18.2 Healthcare Compliance Laws

Healthcare Compliance Laws

Quick Answer: FACHE-level compliance competence means leaders can spot when competition law, conflict-of-interest rules, EMTALA, Stark/fraud-and-abuse frameworks, and surprise-billing rules affect strategy, contracts, ED operations, physician arrangements, and patient financial communications—and build programs that detect and correct problems early.

The Laws and Regulations domain pairs statute knowledge with executive judgment. Items often present a business proposal (joint venture, ED diversion, physician lease, out-of-network staffing) and ask what legal risk dominates or what action is most appropriate. Memorizing acronyms without operational meaning is insufficient.

The Compliance Program as Management Infrastructure

Federal sentencing guidelines and HHS OIG guidance emphasize effective compliance programs: leadership commitment, standards and procedures, training, open reporting without retaliation, monitoring/auditing, consistent discipline, and corrective action. For healthcare executives, compliance is not a binder on a shelf. It is how the organization prevents fraud and abuse, protects emergency access, manages physician financial relationships, avoids anticompetitive conduct, and meets consumer billing protections.

Boards should receive meaningful compliance metrics (hotline trends, audit findings, EMTALA events, Stark/AKS reviews, billing disputes)—not only “we are compliant” assurances.

Antitrust: Competition Law in Healthcare Markets

U.S. antitrust laws (including the Sherman Act, Clayton Act, and FTC Act, as enforced by DOJ/FTC and private plaintiffs) prohibit unreasonable restraints of trade, monopolization in certain contexts, and some mergers that substantially lessen competition. Healthcare has been a sustained enforcement priority because price, quality, and access effects are large.

Executive-relevant antitrust risk patterns:

Collaborations that improve quality and efficiency can be lawful when properly structured; “we are nonprofits so antitrust does not apply” is false. Labor-side wage-fixing and no-poach agreements among competitors have also drawn enforcement attention—HR and strategy teams must coordinate with counsel.

Conflicts of Interest (COI)

Conflicts of interest arise when personal, financial, or professional interests could improperly influence organizational decisions. Healthcare COI spans board members, executives, employed and independent physicians, researchers, and supply-chain decision-makers. Legal and ethical frameworks include state nonprofit corporation duties of loyalty, IRS private inurement/private benefit concerns for 501(c)(3) entities, fraud-and-abuse statutes when referrals and remuneration mix, research COI rules, and organizational policies.

Executive COI system elements:

1. Disclosure of financial interests, outside employment, vendor relationships, and family conflicts on a scheduled and transaction-triggered basis.
2. Recusal from deliberations and votes where conflicts exist.
3. Fairness procedures for related-party transactions (comparability data, independent approval).
4. Physician arrangement review so “medical directorships,” leases, and call pay reflect fair market value and commercial reasonableness.
5. Culture that treats undisclosed conflicts as integrity failures, not paperwork oversights.

COI is both a legal risk and a trust risk. Patients and communities expect decisions about equipment, formularies, and referrals to serve care—not personal gain.

EMTALA: Emergency Medical Treatment and Labor Act

EMTALA requires Medicare-participating hospitals with dedicated emergency departments to provide an appropriate medical screening examination (MSE) to individuals who come seeking emergency care, and to provide stabilizing treatment for emergency medical conditions or an appropriate transfer if the hospital cannot stabilize within its capability/capacity. It is a civil enforcement statute with CMS and HHS OIG roles and potential private actions in some circumstances; penalties and termination risk make it board-visible.

Operational EMTALA duties leaders must resource:

• Come to the hospital / dedicated ED: On-campus presentations and certain provider-based outpatient scenarios can trigger duties; policies must reflect current CMS interpretation, not folklore.
• No delay for insurance or payment questions before screening/stabilization.
• Central log and documentation of MSE, refusal of treatment, transfers.
• On-call panel adequacy and response expectations aligned to capability.
• Transfer rules: stabilizing treatment within capability, qualified personnel/equipment, acceptance by receiving facility when required, medical benefits outweigh risks documented.
• Recipient hospital obligations for higher-level-of-care capability/capacity in defined circumstances.

Classic failure modes: “diversion” that functions as dumping, steering uninsured patients away before MSE, obstetric unit practices that fail labor-and-delivery screening standards, and transfer disputes driven by payer preference rather than clinical stability. Capacity constraints are real—but they must be managed within EMTALA, not by ignoring it.

Stark Law (Physician Self-Referral)

The Stark Law (physician self-referral law) generally prohibits a physician from referring Medicare/Medicaid patients for designated health services (DHS) to an entity with which the physician (or immediate family member) has a financial relationship, unless an exception applies. Stark is often described as strict liability on the civil side: intent is not required for the core prohibition, which makes documentation and exception fit critical.

Designated health services include inpatient/outpatient hospital services, clinical lab, physical/OT/speech therapy, radiology and certain imaging, DME, home health, outpatient prescription drugs, and others listed in regulation. Common exception themes (high-level) include employment relationships, personal service arrangements, space/equipment leases, isolated transactions, and certain value-based or limited remuneration arrangements—each with precise regulatory conditions (writing, fair market value, commercial reasonableness, volume/value restrictions, etc.).

Executive management of Stark risk:

• Inventory all physician financial relationships (employment, medical directorships, call coverage, leases, joint ventures, recruitment, medical staff leadership stipends).
• Use consistent fair market value and commercial reasonableness processes with competent valuation support when needed.
• Align contracts, time logs, and actual duties—paper compliance without performance is a red flag.
• Coordinate with the Anti-Kickback Statute (AKS) analysis: arrangements can raise both Stark and AKS issues; AKS is intent-based and criminal/civil with safe harbors that are similar but not identical to Stark exceptions.
• Build approval workflows so strategy teams cannot “handshake” a physician deal that billing operations will later struggle to defend.

No Surprises Act

The No Surprises Act (NSA) protects patients from many unexpected out-of-network bills in emergency services and certain non-emergency services at in-network facilities involving out-of-network providers, and establishes processes such as good-faith estimates for uninsured/self-pay patients and independent dispute resolution (IDR) between plans and providers in qualifying payment disputes. Exact operational rules evolve through federal regulation and guidance; executives must ensure revenue cycle, scheduling, patient access, and contracted medical groups implement current requirements.

Leadership implications:

1. Patient communications: clear notices, consent processes where allowed for certain non-emergency out-of-network care, and avoidance of surprise balance billing in protected scenarios.
2. Contracting strategy: network adequacy and facility-based physician alignment (anesthesia, radiology, emergency, pathology, neonatology) reduce friction and patient harm.
3. IDR readiness: documentation of qualifying payment amounts, claims data, and decision rights—do not treat IDR as purely a back-office curiosity.
4. Good-faith estimates and uninsured workflows: scheduling and financial counseling must produce timely, usable estimates.
5. Complaint handling: patient billing complaints may signal NSA process failures, not only “bad debt.”

Integrating Compliance Laws into Strategy

Before approving a major initiative, FACHE leaders should force a multidisciplinary review:

• Growth/M&A: antitrust + Stark/AKS + COI + payer contract assignment.
• ED and behavioral health access: EMTALA + state boarding/transfer rules + capacity ethics.
• Physician alignment: Stark exceptions, AKS safe harbors, FMV, medical staff bylaws consistency.
• Consumer pricing transparency: NSA + hospital price transparency rules + charity care policies.
• Board and executive deals: COI, intermediate sanctions risk for tax-exempt entities, disclosure.

Bottom Line for Executives

Healthcare compliance laws are not obstacles invented by lawyers to slow strategy. They encode public policies: competitive markets, undivided loyalty, emergency access regardless of ability to pay, separation of referral judgment from improper financial influence, and protection of patients from ambush bills. Organizations that design compliant structures early move faster later—because they are not unwinding illegal contracts, OCR/CMS crises, or community trust failures after the fact.