OIG Self-Disclosure Protocol: What a Submission Requires

A healthcare provider that discovers billing conduct implicating the Anti-Kickback Statute, a false claim, or an excluded employee faces a choice with a hard deadline behind it: disclose to the Office of Inspector General (OIG) under the Health Care Fraud Self-Disclosure Protocol (SDP), or wait for the government to find it first. Whether that disclosure earns a faster resolution and a release from OIG's permissive exclusion authority, instead of a rejected submission and a longer review, depends on whether it meets every one of the SDP's specific content and documentation requirements from the outset.

Which Matters Belong in a Self-Disclosure

The SDP is available only for conduct that potentially violates a federal criminal, civil, or administrative law carrying civil monetary penalty exposure, including theories like those covered in Medically Unnecessary Services as an FCA Theory. An ordinary overpayment or billing error, with no accompanying statutory violation, goes back through the Medicare contractor or payor's voluntary refund process instead of the SDP. An arrangement raising only Stark law exposure, with no Anti-Kickback Statute violation attached, belongs with CMS's Self-Referral Disclosure Protocol, not OIG's; an arrangement touching both laws belongs in the SDP, and OIG decides which protocol fits when the line is unclear.

What a Complete Submission Must Show

A submission identifies the disclosing party by name, address, provider and tax identification numbers, and the government payors it bills, with a designated point of contact, and states plainly which federal statute the conduct potentially violates. OIG has said hedged language, describing conduct only as touching the Social Security Act without acknowledging a violation, slows or defeats a submission. The narrative names the conduct, the time period, and every implicated person's role. Naming an employee or contractor on the OIG exclusion list also requires that person's job duties, employment dates, and the screening failure behind the hire. The disclosing party reports its internal investigation's findings, describes the corrective action already taken, and has an authorized official certify that the submission is truthful and made in good faith.

How Damages Are Calculated

For false-billing conduct, the damages estimate comes from reviewing every affected claim, or a statistically valid random sample of at least 100 claims projected using the mean point estimate; the review may not net out any underpayments found along the way. OIG expects a report describing the review's objective, the claim population, the data sources relied on, and the reviewer's qualifications, plus the sampling plan itself when a sample is used, drawn using OIG's free RAT-STATS software. For conduct touching the Anti-Kickback Statute or the Stark law, damages generally track the amount Federal health care programs paid for the claims tied to the arrangement, or a remuneration-based estimate covering the full payment made between the parties.

Cooperation and What Follows Submission

OIG ties every benefit of the SDP to the disclosing party's cooperation: a thorough investigation, complete information, a single point of contact, and responsiveness to follow-up requests. A provider already under a government inquiry, including one that began as a sealed qui tam relator's complaint, remains eligible for the SDP as long as the disclosure is made in good faith rather than as a maneuver to get ahead of that inquiry. Inside an FCA Investigation: The Defense Timeline describes how a parallel government review interacts with an SDP submission once the Department of Justice is already involved.

A hedged violation or an incomplete damages estimate can cost a disclosing party the release and the reduced exposure the SDP was built to provide.

What Resolution Brings

A resolved SDP matter ends in a settlement agreement and an OIG release from its permissive exclusion authorities, most often without a corporate integrity agreement. OIG has stated a presumption against requiring integrity obligations from a cooperating disclosing party, and between 2016 and 2020 it resolved 330 SDP settlements without imposing any integrity measures. Failing to cooperate removes a party from the SDP and puts the conduct back under OIG's civil monetary penalty authority and the risk of an OIG exclusion.

Why Early Legal Counsel Is Critical

It is critical that healthcare providers promptly retain experienced healthcare defense counsel before submitting to the SDP or responding to a related government inquiry. Early legal intervention can protect the provider's rights, ensure the submission meets OIG's specific content and damages-methodology requirements, keep a certification from being signed on an incomplete investigation, and let counsel communicate with OIG on the provider's behalf.

How Health Law Alliance Can Help

Health Law Alliance has handled 5,000+ matters across healthcare regulatory and audit defense over 25+ years, including self-disclosures to OIG under the SDP. If your practice has identified conduct that may belong in a self-disclosure, contact Health Law Alliance's False Claims Act defense attorneys for a free, confidential consultation before the submission window closes.