A Corporate Integrity Agreement (CIA) turns a healthcare fraud settlement into years of court-ordered oversight. Negotiated with the Department of Health and Human Services Office of Inspector General (OIG) as the price of avoiding exclusion from Medicare and Medicaid, a CIA typically runs five years and layers a compliance officer, a compliance committee, an Independent Review Organization (IRO), and a 30-day reporting clock for Reportable Events on top of the provider's existing compliance program. Missing an obligation carries a price: Stipulated Penalties running up to $2,500 for each day of noncompliance, and, for a material breach, exclusion, the very outcome the CIA was negotiated to avoid.
How a Corporate Integrity Agreement Begins
OIG negotiates a CIA as part of settling a civil health care fraud case, most often one built on the False Claims Act, the Anti-Kickback Statute, or the Stark Law. The investigation behind a CIA can start years earlier, with a grand jury subpoena, a civil investigative demand (CID), or a target letter. In exchange for the provider's agreement to the CIA's obligations, OIG agrees not to seek exclusion over the underlying conduct. A CIA typically runs five years from its effective date, and within 90 days of that date the provider must have a compliance officer and compliance committee in place.
The Independent Review Organization's Reviews
Within 90 days of the effective date, the provider must also engage an Independent Review Organization, an outside accounting firm, law firm, or consulting firm that OIG can reject as unacceptable. The IRO's Claims Review tests a sample of paid claims for correct coding, medical necessity, and adequate documentation, and where the CIA follows an Anti-Kickback Statute or Stark Law settlement, the IRO also runs an Arrangements Review of the provider's financial relationships with referral sources. Both reports flow into the provider's Annual Report to OIG, due 60 days after the close of each Reporting Period.
Reportable Events and the 30-Day Clock
A Reportable Event under a CIA reaches beyond fraud the provider already knows about. OIG's published CIAs define it to include a substantial overpayment, a probable violation of criminal, civil, or administrative law, the employment of an individual excluded from Federal health care programs, or the filing of a bankruptcy petition. Once the provider determines a Reportable Event exists, it has 30 days to notify OIG in writing, and if the event involves an overpayment, 60 days from identification to repay it. The determination date, not the date the underlying conduct occurred, starts the clock, which makes the internal process for deciding when a matter becomes reportable as important as the report itself.
A Corporate Integrity Agreement converts a settled healthcare fraud case into five years of reporting deadlines, IRO reviews, and stipulated penalties that can compound into the exclusion the agreement was meant to prevent.
Stipulated Penalties and the Risk of Exclusion
OIG's published CIAs commonly set Stipulated Penalties of up to $2,500 for each day the provider fails to meet a specific obligation, from engaging an IRO to filing an Annual Report to reporting a Reportable Event within the 30-day window, and up to $50,000 for each false certification submitted to OIG. A material breach, defined in the agreement to include an unresolved Stipulated Penalties demand, a false certification, or a missed IRO or reporting obligation, is an independent basis for exclusion from Medicare and Medicaid, for a term OIG sets at its discretion of up to five years for each breach.
Why Early Legal Counsel Is Critical
It is critical that providers under a Corporate Integrity Agreement engage healthcare defense counsel before a Reportable Event determination, an IRO finding, or a Stipulated Penalties demand forces the issue. Counsel experienced with CIA compliance can shape how the internal review process characterizes a potential Reportable Event, manage the provider's response to IRO findings before they harden into a report to OIG, and negotiate directly with OIG once a Stipulated Penalties Demand Letter or a Notice of Material Breach arrives. Waiting until OIG has already made a preliminary determination narrows the provider's options and can turn a curable compliance gap into the material breach that supports exclusion.
How Health Law Alliance Can Help
Health Law Alliance defends providers through the full life of a Corporate Integrity Agreement, from structuring the compliance program at the outset through Reportable Event determinations, IRO engagements, and any Stipulated Penalties or material breach dispute that follows. Our bench includes a former federal prosecutor and former senior compliance officers who have sat on the provider's side of an OIG compliance program. If your organization is operating under a CIA or negotiating one as part of a settlement, contact us today for a free consultation.
