Health Law Alliance represents providers, pharmacies, and healthcare companies that settle a False Claims Act investigation and are then required to sign a Corporate Integrity Agreement with the HHS Office of Inspector General. A Corporate Integrity Agreement, or CIA, is the instrument OIG uses in exchange for not seeking the settling entity's exclusion from Medicare, Medicaid, and other federal health care programs. For a compliance officer, signing the CIA starts a five-year operational obligation that reaches claims review, arrangements with referral sources, self-reporting, and daily financial exposure through stipulated penalties.
What a Corporate Integrity Agreement Requires
A Corporate Integrity Agreement typically runs for a five-year term. In exchange for OIG's forbearance on exclusion, the entity agrees to maintain a compliance officer and compliance committee, adopt or revise a code of conduct, train employees on federal health care program requirements, restrict employment of federally excluded persons, and submit implementation and annual compliance reports. OIG reserves the CIA requirement for settlements involving a pattern of misconduct, prior history with the government, or facts suggesting the entity's existing compliance program failed to prevent the underlying conduct.
Independent Review Organization Obligations
Most CIAs require the entity to retain an Independent Review Organization, or IRO, an outside firm approved by OIG to test compliance annually. The IRO's scope, set out in the CIA itself, commonly includes a claims review testing billed claims for coding and medical necessity accuracy, a systems review evaluating the entity's billing and compliance infrastructure, and an arrangements review testing financial relationships with referral sources against the Anti-Kickback Statute and Stark Law. The entity generally has 30 days from the CIA's effective date to engage an IRO and submit its qualifications to OIG, which can reject the selection and require a new engagement.
Self-Reporting Obligations Under the CIA
A CIA obligates the entity to self-report Reportable Events to OIG, generally within 30 days of discovery. OIG defines a Reportable Event to include a substantial overpayment, a matter a reasonable person would consider a probable violation of law applicable to a federal health care program, the employment of an ineligible person, or the entity's own bankruptcy filing. An entity operating under a CIA can resolve civil monetary penalty liability tied to conduct disclosed as a Reportable Event through the CIA itself, without a separate filing under the OIG Self-Disclosure Protocol, though counsel should confirm which path better protects the entity before disclosing.
Stipulated Penalties and Breach Consequences
Every CIA contains stipulated penalty provisions that convert a compliance failure into an immediate financial liability, independent of any new fraud finding. Penalties commonly run up to $2,500 per day for a continuing failure to comply with a CIA obligation, with a separate stipulated penalty of $50,000 for each false certification submitted in a required report. A material breach of the CIA is an independent basis for exclusion from federal health care programs, with the length of exclusion set at OIG's discretion up to five years per material breach. This structure gives the CIA its own enforcement mechanism, separate from the underlying settlement.
A Corporate Integrity Agreement is negotiated once, but it operates for five years, and every stipulated penalty and reportable event obligation inside it becomes the compliance officer's daily responsibility.
What Is Actually Negotiable in Scope
Once OIG decides a CIA is warranted, the settlement amount and the requirement itself are largely fixed, but the operational terms inside the agreement remain open to negotiation. Counsel can negotiate the definition of a substantial overpayment, the sampling methodology and acceptable error rate the IRO applies in its claims review, the breadth of the arrangements review, and, in some cases, the CIA's term. An entity that demonstrates a functioning compliance program at the outset, and performs well in its first-year IRO review, can build a record supporting a narrower scope or an earlier release from the agreement. This negotiation is best conducted by counsel, because OIG's attorneys are assessing the entity's credibility on every point raised.
Why Early Legal Counsel Is Critical
It is critical that healthcare providers and compliance officers promptly retain experienced healthcare defense counsel upon receiving notice that OIG intends to require a Corporate Integrity Agreement, or upon identifying a potential Reportable Event under an existing CIA. Early legal intervention can protect the entity's rights, shape the scope of the IRO's review before it is finalized, avoid inadvertent admissions in self-reports, preserve applicable defenses, and allow counsel to communicate with OIG on the entity's behalf. Delaying legal representation can significantly affect the outcome of a matter and expose the entity to unnecessary stipulated penalties and exclusion risk.
How Health Law Alliance Can Help
Health Law Alliance represents healthcare providers and compliance officers through the full life cycle of a Corporate Integrity Agreement, from negotiating the operational terms of a proposed CIA to advising on Reportable Event disclosures and defending against alleged breaches. If your organization is facing a potential False Claims Act settlement or has been notified that OIG intends to require a CIA, contact us for a free, confidential consultation.
