduct involving remuneration intended to induce or reward referrals or business payable by a federal healthcare program. Regulatory safe harbors under 42 C.F.R. § 1001.952 identify categories of arrangements that receive protection when the applicable regulatory conditions are satisfied. Financial relationships involving referrals may therefore require separate analysis in Kickback Investigations.
The Stark Law and Strict Liability
The physician self-referral law, 42 U.S.C. § 1395nn, generally restricts referrals for designated health services when a physician has a prohibited financial relationship with the entity furnishing those services, unless an exception applies. Unlike the Anti-Kickback Statute, Stark's referral and billing prohibitions do not depend on proving fraudulent intent. Claims prohibited by the statute are not payable, while refund and civil monetary penalty provisions apply under specified circumstances.
3. Administrative, Civil, and Criminal Enforcement Tracks

A UPIC record request is not the same event as a Civil Investigative Demand or grand jury subpoena. Identifying the legal authority behind an inquiry helps determine the applicable procedure, evidentiary standard, and potential consequences.
Administrative Audit and Payment Review
Administrative reviews conducted by UPICs or other CMS contractors can evaluate claim coding, medical necessity, and billing documentation. Depending on the applicable Medicare process and findings, disputed claims may lead to overpayment determinations, extrapolation issues, or payment-suspension proceedings. These administrative matters do not themselves establish individual criminal liability.
Civil False Claims Act Investigation
DOJ can investigate potential FCA violations, while private relators can bring qui tam actions subject to the statute's procedural requirements. Civil Investigative Demands can require documents, written answers, or testimony before the government files or intervenes in an FCA action. Civil FCA liability is determined under the statute's civil burden of proof and can include statutory penalties and multiple damages when its elements are established.
Criminal Investigation
Criminal healthcare fraud investigations may involve federal prosecutors, FBI agents, HHS-OIG special agents, and a federal grand jury. Investigative tools can include grand jury subpoenas and search warrants. A conviction under 18 U.S.C. § 1347 requires proof beyond a reasonable doubt of a knowing and willful execution or attempted execution of the prohibited healthcare fraud scheme.
4. Critical Steps during the Initial Phase of an Investigation
The initial response to a federal inquiry can affect the evidentiary record and positions taken in later proceedings. Preservation duties, privilege questions, and communications with investigators require separate analysis based on the type and stage of the inquiry.
Implementing Written Legal Holds
A subpoena, audit notice, or reasonably anticipated investigation can require review of existing preservation duties and routine deletion practices. A written legal hold may suspend relevant document destruction, electronic overwriting, or messaging auto-deletion practices. Under 18 U.S.C. § 1519, criminal exposure can arise when records are knowingly altered, destroyed, concealed, or falsified with the intent specified by the statute concerning a federal matter.
Attorney-Client Privilege and Internal Reviews
Attorney-client privilege can apply to confidential communications made for the purpose of obtaining or providing legal advice, while work-product protection involves a separate legal standard. An internal investigation conducted with counsel is not automatically privileged in its entirety. Disclosure of privileged communications to government investigators can create waiver issues depending on the information disclosed and the circumstances.
Managing Parallel Civil and Criminal Proceedings
Federal healthcare investigations can involve administrative, civil, and criminal matters arising from overlapping facts. Information supplied during an administrative review may become relevant to a separate government investigation or enforcement proceeding. Coordinated review allows counsel to compare factual positions and identify statements that may affect another proceeding.
5. Defense Strategies in Billing and Medical Necessity Disputes
Medicare billing fraud allegations often require comparison of billing records, clinical documentation, applicable coverage rules, and evidence concerning knowledge or intent. Legal and clinical review can test whether the government's theory reflects the underlying records and the requirements of the statute being invoked.
Good-Faith Reliance on Billing Guidance
Healthcare providers may rely on coverage determinations, coding instructions, and other billing guidance when submitting Medicare claims. Contemporaneous guidance and evidence concerning the provider's actual understanding can be relevant to FCA scienter when billing requirements were disputed or ambiguous.
Independent Clinical Peer Reviews
Government auditors may use statistical sampling when evaluating large groups of claims and calculating alleged overpayments. Independent clinical review can examine whether sampled medical records support the billed services and the government's medical-necessity conclusions.
Addressing Billing Discrepancies and Overpayments
When a provider identifies an overpayment, 42 U.S.C. § 1320a-7k(d) requires reporting and return by the applicable statutory deadline. The statute generally uses the later of 60 days after identification or the due date of a corresponding cost report, if applicable. The overpayment obligation should be analyzed separately from whether the facts satisfy FCA scienter or the intent elements of a criminal offense.
6. Frequently Asked Questions
What triggers a UPIC audit or federal Medicare investigation?
Federal scrutiny can arise from billing-data analysis, complaints or referrals, audit findings, or allegations raised through a qui tam action. The source of an inquiry does not by itself establish that fraud occurred.
Can a healthcare provider face criminal charges for Medicare billing errors?
A billing error alone does not establish the knowing and willful scheme required by 18 U.S.C. § 1347. Separate overpayment, civil FCA, or administrative obligations may still require analysis based on the underlying facts.
What is a Civil Investigative Demand (CID)?
A Civil Investigative Demand is an investigative demand authorized by 31 U.S.C. § 3733 for potential False Claims Act violations. It can require documents, written interrogatory responses, or oral testimony before the government commences an FCA proceeding.
How does attorney-client privilege apply during an internal corporate investigation?
Attorney-client privilege can cover confidential communications between corporate personnel and counsel when made for the purpose of obtaining or providing legal advice. An internal investigation is not automatically privileged in full, and the treatment of particular communications or materials depends on their purpose, content, and disclosure history.
02 Oct, 2026

